Podcast #128: We chat with Kent C Dodds about why he loves React and discuss what life was like in the dark days before Git. Listen now.

Questions tagged [audit]

Database auditing involves observing a database so as to be aware of the actions of database users.

64 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
4
votes
0answers
1k views

Auditing access to a linked server

I have a linked server with SQL Server configured with the security option "For a login not defined in the above list, connections will: Be made using the login's current security context". What I ...
4
votes
0answers
2k views

Preferred Methods of Indexing MS SQL Server Audit Data to Splunk

What is your preferred method for indexing MS SQL Server for Splunk? I am collecting audit data in various environments by various means (profiler, app logs, and extended events) but I hope to ...
3
votes
2answers
1k views

Java Spring application Database triggers auditing - how to provide the right user that made the change

We are developing a new web application. one of the most basic requirement is to audit all entities changes into a separate table. We would like to use DB triggers for that purpose. We use MySQL as ...
2
votes
0answers
54 views

Questions and advice for complying with Federal tax information (FTI) Security Guidelines for Federal, State and Local Agencies per Publication 1075

I've been able to find writings on compliance topics (e.g. HIPAA, SARBANES-OXLEY, PCI DSS) but I haven't found much on FTI (Federal tax information) and Publication 1075 outside of the IRS website ...
2
votes
0answers
34 views

Any way to reduce the logging level of SQL Audit?

I set up SQL Audit according to STIG compliance using exactly the recommendations given by the compliance documents. The problem is that after doing so my server is generating roughly 5GB of Audit ...
2
votes
1answer
25 views

How to Audit any change in Permission?

Is there any way how to know "Who did change the permission on users" Like: who give read permission or owner on a database for a user? Using SQL Server 2014
2
votes
1answer
475 views

Oracle sys SYSDBA audit information to a report

I am trying to produce a monthly report on Audit. I am able to query the DBA_AUDIT_TRAIL, for all other users and no issue in that. I wanted to include the SYS/SYSDBA activities in this report and ...
2
votes
0answers
433 views

How unique does AUDIT_GUID need to be when creating a server audit?

When you use the GUI to create a server audit it creates a password worthy (no caps) value like e5abe6c5-f451-41f3-936c-b1da1c0786ce When you look to CREATE SERVER AUDIT with Transact-SQL it ...
2
votes
1answer
3k views

Where can I get error messages from SQL Server Auditing?

Where can I get information about the audit process failing to start? I'm setting up auditing on my MS SQL 2014 server. I've created an AUDIT and an associated AUDIT SPECIFICATION, but when I try to ...
2
votes
0answers
2k views

Storing table history - is this a good use case for Postgres's table partitioning / inheritance?

I currently have a products table which stores product information (title, description, tags, manufacturer, etc.) for a website. I would like to store historical information of changes to this table -...
2
votes
0answers
808 views

Audit Queries in SQL Server 2008 Including Start Stop Times

I have SQL Server 2008 Enterprise. I know how to set up auditing on the SQL Server, but it looks like the audit logs don't include query start/stop times. We currently use a product called Splunk to ...
1
vote
0answers
27 views

Oracle Still Auditing after NOAUDIT

We're redoing what is and isn't being auditing in a database my team has been put in charge of. Old audit settings were producing ~2M audit entries a day. Audit_trail parameter is set to DB. So we ...
1
vote
0answers
27 views

SQL Server Audit Specifications Not Writing to the Security Log

I've come across an issue where SQL Server database audit specifications have stopped writing to the security event log. The audit object will write events to a SQL audit file or the Application ...
1
vote
1answer
69 views

Audit trigger 91plus: setting up with proper role?

One of the solutions available for auditing in PostgreSQL is Audit trigger 91plus. wiki page github page There is a section in the wiki that is confusing to me: Changes by the table owner and ...
1
vote
0answers
22 views

How to measure durations (import, update) in Postgres DB?

we have a Postgres database which receives data by an extern web client. We would like to measure the duration of the UPDATE, INSERT and DELETE processes on our tables. Until now, we used the ...
1
vote
0answers
23 views

MS SQL 2008 R2, security and auditing

I have an 2008R2 SQL Server. There are a few AD groups added to the logins. Each group must have some permissions (and only these permissions if possible). Can someone help me with a few questions: ...
1
vote
0answers
108 views

SQL Server Agent Alert does not pick up some of Events from Application Log written by SQL Server Audit

My end goal is to be emailed when new object (schema, table, procedure etc.) is created / altered / dropped at one of my databases on SQL Server I created a server-level audit, that writes to Windows ...
1
vote
0answers
20 views

Any way to pass additional parameters to Azure SQL Audit?

We are exploring Azure SQL Auditing capabilities. It gives us a list of all the queries executed and some additional data which is good. However, field server_principal_name is always reflecting a ...
1
vote
0answers
828 views

SQL Audit and Truncating the Audit File

I'd like to set up SQL Audit on our SQL 2014 database and then setup a process where we read the contents of the audit file, on a periodic basis, using fn_get_audit_file() but then immediately ...
1
vote
0answers
1k views

How to audit database user password changes in oracle 11g?

I want to record how many times or which user accounts passwords were changed using Oracle database auditing techniques. I also want to record any password changes done to system user account.
1
vote
0answers
93 views

SQL Server Audit with dynamic sql

I'm trying to implement database level audit on some tables for tracking the changes. When I activate the audit I see the results in the audit file as seen below. UPDATE "MYDB"."dbo"."MyCompany$Mail ...
1
vote
3answers
739 views

I need to audit all actions for a user on all databases - not sure best way

I have a user on a SQL Server that is used for executing SSRS queries. This user was made a sysadmin before I started at this job. I want to remove the sysadmin permission, but not break any reports. ...
1
vote
0answers
253 views

How do I find the identity of a failed connection request

I have two Microsoft SQL servers, one running 2008 R2 Enterprise, one running 2012 Enterprise. Both are logging lots of failed connections requests due to untrusted domain : =============== SSPI ...
1
vote
0answers
948 views

Trying to install Audit_log Plugin on MySQL

I'm trying to install the Percona Audit_log plugin for my instance of MySQL. I ran it previously so I know it works ok with MySQL (I'm sure it says so in the documentation anyway). I have MySQL 5.5....
1
vote
0answers
81 views

Tracking MySQL DML Operations Source

We have a table that will get inserts and updates from 10 different jobs. We need to track each DML operation with its source i.e job name. We have used audit tables and triggers to get old and new ...
1
vote
0answers
109 views

Auditing a Single User in SQL Server

I have an application that accesses my SQL Server using a username\password. However our lead developer has access to this password and I suspect that he may be utilizing this outside of our terms of ...
1
vote
0answers
50 views

Repeated login issue SQL Server 2008 R2 (SSIS)

I'm trying to figure out an issue I'm currently having with an SQL Server connection - there has been a few issues with timeouts on a SSIS package, where it has failed a login attempt - however as far ...
1
vote
0answers
85 views

MySQL/Percona Audit Log Plugin Not Working

I've been looking to implemement the Percona Audit Log plugin. So far I have installed it and configured it, and it seems to be working ok. Except, I have installed it on a slave Database as I don't ...
1
vote
0answers
96 views

How To Log Select Statements from 1 User On 1 Table Into a Permanent Log Table

We have a centralized authentication library that 100+ applications use to authenticate users. That library has its own DB credentials. It would be extremely useful to log every time that library/user ...
1
vote
0answers
58 views

MySql Audit Changes from Db Admin, Security

I know that you can use triggers (before insert, update, delete) to track the changes in history tables. But this only works if the changes are made by the applications. But in some circumstance, ...
1
vote
0answers
751 views

dbms_audit_mgmt.clean_audit_trail not purging

my current database version is 11.2.0.3.0. I'm trying to purge my audit trail with a procedure. In my procedure I got this part of code: SYS.dbms_audit_mgmt.clean_audit_trail( audit_trail_type ...
1
vote
0answers
241 views

Is there are way to use Fine Grain Auditing to record Varray bind values?

I have an application, and would like to use Oracle's FGA (Fine Grained-Auditing) to record varray bind information. Specifically, I am using Oracle Spatial and need to know at what extent users are ...
1
vote
0answers
298 views

how can Audit All Login To SQL Server BY ODBC Connection

I MAke Report By Access Form On SQL database I make ODBC Connection For login To Update the data From Database Now I want Audit All logins To know who make Update today Or who make Update Now ? ...
1
vote
1answer
458 views

Auditing AS 400 DB2 library user access

As part of the testing to check for authorized users having access to applications and libraries on AS 400 systems, I need help to figure out a list of users having access to applications hosted on ...
0
votes
0answers
57 views

How can I import the fga_log$ table with impdp Oracle 12 R1

I am trying to import with impdp a save made as follows: expdp '"sys/mmm as sysdba"' full=y COMPRESSION=ALL DIRECTORY=LOGICS_EXPORTS COMPRESSION_ALGORITHM=BASIC LOGTIME=ALL CONTENT=ALL DUMPFILE=FULL-...
0
votes
0answers
12 views

SQL Server - Change AuditLevel on Linux hosted instance

just wondering if it's possible to change the AuditLevel on SQL Server 15.0.1800.32 (2019) hosted on Linux to "Failed logins only". Currently it's set to audit failed and successful logins and I ...
0
votes
0answers
19 views

Audit Trail Settings in SQL Server 2005

Where I can find the Audit Trail Settings in SQL Server 2005. Google search gives link to the topics like "how can we create audit tables", but I just need to know where I can see the current settings,...
0
votes
1answer
22 views

DB2 Audit Policy not producing EXECUTE data

I'm trying to set up an Audit facility on a DB2 AWSE V10.5 FP5 database running on Red Hat Linux Server 6.8. The definition for the policy is : ALTER AUDIT POLICY Failures CATEGORIES ...
0
votes
1answer
69 views

SQL-Server schema audit trigger - possible to get old view/sp/function definition?

I'm using the below database-level trigger for schema-change-auditing. It works fine, but if I do (drop view - create view), it only stores the sql that created the view, not the one that is dropped. ...
0
votes
0answers
43 views

SQL Server query auditing in production without drastically affecting performance

Has anyone successfully turned on SQL Server auditing (extended events) to keep track of queries being run in a production environment while having the database still perform well? If you did, I'm ...
0
votes
1answer
33 views

Using views with no insert table VS Audit tables

I(not a DBA) am considering designing Audit tables for an application that needs to be really fast as well fully audited (undo is not necessary). I referred to some from so and I found variations of ...
0
votes
2answers
69 views

SQL Server: Who created an audit and who altered it last?

I am trying to find out who created an audit (found under Audits) but I don't seem to have any luck. I've already tried many queries such as these: Blog 1, Blog 2, Blog 3 And SELECT * FROM [sys]....
0
votes
0answers
27 views

What SQL-Queries are created with ExaPlus to produce the menu in the left side?

I am considering what information should be provided under Article 15 (3) GDPR regarding the use of Exasol and ExaPlus.I don’t have SELECT ANY DICTIONARY system privilege to figure out this question ...
0
votes
1answer
42 views

How to check Auditing in Azure MSSQL MI?

I know that auditing is currently enabled in my azure MSSQL server, but how can I access these log files? Could it be done through SSMS? I need to know details about user activity in my databaase.
0
votes
0answers
25 views

Find when tables were deleted historically

We've had an issue where data tables have been deleted from a client applications SQL Server Database (Dynamics Navision). Unfortunately we had an outage and the SQL Servers were affected by this, ...
0
votes
0answers
70 views

Uninstall pgaudit?

I have installed pgaudit for my RDS instance in AWS following the instructions here. Now Im not satisfied and move the audit to the application layer and want to uninstall pgaudit. How can I do this? ...
0
votes
0answers
30 views

audit policy on a table does not log expected results

Running on Oracle Database 12c Enterprise Edition Release 12.1.0.2.0 - 64bit Production. Attempting to test auditing with the following steps: Created a new user, MYUSER. CREATE TABLE mytest ( id ...
0
votes
1answer
96 views

Is it possible to audit query results in SQL Server?

I want to find out if it is possible to audit the results of any query that gets executed on an instance of SQL Server. We currently have C2 auditing enabled, but this only showed what query was ...
0
votes
1answer
29 views

Question on Auditing 12C

I have the following configuration information: audit_sys_operations TRUE audit_file_dest ...
0
votes
1answer
134 views

Some queries not logging using RDS's SQL Server with C2 Auditing enabled

Similar to a past issue I had with audited queries not showing when using Extended Events, I'm having an issue with queries not logging when using C2 Auditing on an RDS SQL Server instance. (I would ...