Questions tagged [audit]

Database auditing involves observing a database so as to be aware of the actions of database users.

Filter by
Sorted by
Tagged with
0
votes
1answer
44 views

Why doesn't MariaDB server recognise Server Audit settings in config file?

I'm trying to implement the Server Audit plugin that is built-in with MariaDB 10.4. I've added the settings to the my.ini config file, running on Windows 10. [server] ... #Audit Settings ...
0
votes
0answers
4 views

monitor collection field in mongo

there is a way to check an audit on a field in a certain collection in Mongo. I mean when/who changed a filed in a collection? something that already happened
3
votes
2answers
2k views

Getting the only updated field using a postgreSQL trigger?

Is there any way to use a trigger which can get the only updated field from a record? I am just testing the audit trail log so it can save the field name alongside its other information when it is ...
0
votes
1answer
40 views

Why some triggers run exactly at the same time?

I wrote a simple audit with triggers. when a trigger called, the data inside the trigger (inserted and deleted rows) are sent through broker to a procedure to write them in the Master Audit Table. ...
0
votes
1answer
48 views

Audit OSQL command shutting down a SQL Server

I need to determine when, and by whom, a SQL Server was shutdown using the osql command. The osql command takes user name and password input. Are there any specific Windows Event logs generated to ...
2
votes
1answer
39 views

How to determine if Oracle Java classes are being used

Oracle EE 12.1.0.2 As part of a general clean up of a legacy application prior to a migration I'm trying to determine what objects are actually in use. There are some 230 JAVA class objects in my ...
0
votes
1answer
110 views

SQL-Server schema audit trigger - possible to get old view/sp/function definition?

I'm using the below database-level trigger for schema-change-auditing. It works fine, but if I do (drop view - create view), it only stores the sql that created the view, not the one that is dropped. ...
0
votes
0answers
88 views

Audit sysadmin activities on SQL Server

because of GDPR we need a system that monitores all activities that administrators does on an SQL Server. First goal is to audit sysadmin activities (selects too), but if possible activities of ...
0
votes
1answer
197 views

SQL Server Audit Clutters Error log

I have a Server level Audit running and informational messages are continuously placed in the SQL Error log (every hour): Audit: Server Audit: 65976, Initialized and Assigned State: STARTED Audit: ...
1
vote
1answer
68 views

Discover who changed SQL Server service state

There's any way to find out who stopped\restarted\started the following services ? SQL Server Database Engine SQL Server Agent SQL Server Analysis Services Thanks !
0
votes
1answer
72 views

Is “SQL Server Auditing” what I'm looking for?

Man... this feels like a broad question, so apologies in advance. The word "auditing" seems to have some depth in the DBA world, and I may not be asking the right question when I google. I'm trying ...
0
votes
0answers
70 views

How to use MariaDB server_audit plugin on MySQL

I need to log connections on MySQL on Windows. When I google it, I saw some advice to use MariaDB server_audit plugin on MySQL. (for example: here) So, I gave it a try, but I failed. I copied the ...
0
votes
0answers
20 views

SQL Server Audit catching SSIS metadata check

I'm wondering if what I'm experiencing is intended behavior or a bug with SQL Server Audits. I'm leaning towards bug. I set up an audit to monitor updates, inserts, & deletes to two tables. I ...
0
votes
1answer
43 views

query all audit entries defined with 'audit' command

what is the command to list all audit entries defined with audit command? Is there any command for it or maybe tableName to query from?
0
votes
0answers
25 views

No logs generate in audit.log file with audit plugin in MySQL in Linux?

No logs generate in audit.log file, even though: SELECT PLUGIN_NAME, PLUGIN_STATUS FROM INFORMATION_SCHEMA.PLUGINS WHERE PLUGIN_NAME LIKE 'audit%'; gives: | PLUGIN_NAME | PLUGIN_STATUS | +----------...
0
votes
1answer
95 views

Need help in leveraging MySQL auditing

We are setting up password rotation policy to rotate account/password quarterly. We are also planning to use MySQL/Maria/Percona Auditing. Need to figure out the most efficient and feasible way to ...
0
votes
1answer
60 views

Could you monitor all changes made within a postgresql database by somehow subscribing to the replication log?

I've been reading about postgresql replication and was wondering if it was somehow possible to listen to the replication binary log and push that to some tool like sumologic or splunk so that any ...
0
votes
0answers
68 views

Postgres Audit Table

Is it good practice to use a table in Postgres as an audit log for login events? The database has other tables like users, posts etc. If the backend receives a failed login, it would insert into the ...
2
votes
2answers
50 views

History table design for deletions in PG 11.5

I've got a question about the design of a history table in Postgres. The setup is that I've got a table that holds a needs list. A location recalculates in-demand items every five minutes, and pushes ...
0
votes
2answers
697 views

SQL Server LockMatchID Command

I am seeing calls like those shown below in my SQL Server Audit logs but have no idea what it means. A google search turned up a possible relationship with compiles/recompiles. The line (or similar ...
1
vote
0answers
64 views

Oracle Still Auditing after NOAUDIT

We're redoing what is and isn't being auditing in a database my team has been put in charge of. Old audit settings were producing ~2M audit entries a day. Audit_trail parameter is set to DB. So we ...
0
votes
0answers
225 views

How can I import the fga_log$ table with impdp Oracle 12 R1

I am trying to import with impdp a save made as follows: expdp '"sys/mmm as sysdba"' full=y COMPRESSION=ALL DIRECTORY=LOGICS_EXPORTS COMPRESSION_ALGORITHM=BASIC LOGTIME=ALL CONTENT=ALL DUMPFILE=FULL-...
0
votes
1answer
185 views

Oracle 12c how to purge the FGA audit records before a certain date

please I need to know how to purge the FGA audit records before a certain date, I have an Oracle 12c R1 database in which the audit with FGA is implemented, the tables of this are in a tablespace ...
1
vote
1answer
46 views

Auditing all User activities

Today I had to grant sysadmin rights for 2 users. ;( As I couldn't change that, I at least want to see, what they are doing, so I am looking for a way, to audit all activities by these 2 Users. ...
2
votes
1answer
55 views

SQL Server Audit File Metrics Information

I'm currently working in an environment that requires we enable SQL Server Audit, enterprise-wide. We generate .sqlaudit files as we have retention and access guidelines, and I'm finding that we need ...
5
votes
2answers
8k views

MySQL Script to automate creation of audit (history) tables and triggers?

For regulatory and fraud requirements, we need to record every change to most of the tables in the DB. The way we did this very successfully with a previous project is to have a copy of each table, ...
0
votes
1answer
91 views

Where is my audit as Oracle sys audit is enable

On an Oracle 11gr1 database, SYS audit is enabled: SQL> show parameter audit NAME TYPE VALUE ------------------------------------ ------...
0
votes
1answer
57 views

Enabling audit in Oracle

I have a table 'class' owned by the schema 'test' and I need to audit all operations on the particular table. audit INSERT,UPDATE,DELETE ON test.class -- will this be sufficient to do the trick? ...
1
vote
1answer
324 views

Managing AUD$ without DBMS_AUDIT_MGMT

I have a SYSTEM's table AUD$ where AUDIT records are stored. My AUDIT_TRAIL is set to DB,EXTENDED. I am on Oracle DB version 12c (12.2.0.1.0). With time (in 3 years) my AUD$ table grew to 500GB in ...
2
votes
1answer
36 views

Get User for Audit Entries

I am trying to construct history entries for my application tables. (Basically a "who changed what and when" set of tables.) My problem is that I have a lot of users. Well over a thousand. My ...
1
vote
0answers
56 views

Audit trail database design for multiple related tables [closed]

We have the database design requirement for audit trail purpose in MySQL 5.7. There is one main table and there are few sub-tables to the main table. For every record in the main table, there will ...
1
vote
0answers
16 views

SQL Server - Change AuditLevel on Linux hosted instance

just wondering if it's possible to change the AuditLevel on SQL Server 15.0.1800.32 (2019) hosted on Linux to "Failed logins only". Currently it's set to audit failed and successful logins and I ...
29
votes
4answers
101k views

How to find out who deleted some data SQL Server

My boss had a query from a customer yesterday asking how they could find out who deleted some data in their SQL Server database (it is the express edition if that matters). I thought this could be ...
44
votes
9answers
5k views

How should deletions be handled in the database?

I'd like to implement an "undelete" feature in a web application such that a user can change her mind and recover a deleted record. Thoughts on how to implement this? Some options I've considered are ...
6
votes
1answer
7k views

SQL Server Audit Specification - filter DML by all but one user

I'm setting up a database audit. I'd like to capture any DML change that is issued by database user other than the service account related to the application. In short, this is to prove to our ...
3
votes
1answer
5k views

MySQL audit and general log

May ask for the difference of MySQL Audit log plugin and general log? I looking for any activities done in a MySQL server.
0
votes
1answer
36 views

Why this system table doesn't appear on dictionary table?

How you can see I am the sys: SQL> show user; USER is "SYS" When I search the table in the dictionary the dictionary returns no rows: select table_name from dictionary where table_name like ...
0
votes
1answer
46 views

DB2 Audit Policy not producing EXECUTE data

I'm trying to set up an Audit facility on a DB2 AWSE V10.5 FP5 database running on Red Hat Linux Server 6.8. The definition for the policy is : ALTER AUDIT POLICY Failures CATEGORIES ...
1
vote
1answer
49 views

Auditing of modification of change to encryption keys

Is it possible to audit/log any attempts or actual changes to the keys used in the encryption hierarchy? We are using 2014 Enterprise edition and have recently enabled TDE across our databases and ...
0
votes
1answer
98 views

SQL Server Auditing [closed]

Situation: I am looking into getting some basic SQL auditing set up (for both compliance and security), for both Server and Database level specifications. I know that the specification groups should ...
1
vote
1answer
125 views

Optimize MySQL query retrieval from audit log table

I am running MySQL InnoDB 5.6. This is my first post, so please bare with me of any mistakes. I have this schema: I have a list of invoices in the invoice table, and if I want to see all the ...
0
votes
1answer
4k views

What's the difference between aud$ and dba_audit_trail tables in Oracle database?

I'm studying about audit in Oracle database and when I configure the audit using audit_trail = db the Oracle stores in the two tables
1
vote
0answers
37 views

SQL Server Audit Specifications Not Writing to the Security Log

I've come across an issue where SQL Server database audit specifications have stopped writing to the security event log. The audit object will write events to a SQL audit file or the Application ...
0
votes
1answer
98 views

Log all accessed objects during a certain time period

We are running quite a few tests for our software that require a certain set of databases. These databases are usually huge, while most of the data in there will not be used by any testcase. In order ...
0
votes
1answer
70 views

Using views with no insert table VS Audit tables

I(not a DBA) am considering designing Audit tables for an application that needs to be really fast as well fully audited (undo is not necessary). I referred to some from so and I found variations of ...
1
vote
0answers
28 views

How to measure durations (import, update) in Postgres DB?

we have a Postgres database which receives data by an extern web client. We would like to measure the duration of the UPDATE, INSERT and DELETE processes on our tables. Until now, we used the ...
0
votes
1answer
2k views

Who created that table in SQL Server?

I was wondering if there was a way to see who created a table in SQL Server 2017.
9
votes
1answer
8k views

Track all modifications to a PostgreSQL table

We have a table which has only roughly 500 rows, but it is very important for us. I want see all changes which happen to this table. The changes should get tracked with a timestamp. I don't want the ...
1
vote
1answer
158 views

Server Principal SID showing as NULL and name as empty string

In my SQL Server 2016 server,i set up a user logins Audit for Login successful and Login Failed action. Here is the script. USE [master] GO CREATE SERVER AUDIT SPECIFICATION [...
3
votes
1answer
49 views

Tracking grant violations

We are changing one of our application user logins from being dbowner to a more granular permission scheme--finally. Is there a way from within SQL Server 2016 that I can track permission violations? ...

1
2
3 4 5
8