Skip to main content

Questions tagged [audit]

Database auditing involves observing a database so as to be aware of the actions of database users.

Filter by
Sorted by
Tagged with
0 votes
1 answer
712 views

How to include the oracle database name to os audit trail?

My DB settings: Connected to: Oracle Database 19c Enterprise Edition Release 19.0.0.0.0 - Production Version 19.12.0.0.0 SYS@CDBXXX1> unified_audit_common_systemlog string ...
r0tt's user avatar
  • 1,028
1 vote
0 answers
191 views

Filtering for user transactions in Azure Log Analytics

We have audit logging in Azure Log Analytics set up for an Azure SQL Database we operate. I would like to query these logs to view user transactions to track down queries that have unintended ...
philipnye's user avatar
  • 163
0 votes
2 answers
1k views

How to send alert on SQL Shutdown due to Audit Failure

Looking for a way to implement this STIG. What method should I use to monitor SQL Server, when it is shutdown due to "Shutdown on Audit Failure"? SQL Server must provide an immediate real-...
Keybonesabi's user avatar
0 votes
1 answer
453 views

Audit table and foreign key

I have a database with multiples tables that must be audited. As an example, I have a table of objects defined with a unique ID, a name, and a description. The name will always be the same. It is not ...
Weedoze's user avatar
  • 101
0 votes
1 answer
559 views

Oracle Fine-Grained Access (FGA) auditing excluding one source

I want to audit DML statements coming from other places than application user "tomcat" (OS_USER attribute). I want to focus only on developers or support team changing data in any way. DML ...
Jakub P's user avatar
  • 157
2 votes
1 answer
1k views

SQL Server DML auditing - Triggers vs SQL Server Audit Feature (vs temporal tables vs change data capture)

I am looking to implement an auditing process on an instance I have on SQL Server 2017. However, I am not finding a complete conclusion on which auditing feature would be best to use for a DB with a ...
user1930901's user avatar
0 votes
1 answer
189 views

MSSQL - How to log every rpc_completed event into a table?

I want to log the Execution Time and Parameters for every stored procedure call on my database. What I reached by searching is to use extended events as the latest method with minimum performance ...
behnam-io's user avatar
0 votes
1 answer
180 views

MySQL - Information_schema Events - How persistent or retention is managed

I'm a MS SQL guy and understand agent job history. I'm now working with MySQL. I've searched hi and low but I can't find any solid info on how event data within information_schema.events is persisted, ...
Adam's user avatar
  • 113
0 votes
0 answers
194 views

Check when a privilege was granted - PostgreSQL

Is there any information_schema view that can tell when an object privilege was granted? The pg_namespace view doesn't have that. select * from pg_namespace join lateral ( SELECT * from ...
Mas's user avatar
  • 13
1 vote
1 answer
904 views

An INSERT statement triggers the SQL Server Audit to write it down in the logs although INSERT is not listed as an Audit Action

Background: I am trying to keep a track record of what users are querying in the database. One option I found is to create a Server and Database Audit Specification. I did not want to include INSERT ...
Dip's user avatar
  • 113
1 vote
1 answer
1k views

Extended Events Login audit - Reduce login noise

We are looking for the optimal sql login audit solution, with usable filtering. Thus far we have looked into Server Audits and profiler but have concluded that extended events look most promising, ...
Bergmeister's user avatar
0 votes
1 answer
602 views

How to audit a specific query in Oracle

I want to audit a specific SQL query in Oracle. However I think we can audit only users or table level. For example I want to audit 'audit statements', such as who run the "AUDIT CREATE SESSION ...
Ayhan ORBAY's user avatar
0 votes
0 answers
90 views

MS SQL Server Enterprise 2016 is truncating the audited select statements, how do we fix it?

TL;DR; I am getting SELECT as the audit output instead of the actual (suspected) query SELECT DISTINCT CONVERT(varchar, DecryptByPassphrase(getkey(N'key1'), FIELD1)) as DECRYPTED_FIELD1 FROM view1 ...
Jason Pyeron's user avatar
0 votes
1 answer
112 views

Identify table usage in sql server before we stop the load

I tried browsing this across lot of links but cant get much of help so i am posting this question which sound bit similar. We have quite some tables which are being planned from our app team that they ...
Newbie-DBA's user avatar
0 votes
1 answer
63 views

Find if and when a Query was run?

I am trying to get to the root of a problem and need to see if and when a specific Delete Query was run on my MS SQL Server. The command would have come from my .NET website. My Server is Windows 2012 ...
Yoni's user avatar
  • 109
0 votes
3 answers
783 views

Auditing of database connections in SQL Server 2008 R2

We are finally planning to close down our last SQL Server 2008 R2 server. Before we can proceed with this we need to track what users are connecting to which databases. We have tried different options ...
Peter Å's user avatar
  • 345
1 vote
1 answer
60 views

Audit succesfull logons , loging every 2 seconds

I created an audit to audit only succesfull logons. But the problem is, I did it in a test environment and it's loging a connection every second Did I do something wrong ? I only selected SUCCESFULL ...
Racer SQL's user avatar
  • 7,396
2 votes
1 answer
317 views

audit on object by user in Oracle

Is there some way to audit, for example, a select in a specific table just by one specified user? something like this: audit select on foo.table by soe; this command return: ERROR at line 1: ORA-...
Astora's user avatar
  • 743
0 votes
2 answers
556 views

reapply permissions post sql server restart

In our environment, users were granted read/write/ddladmin permissions on tempdb database (dev/qa/prod). These permissions will be lost when SQL Services restart, as tempdb rebuilds every time. One ...
Kris's user avatar
  • 432
1 vote
3 answers
117 views

How to pass application user names to the database server for audit purposes?

Writing an application that will require a user to login. I would like to use a table to store my user information; however, the user's ID will not be available to me when I create audits for all my ...
Elcid_91's user avatar
  • 113
0 votes
1 answer
460 views

SQL Server Extended Events to Capture Objects access by a User [duplicate]

I am in for a requirement where I need to use EE to capture the Objects Accessed by a particular SQL User. I want to avoid the action sqlserver.sql_text, if I use this, I will need to manually scan ...
Moh's user avatar
  • 11
0 votes
1 answer
1k views

Disable auditing of select statements

Somehow the auditing of select statements was enabled in our oracle database. We have several data processing apps that are generating upwards of 15 GB per day in the audit trail. Now we cannot turn ...
Stretching Lion's user avatar
0 votes
2 answers
117 views

Is it a good idea to split an auditable table into two tables based on the update frequency?

I'm currently designing a database schema for a small microservice which handles products. The service contains a simple REST API which allows users to perform basic management of products and an ...
idkfa's user avatar
  • 15
1 vote
2 answers
515 views

Is there any reason to maintain audit columns when the target table already has an audit table?

I'm currently designing a database schema for a small microservice which handles products. The service contains a simple REST API which allows users to perform basic management of products and also ...
idkfa's user avatar
  • 15
0 votes
1 answer
60 views

Which are the options I have to create a structured log of all INSERT, UPDATE and DELETE from all tables of my PostgreSQL database?

With MySql, I'm using replication api to record all changes from my database. pymysqlreplication and https://github.com/nevill/zongji are what I'm using. I wonder which are the options I have to do ...
Neves's user avatar
  • 1
1 vote
1 answer
50 views

Alternative to FK for sys.objects reference

I'm updating an audit/log table that is populated by trigger when a table is updated. My intention is to use the sys.objects.object_id for table name and column name columns in the log table but it's ...
David Clarke's user avatar
  • 1,197
0 votes
1 answer
450 views

Audit everything coming from an ip adress in an Oracle database

I need to audit all activity coming from a specific ip adress. Whats the best method to do this in an Oracle Database 19c?
r0tt's user avatar
  • 1,028
4 votes
1 answer
865 views

Problem with enabling System Audit (Firebird's Trace and Audit Services)

I would like to enable System Audit on my Firebird 2.5.9.27139 (x64) database (Windows 10), to inspect all queries performed on it. I've already read some docs about what the configuration file should ...
Adam Przedniczek's user avatar
0 votes
1 answer
237 views

MySQL: how to use audit_log plugin to audit user modification

I am trying to audit any user modification action (create user/alter user/drop user/rename user) on a MySQL Enterprise server 5.7.24. I have installed the audit_log plugin following the document, and ...
Soh Wei Jen's user avatar
0 votes
1 answer
138 views

Oracle auditing: Is it possible to log when a permission is being used?

Does Oracle offer a way to log instances where a given permission is evaluated? Suppose I GRANT SELECT ANY DICTIONARY or something similar to a role, I am looking for a way to log every instance where ...
jstarek's user avatar
  • 115
0 votes
1 answer
182 views

Oracle 11gR2 - How To Audit SYS.USER$ Table

I have a Oracle 11gR2 database and I want to audit all select operations on SYS.USER$ table for which users select on this table. When I try this command (I'm trying to run this command with SYS user):...
jrdba's user avatar
  • 55
0 votes
1 answer
39 views

Passively load a monitoring shared object into an Oracle process

I'm trying to load my own code, which should add some security features to my environment, into each oracle BEQ dedicated process. The reason I'm posting this on this platform, is that I hope there is ...
Eytan Naim's user avatar
0 votes
2 answers
381 views

Default trace vs auditing in SQL Server

Currently I am working in an environment that has the default trace enabled and I would like to propose that we add SQL server auditing to our environment. I'm looking for some points to put forward ...
Asher's user avatar
  • 303
0 votes
1 answer
588 views

SQL SERVER auditing SELECT of a single column

Is this possible, or is table-level the most granular access? So far, Google search has shown nothing, and this screenshot does not mention column, but I thought I'd ask here. SQL Server version is ...
RonJohn's user avatar
  • 647
1 vote
4 answers
19k views

Audit all insert, delete, update and select statements on a schema in Oracle 12.2

I cannot understand how to create a Unified Audit policy in order to audit all INSERT, UPDATE, DELETE and SELECT statements performed on all the objects within a specific schema. The goal is to track ...
Max's user avatar
  • 195
0 votes
1 answer
271 views

Is it good practice to only delete through a trigger to enforce 'deleted by' auditing?

We've decided to design our database such that we actually delete rows when we want to delete some data, rather than just marking them as deleted, because the latter approach means that you always ...
Jez's user avatar
  • 695
1 vote
1 answer
1k views

MSSQL Audits are growing out of control. 1gb every 4 minutes - any way to get size down?

I am trying to setup audits for a Veeam backup server. I used the audit specifications from STIG - https://www.stigviewer.com/stig/ms_sql_server_2016_instance/ I haven't setup any database auditing ...
user80151's user avatar
  • 209
0 votes
1 answer
57 views

Database: Storing multiple Types in single table or multiple intermediate delta tables

Using Java and Oracle. We need to update changes in Email, UserID of employee to third party. Actual table is Employee and intermediate table we keep which we will use for comparison of changes ...
fatherazrael's user avatar
0 votes
1 answer
287 views

SQL Server 2016 Audit Actions, Can DatabaseAuditSpecification capture param values used in statement?

I am using Schema_Object_access_Group audit action type. When I run a select, insert, update SQL statement, it records all statements nicely. For example, captured Sql statement looks like : UPDATE ...
user11251420's user avatar
3 votes
1 answer
941 views

Get date from SQL Server audit filename

SQL Server audit filenames use the following pattern: Name_GUID_PartitionNumber_Timestamp.sqlaudit An example filename below: Audit-ObjectChanges_2D94C1E8-CCAD-405F-A9F2-...
boomcubist's user avatar
2 votes
1 answer
43 views

How to change user running audits mssql

I've been tasked with setting up our SQL server audits - despite having never done this before. So please forgive a really basic question. I setup a specific user, sqlAudits, that I would like to own ...
user80151's user avatar
  • 209
-2 votes
1 answer
270 views

Oracle Delete From a View [duplicate]

I need to compile below query: delete from dba_audit_trail where TIMESTAMP > SYSDATE - 30;
jrdba's user avatar
  • 55
0 votes
1 answer
98 views

Auditing user queries of specific rows in a table

Is it possible in SQL Server 2017 and upwards to audit the access to certain rows in a table? Imagine a customer table, and we wanted to track when users selected the data for premium customers ...
David Keaveny's user avatar
-1 votes
1 answer
2k views

How To Delete Record From dba_audit_trail in Oracle 11gR2

I want to delete records older than one month from AUD$ table, but I have to do this on dba_audit_trail, because I have to do this job according dba_audit_trail's timestamp. I can't find any clear ...
jrdba's user avatar
  • 55
0 votes
2 answers
340 views

Oracle limit the number of files of audit

I would like to know how to limit the number of files of audit generated in the audit directory, I have an Oracle 12c database. The AUDIT_TRAIL parameter is equal to NONE, however it continues to ...
miguel ramires's user avatar
0 votes
1 answer
1k views

Why doesn't MariaDB server recognise Server Audit settings in config file?

I'm trying to implement the Server Audit plugin that is built-in with MariaDB 10.4. I've added the settings to the my.ini config file, running on Windows 10. [server] ... #Audit Settings ...
Nexmo16's user avatar
  • 11
0 votes
1 answer
79 views

Why some triggers run exactly at the same time?

I wrote a simple audit with triggers. when a trigger called, the data inside the trigger (inserted and deleted rows) are sent through broker to a procedure to write them in the Master Audit Table. ...
mostafa8026's user avatar
0 votes
1 answer
116 views

Audit OSQL command shutting down a SQL Server

I need to determine when, and by whom, a SQL Server was shutdown using the osql command. The osql command takes user name and password input. Are there any specific Windows Event logs generated to ...
swasti bhushan deb's user avatar
2 votes
1 answer
719 views

How to determine if Oracle Java classes are being used

Oracle EE 12.1.0.2 As part of a general clean up of a legacy application prior to a migration I'm trying to determine what objects are actually in use. There are some 230 JAVA class objects in my ...
Evelyn Dibben's user avatar
0 votes
2 answers
2k views

MySQL Plugin failed to install due to "undefined symbol"

For several years now I have used the MariaDB Audit Plugin on my MySQL databases. I am now looking to start Upgrading my databases to MySQL 8, and so have just tried installing it onto MySQL 8.0.19, ...
IGGt's user avatar
  • 2,146

1
2
3 4 5
9