We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [audit]

Database auditing involves observing a database so as to be aware of the actions of database users.

Filter by
Sorted by
Tagged with
0
votes
2answers
2k views

Check all login users list from back 3 months

There is any way to check all database login users list and their activities from back 3 months in SQL Server? I tried with SQL server Logs but I need more info about user activities from past 3 ...
3
votes
1answer
3k views

MySQL audit and general log

May ask for the difference of MySQL Audit log plugin and general log? I looking for any activities done in a MySQL server.
0
votes
1answer
115 views

MongoDB Auditing vs. Profling

I wanted in the first place to log connections to a collection and while I was searching I found that it's possible to configure profiling and auditing and logging. So my question is : What's the ...
2
votes
2answers
4k views

What happens if sys.aud$ is full in Oracle?

I am not seeing this in the documentation, but what happens when the Oracle 10.2 audit trail is full? Does it just not making any more audit records? Overwrites the oldest records? Shuts down the ...
1
vote
2answers
170 views

Can `sys.aud$` recycle itself?

In Oracle 11, what happens if I leave sys.aud$ to get bloated up to soak up the whole SYSTEM TABLESPACE? Does it start rewriting the oldest records? Can Oracle be configured to do so? Does it stop ...
1
vote
2answers
62 views

Audit kernel module usage in Oracle

In my continuing effort to bring my database up to a given standard, I need to ensure that all loading, unloading, and restarting of kernel modules are being audited. I have no idea what this thing is ...
0
votes
1answer
470 views

Check users not being audited

I need to confirm that actions by privileged users are being audited. As far as I can tell from views such as dba_stmt_audit_opts, the statements by the privileged users I want to be audited are being ...
0
votes
1answer
424 views

Where are SYS Audit Entries in Windows Event Log?

I have audit_sys_operations set to true, audit_trail set to DB, have restarted the database since setting them, and have logged in as and performed actions as sysdba. However, I cannot find these ...
2
votes
3answers
964 views

Logins Not being used in last one month

I have a requirement to create a query which can get the logins details which were not used in last one month. I have tried several way like extended events and audit tracing. But i'm unable to get ...
1
vote
0answers
1k views

How to audit database user password changes in oracle 11g?

I want to record how many times or which user accounts passwords were changed using Oracle database auditing techniques. I also want to record any password changes done to system user account.
5
votes
2answers
491 views

Alternative to triggers on system views for user auditing

Even writing the title I'm cringing at the idea I've tried this (but hey, I've learned something in the process). I've got a problem with developers running migration scripts on the database and in ...
5
votes
1answer
394 views

sp_tables blocking my other statements. Who runs it?

In our application we sporadically experience a locking issue caused by the execution of an sp_tables statement. We use SQL Server 2012. In our code and queries in our stored procedures we don't make ...
0
votes
1answer
1k views

Audit all does not capture truncate

I want to capture truncate and drop operations on my table. So i executed the following: SQL> select name, value from v$parameter where name like '%aud%'; NAME VALUE ---- ----...
1
vote
1answer
476 views

Find current users DDL statement running, Oracle 11g

I have created a database trigger (oracle 11.2.0.4 standard edition on windows 2008 R2) to intercept any drop or truncate statements, eg drop table abc123; and that will raise an exception to ...
0
votes
2answers
762 views

Auditing sysadmin members by a specific group

A Sql Server 2012 Database Audit performs an audit on sysadmins when you specify the principal DBO. However, this causes ALL the sysadmins to be audited. What configuration or solution can be used to ...
0
votes
1answer
272 views

Is there any MongoDB handler for find event?

I want to know is there any handler or trigger kind of functionality exist in MongoDB which can help me to run my mongo command on find query? Basically, I want to run a specific set of Mongo queries ...
1
vote
1answer
2k views

Audit trail tables in Oracle 12c

I came across this description of this feature, AuditTrail Tables: https://docs.oracle.com/cd/A60725_05/html/comnls/us/fnd/auddat02.htm Our project needs to track changes on a per table basis, so ...
1
vote
1answer
296 views

Auditing authentication issues in a distributed environment

I'm trying to get a better handle on what locked out a specific user when multiple Oracle databases are involved using database links. Setup: sqlplus kjohnston@db2 create user testuser identified ...
3
votes
1answer
4k views

How to track failed logon attempts using Unified Auditing

I activated a ORA_LOGON_FAILURES policy and I've tried to execute select * from unified_audit_trail where unified_audit_policies = 'ORA_LOGON_FAILURES'; But it doesn't work. All my failed ...
3
votes
1answer
883 views

Way to track data deleted from database

I'm using Oracle 11g database in archivelog mode and auditing is not enabled. Two days before, a few lines from a child table in my database got deleted. As the schema password was shared, I'm unable ...
2
votes
1answer
475 views

Oracle sys SYSDBA audit information to a report

I am trying to produce a monthly report on Audit. I am able to query the DBA_AUDIT_TRAIL, for all other users and no issue in that. I wanted to include the SYS/SYSDBA activities in this report and ...
2
votes
2answers
2k views

Audit Plugin on Ubuntu: CONTROL [main] Failed global initialization: FileNotOpen: Failed to open “/path” : exit status 1

We use MongoDB 3.2.11 and try to enable Audit. New in version 2.6. MongoDB Enterprise includes an auditing capability for mongod and mongos instances. The auditing facility allows ...
3
votes
3answers
81 views

Auditing which tables get joined most often

I'm trying to establish some metrics associated with which tables in our database get joined together the most often. How can I go about accomplishing this? edit: I should explain my reasoning; we ...
2
votes
1answer
1k views

dynamically create trigger to audit row changes

I'm using this approach to create a trigger to catch data changes. However, the system allows schema changes, and I would like to create this trigger dynamically after a new table has been created. I ...
0
votes
1answer
495 views

SQL Server 2012 Data Change Tracking

We currently have a front end application that is business critical and uses Microsoft SQL Server as the database provider. I have been asked to create another system that mimics some of the functions ...
1
vote
1answer
214 views

Auditing - sp_send_dbmail from server-level triggers failed

I have a server-level trigger to send a mail when a database is created. I have a few users in the db_creator server role. The trigger fails for these users because they don't have permissions to ...
3
votes
2answers
2k views

How to find who changed a table value in SQL Server 2014? [duplicate]

We have a few tables on a database called mydb which is being used by applications to store, or retrieve records. Somehow, someone changed a value on the test table and that caused a serious issue. ...
1
vote
1answer
30 views

How can I get the host_name who creates a DB (proactive mode) in SQL Server 2008?

First, I want to clarify that I am not looking for a SELECT HOST_NAME(). I am managing a database environment and have given the developers permission to create the databases they need in the ...
1
vote
0answers
91 views

SQL Server Audit with dynamic sql

I'm trying to implement database level audit on some tables for tracking the changes. When I activate the audit I see the results in the audit file as seen below. UPDATE "MYDB"."dbo"."MyCompany$Mail ...
5
votes
2answers
6k views

Add columns to all tables in a database if the columns don't exist

I have to implement auditing in a database with many (50+) tables. I am looking to add the user name and the time when the user altered the record as columns to all tables. However, some tables have ...
0
votes
1answer
471 views

SQL Server - Uniqueness Of The Transaction ID

For auditing purposes, I need to get the unique transaction id from inside the current transaction. I will log the mapping between this transaction id and the application specific session id in a ...
0
votes
1answer
1k views

Getting the only updated field using a postgreSQL trigger?

Is there any way to use a trigger which can get the only updated field from a record? I am just testing the audit trail log so it can save the field name alongside its other information when it is ...
1
vote
1answer
151 views

Applying audit policy on multiple auditing subject or object

I have created a policy on execute category and I would like to know if this policy can be applied on multiple auditing subject or object. Since the execute category will generate many audit entries I ...
0
votes
1answer
963 views

Unable to remove trace from sys.traces

We recently discovered one of our drives was being filled up by audittrace files. One of our DBAs turned off C2 auditing which should normally stop the files filling up the drive. However, it appears ...
1
vote
3answers
735 views

I need to audit all actions for a user on all databases - not sure best way

I have a user on a SQL Server that is used for executing SSRS queries. This user was made a sysadmin before I started at this job. I want to remove the sysadmin permission, but not break any reports. ...
0
votes
1answer
600 views

History of User privileges held

In Oracle 12c or 11g, is it possible to fetch the history of user privileges held by a schema? Say from last two months, I might have granted different roles and privileges. I can get the current ...
0
votes
1answer
3k views

Oracle auditing on specific user activity

I want to be able audit user 'SCOTT' on 'SELECT, INSERT, UPDATE, DELETE' dml operations across all objects in the database SCOTT has access to. I'm familiar with dbms_fga but I can't achieve what I'd ...
0
votes
1answer
51 views

Audit Requirement - Capture Logins vs Database

I have a question, I hope you can give me some guidance based on your high expertise level. There is an audit requirement where we have to provide login information per databases on a given server. ...
1
vote
1answer
2k views

SQL trigger to get User ID column

I would like to achieve the following: Users log into a web app, using their credentials from the users table. After inserting a row into the inserttest table, a trigger activates in which it ...
1
vote
0answers
253 views

How do I find the identity of a failed connection request

I have two Microsoft SQL servers, one running 2008 R2 Enterprise, one running 2012 Enterprise. Both are logging lots of failed connections requests due to untrusted domain : =============== SSPI ...
0
votes
1answer
268 views

All in one query for tracking changes in sql server

Is there any feature in SQL Server 2012 or in any version, wherein I can track all DB activities (DDL and DML) and others in one single query with who has modified and from where and when? I need ...
4
votes
1answer
5k views

Stored Procedure Processing and Error Log

I used to work for a company where they had this 3rd party Data warehouse Solution. Obviously all the objects and tables were hidden in the Supporting database so I don't have clear idea on what ...
1
vote
2answers
110 views

SQL Server - storing audit to table

Is there a standardised way to store auditing information constantly to a table for further analyse?
3
votes
2answers
5k views

Sql Server - How to convert Audit log into a table?

I am using Sql Server 2014, Standard Edition. My objective is to trace the history of operations on the tables (insert, update, delete), and to display on the web so the users are able to tell what ...
0
votes
1answer
229 views

Loop through all tables and detect changed rows using checksum or hashbytes

All the tables have an extra row called checksum which is stored by doing INSERT INTO example_table VALUES ('a','b', BINARY_CHECKSUM('a','b')). Suppose someone change a row value, obviously the ...
3
votes
1answer
8k views

How to find user who Drop any thing without auditing applied on database

In my scenario, I have a database with no flashback on, Only Archivelogs are active. No Auditing applied on database. 3 days ago some one drop all triggers, views, sequence from a specific user. Now ...
2
votes
1answer
165 views

Audit use of CLR Table-valued function

I have written some CLR table-valued functions that invoke a web service and I would like to audit their use. Does anyone know of any way this can be achieved in the CLR code itself? I would be nice ...
4
votes
4answers
640 views

Consolidating a row of data, based on previous rows

I'm trying to build a history table out of an audit log (ultimately to build out a type 2 dimension table). Unfortunately, the audit log only records the specific fields being changes. Here's a ...
1
vote
0answers
946 views

Trying to install Audit_log Plugin on MySQL

I'm trying to install the Percona Audit_log plugin for my instance of MySQL. I ran it previously so I know it works ok with MySQL (I'm sure it says so in the documentation anyway). I have MySQL 5.5....
0
votes
1answer
754 views

os_username vs username in Oracle audits

I have recently been given the task of building reports from the audits of our Oracle 11g database. While not being the DBA and him being on vacation for a few weeks I have troubles understanding how ...