Questions tagged [audit]

Database auditing involves observing a database so as to be aware of the actions of database users.

Filter by
Sorted by
Tagged with
0
votes
1answer
342 views

SQL Server AUDIT/event_time

I am using SQL Server 2012 Audit and when I look through the captured events I can see that even_time does not show the correct time. Actually it shows 5 hours earlier than time on the server. Do you ...
0
votes
2answers
68 views

Can I tell if a stored procedure has executed against a particular database?

As a result of a release a database is behaving "unusually". I suspect a stored procedure was missed during a recent release, however my DBA is telling me 100% it was executed. Is there any way to ...
1
vote
1answer
490 views

Database design. And get last modified time with each column in PostgreSQL

My database/table each endpoint/scope have multiple table, e.g user: user, user_information, user_role ... I was wondering should I separate table like below, or not? This is my first time to ...
0
votes
1answer
91 views

I want to find out how data is getting inserted to a particular table?

I want to find out how data is getting inserted to a particular table. I mean to say I want to find out the job or Stored Proc which is running on my SQL Server and pushing data regularly into one of ...
1
vote
1answer
240 views

Statement specific auditing - Oracle

I have enabled default auditing in one of my database. Oracle 11g. Audit_trail is set to DB, other than that for a particular schema 'test' I have set: audit all on test by access With the above ...
0
votes
1answer
863 views

Mixed mode auditing - 12c

Oracle 12c database comes with default Unified auditing enabled even if we set it to FALSE which has ORA_SECURECONFIG policy enabled by default. Apparently, the audit options for that particular ...
4
votes
1answer
3k views

Multiple Filters for Databases on SQL Server Server Level Audit

I am attempting to create a Server Level Audit to track Database Level events in SQL Server 2014. I know I can create them at the database level but I want the audits all databases at the server ...
8
votes
2answers
4k views

Extended events vs SQL Audit - performance implications

I would like to setup an audit trail kind of system on my database to monitor for UPDATE/INSERT statements on a specific table with very high activity. I have two options in front of me: using the SQL ...
0
votes
1answer
106 views

Storing revisions and relations between revised items in 1:N and N:N scenarios for audits

I have several of the following situations in a MySQL schema that I design for a custom CRM/ERP solution. 1:N related tables SO and SO_ITEMS (SO is just one example I have several) that both need to ...
2
votes
1answer
584 views

SQL Server 2016 Audit Options

Often law or organization policies require an application to track changes to certain table rows in a database. The changed data is often also viewable through some application page. Some common ...
-1
votes
1answer
107 views

How to read the deleted value using a variable

I'm trying to get @OldValue = (select @fieldname from #del) to give me the value. Instead I get the column name for the result. Is there a way to write this so it can output the value. If I write ...
-1
votes
1answer
461 views

Update log table with all table updates [closed]

I need to update a log table with old and new updated values. Any ideas how can we do this in a trigger? I need to log all inserts and updates and write a custom message in the column like.. "User ...
0
votes
1answer
189 views

Get the deleted value using while looping through the columns

I wrote a trigger to do auditing. To capture all the changes, I loop through the list of columns. The problem I'm having (see code below), when I try to set the OldValue using the @fieldname, I get ...
0
votes
1answer
81 views

Who deleted a record?

Is it possible to audit a Postgresql 9.4.5 database in such way that I could find when a specific record was deleted? I don't know what do I need to have enabled / available for such
0
votes
1answer
74 views

How to find the AD user that logged in to SQL Server using SQL Login [duplicate]

Some users are logging into database servers locally, opening SSMS and logging in to SQL Server using SQL logins to run queries. How can I find the AD user that logged in to SQL Server using a SQL ...
0
votes
1answer
4k views

Purging audit records - Oracle

At the end of each financial year, audit team asks for audit records for samples dates in a year as per their methodology and ideally we are supposed to provide them. (Say, give them list of schemas ...
0
votes
1answer
83 views

Record of schema related changes - Oracle

Is it possible to get the all changes that is made to schema as in what privileges was first assigned to the schema on creation, creation date, if later modified with different privilege what was that ...
10
votes
1answer
56k views

how to get History of queries executed with username in SQL

I can get executed queries by using: SELECT deqs.last_execution_time AS [Time] ,dest.TEXT AS [Query] FROM sys.dm_exec_query_stats AS deqs CROSS APPLY sys.dm_exec_sql_text(deqs.sql_handle) AS dest ...
0
votes
1answer
2k views

PUBLIC privilege potential security threat - Oracle database

Recently, audit findings at my site found that PUBLIC being by default assigned to all the schemas that are created is a big risk since when a new user is created and even if we were to assign only ...
-1
votes
2answers
2k views

Oracle audit log to other server?

How can I configure audit log records to other server? Because: DB Server is full because it is very big. Our IT team manages DB server and our team (security team) is going to get audit log in our ...
0
votes
2answers
277 views

Notify when database is accessed in any manner

I'm using SQL Server 2012. Is there a way to receive a notification (email/log etc..) if a database or table in a database is touched in anyway (e.g. CRUD via Stored Procs or tables opened via ...
-1
votes
1answer
95 views

SQL command or trigger needed to capture changes in tables [duplicate]

I want a query or trigger that will identify what changes done in the database tables from the Third Party Software such CMS etc. I want to check that which data is modifying with time. There is no ...
0
votes
1answer
117 views

Unable to find Audit specification when I try to create Server level audit

I am trying to use 'SERVER_PRINCIPAL_CHANGE_GROUP' audit action on a SQL Server to capture the sp_addlogin events. But when I try to create a Server level audit using GUI, I am not seeing the Audit ...
4
votes
1answer
7k views

I want to find out in SQL SERVER 2012, who is creating SQL Logins and on which date

I was trying to find out in sql server 2012, who created login and which date. Can any body help on this thanks,
2
votes
0answers
431 views

How unique does AUDIT_GUID need to be when creating a server audit?

When you use the GUI to create a server audit it creates a password worthy (no caps) value like e5abe6c5-f451-41f3-936c-b1da1c0786ce When you look to CREATE SERVER AUDIT with Transact-SQL it ...
1
vote
1answer
1k views

SQL Server Audit not tracking changes at the database level

I'm currently trying to create a test implementation of SQL Server Audit in SQL Server Management Studio to see how it works. I created an test audit at the server level, and another one at the ...
0
votes
0answers
192 views

Limit number of entries written by Logon-Trigger

We are auditing connections to our SQL server by using a logon trigger. (SQL Server 2008 Standard Edition.) However what we are seeing is that there are always a number of entries logged for each ...
14
votes
1answer
532 views

Can I tell when and who updated my database from v11 to v12 on Azure?

Earlier today I noticed that all my Azure SQL database servers where updated from v11 to v12. I am the only one in my company that should be touching those dials, but not the only person in my company ...
1
vote
1answer
127 views

Database agnostic auditing [duplicate]

Background Various databases have custom implementations for auditing: SQL Server Audit Oracle Audit PostgreSQL Audit Trigger MySQL Enterprise Audit Problem A number of problems exist: There is ...
1
vote
1answer
50 views

Oracle 12 - Reporting on Roles

Is there a way to report on all the custom roles and/or responsibilities created within Oracle, Outside of SQL? I am looking for a dashboard that shows how many have x role, y role that could be ...
0
votes
1answer
46 views

Enabling audit in Oracle

I have a table 'class' owned by the schema 'test' and I need to audit all operations on the particular table. audit INSERT,UPDATE,DELETE ON test.class -- will this be sufficient to do the trick? ...
1
vote
0answers
81 views

Tracking MySQL DML Operations Source

We have a table that will get inserts and updates from 10 different jobs. We need to track each DML operation with its source i.e job name. We have used audit tables and triggers to get old and new ...
2
votes
1answer
14k views

Tracing failed login attempts in Oracle

I have some users who are logging in with a wrong password and their accounts get locked. Now I need to find the source of the failed login attempt. The machine, username etc. Is it possible to find ...
1
vote
1answer
2k views

Disable Oracle auditing for a particular user?

I have one application user in my Oracle 11g DB which does logins/logouts very often. Since this user is not a human, but an application I would like to exclude the login and logout actions of this ...
1
vote
1answer
470 views

Multi event Trigger syntax

I have a db2 LUW 10.5 database. I want to create a trigger that saves a copy of a record into an audit table whenever, a record gets updated and inserted. I came up with follwing syntax: CREATE ...
1
vote
0answers
109 views

Auditing a Single User in SQL Server

I have an application that accesses my SQL Server using a username\password. However our lead developer has access to this password and I suspect that he may be utilizing this outside of our terms of ...
1
vote
1answer
406 views

Triggers on Slave database (in the context of replication) for auditing purpose in MySQL

I have a requirement for auditing in MySQL database. It means I am interested in what data is changed in my database and when. For fulfilling this requirement I am thinking about the triggers. I am ...
4
votes
1answer
4k views

Is Service Broker the best choice for auditing data changes on SQL Server Express?

My project is to audit 5 to 10 existing tables in our system without prolonging transactions. Whatever method is used, it has to work on SQL Server Express 2005 to (eventually) 2016. I've done ...
3
votes
2answers
564 views

How to capture sp_refreshsqlmodule event

My issue: executing sp_refreshsqlmodule will update the sys.objects.modify_date value, but does not fire a DDL event that can be used by a DDL trigger. So if using a DDL trigger to show object change ...
1
vote
1answer
559 views

Auditing DDL with MySQL

We have a MySQL database on an IBM i (as/400) that has many people with admin access. We would like to audit who is making changes, and when they are made. On SQL Server we would use DDL Triggers, but ...
1
vote
0answers
50 views

Repeated login issue SQL Server 2008 R2 (SSIS)

I'm trying to figure out an issue I'm currently having with an SQL Server connection - there has been a few issues with timeouts on a SSIS package, where it has failed a login attempt - however as far ...
0
votes
0answers
512 views

How to audit mysql changes

Have table with 4 000 000 rows. Need audit any data changes in table. I create triggers for this table and audit all changes data,but is there any better way for audit changes in table ? And also one ...
1
vote
1answer
120 views

In Oracle DB 11.2g, is it possible for the audit trail to explicitly mention account locking events?

As it is, the audit trail will show login failures, and an attempt to log into a locked account (ORA-01017 and ORA-28000). What I would like to know is if it's possible for it to make a mention when ...
0
votes
2answers
546 views

SQL Server LockMatchID Command

I am seeing calls like those shown below in my SQL Server Audit logs but have no idea what it means. A google search turned up a possible relationship with compiles/recompiles. The line (or similar ...
15
votes
2answers
38k views

Best way to design a database and table to keep records of changes?

I need to setup a history feature on a project to keep track of prior changes. Let's say I have two tables right now: NOTES TABLE (id, userid, submissionid, message) SUBMISSIONS TABLE (id, name, ...
0
votes
2answers
70 views

Useful formats for the results of a database “audit”? [duplicate]

My company has tons of disparate databases - Oracle, SQL Server, and (shudder) MS Access - lying around, and the CIO wants to bring in a third party to track them all down and document them. But, ...
4
votes
4answers
6k views

Can SQL Server Audit be used to track hostnames or IP adresses of the users performing DML on a table?

I have been reading about SQL Server Audit, and so far I have assimilated that it tracks the command that has been executed, and some other additional information(SPID, object ID and stuff). But can ...
1
vote
0answers
85 views

MySQL/Percona Audit Log Plugin Not Working

I've been looking to implemement the Percona Audit Log plugin. So far I have installed it and configured it, and it seems to be working ok. Except, I have installed it on a slave Database as I don't ...
2
votes
1answer
883 views

Determine the command type in a DDL trigger / get names and datatypes of new columns

Given strings corresponding to DDL commands, how can I determine which DDL command (column addition, constraint addition etc.) it precisely is? I have a DDL trigger on a database that will be fired ...
1
vote
1answer
2k views

Mysql triggers for auditing

We have a requirement to fulfill - we need an auditing table for all of our entities. We wonder if creating the following triggers will be a good practice: CREATE DEFINER=`root`@`localhost` TRIGGER `...