Questions tagged [audit]

Database auditing involves observing a database so as to be aware of the actions of database users.

Filter by
Sorted by
Tagged with
2
votes
1answer
107 views

SQL Auditing Functionality

Can someone tell me what the cause of this alert is that's captured by our SQL Audit trace we have setup using the built-in auditing functionality? This alert is generated from time to time in the ...
2
votes
1answer
980 views

Logon events detail in oracle

I want to fetch the oracle user login detail for the month February. I tried the below query. select distinct os_username,username,userhost,terminal,timestamp,action_name,logoff_time from ...
2
votes
1answer
1k views

dynamically create trigger to audit row changes

I'm using this approach to create a trigger to catch data changes. However, the system allows schema changes, and I would like to create this trigger dynamically after a new table has been created. I ...
2
votes
1answer
587 views

SQL Server 2016 Audit Options

Often law or organization policies require an application to track changes to certain table rows in a database. The changed data is often also viewable through some application page. Some common ...
2
votes
4answers
893 views

SQL Server : auditing AD Users - how can we identity AD User account from AD Groups

I would like to identity which accounts on our servers belong to AD Users. Currently, I find a plethora of accounts from users that should in fact be part of AD Groups registered on the same SQL ...
2
votes
1answer
738 views

Mysql - Select To XML

I'm using a trigger to capture an audit trail. I want to convert the inserted / updated / deleted value to XML and store it in another table. My trigger look like this: DELIMITER $$ CREATE ...
2
votes
1answer
62 views

Audit full text activity

I need to find when and which user created full text catalog, and who added/modified/deleted the columns (that were full text indexed) in that full text catalog.
2
votes
1answer
4k views

Archiving fga_log$: sys.dbms_audit_mgmt.clean_audit_trail doesn't delete anything

I am having a problem to archive and then delete portions of the fga_log$ table. Here's what a script basically does insert into fga_log_archive select ... from sys.fga_log$; begin sys....
2
votes
1answer
2k views

Inherit audit columns and triggers

Background I have a database with dozens of tables, some of which should have audit columns. Problem I'd like to avoid the drudgery of creating audit columns manually, and write the update and ...
2
votes
1answer
252 views

Audit tables in different databases

I am studying ways to implement audit tables to my PostgreSQL database and would like to know if it is possible to make a trigger for the data to be written to a table in a database other than the ...
2
votes
1answer
2k views

hstore for versioning fields in postgresql

I have a postgresql database that will hold about 50 tables, each of them having about 15 fields, it would have at least 300.000 rows on each table. In order to track the changes done on each field I ...
2
votes
1answer
37 views

SQL Server Audit File Metrics Information

I'm currently working in an environment that requires we enable SQL Server Audit, enterprise-wide. We generate .sqlaudit files as we have retention and access guidelines, and I'm finding that we need ...
2
votes
0answers
90 views

Questions and advice for complying with Federal tax information (FTI) Security Guidelines for Federal, State and Local Agencies per Publication 1075

I've been able to find writings on compliance topics (e.g. HIPAA, SARBANES-OXLEY, PCI DSS) but I haven't found much on FTI (Federal tax information) and Publication 1075 outside of the IRS website ...
2
votes
0answers
36 views

Any way to reduce the logging level of SQL Audit?

I set up SQL Audit according to STIG compliance using exactly the recommendations given by the compliance documents. The problem is that after doing so my server is generating roughly 5GB of Audit ...
2
votes
1answer
25 views

How to Audit any change in Permission?

Is there any way how to know "Who did change the permission on users" Like: who give read permission or owner on a database for a user? Using SQL Server 2014
2
votes
1answer
517 views

Oracle sys SYSDBA audit information to a report

I am trying to produce a monthly report on Audit. I am able to query the DBA_AUDIT_TRAIL, for all other users and no issue in that. I wanted to include the SYS/SYSDBA activities in this report and ...
2
votes
2answers
2k views

Audit Plugin on Ubuntu: CONTROL [main] Failed global initialization: FileNotOpen: Failed to open “/path” : exit status 1

We use MongoDB 3.2.11 and try to enable Audit. New in version 2.6. MongoDB Enterprise includes an auditing capability for mongod and mongos instances. The auditing facility allows ...
2
votes
0answers
496 views

How unique does AUDIT_GUID need to be when creating a server audit?

When you use the GUI to create a server audit it creates a password worthy (no caps) value like e5abe6c5-f451-41f3-936c-b1da1c0786ce When you look to CREATE SERVER AUDIT with Transact-SQL it ...
2
votes
1answer
3k views

Where can I get error messages from SQL Server Auditing?

Where can I get information about the audit process failing to start? I'm setting up auditing on my MS SQL 2014 server. I've created an AUDIT and an associated AUDIT SPECIFICATION, but when I try to ...
2
votes
0answers
2k views

Storing table history - is this a good use case for Postgres's table partitioning / inheritance?

I currently have a products table which stores product information (title, description, tags, manufacturer, etc.) for a website. I would like to store historical information of changes to this table -...
2
votes
0answers
809 views

Audit Queries in SQL Server 2008 Including Start Stop Times

I have SQL Server 2008 Enterprise. I know how to set up auditing on the SQL Server, but it looks like the audit logs don't include query start/stop times. We currently use a product called Splunk to ...
2
votes
2answers
1k views

How to speed up audit trigger?

The task: write a trigger to log all updates within tbl1 table for future audit users' actions. The tbl1 table: id INT(11) y SMALLINT(6) country SMALLINT(6) -- really here ~20 fields but only some ...
1
vote
1answer
77 views

Can Extended Events used instead of Auditing?

In BOL it is mentioned does this mean Extended Events can capture all the events that are traced by auditing? Can we get all the functionalities of auditing just by using XEvents? thanks
1
vote
2answers
188 views

Can `sys.aud$` recycle itself?

In Oracle 11, what happens if I leave sys.aud$ to get bloated up to soak up the whole SYSTEM TABLESPACE? Does it start rewriting the oldest records? Can Oracle be configured to do so? Does it stop ...
1
vote
2answers
2k views

Getting the only updated field using a postgreSQL trigger?

Is there any way to use a trigger which can get the only updated field from a record? I am just testing the audit trail log so it can save the field name alongside its other information when it is ...
1
vote
1answer
3k views

Find who and when changed a specific value in the database

We recent found some record in a table of an oracle database has been updated to another value.and it has been cause very important mistake. we want to find out who and when has done this? could ...
1
vote
2answers
400 views

Data - Changes Audit Trail

What are typical scenarios where the user might require a data-change-audit-trail?
1
vote
3answers
267 views

Login report of Sysadmin

We have got a requirement to provide login report from SQL Server for Sysadmin only - This would have log-in date and time when anyone logged into SQL server having sysadmin privilege. Is there ...
1
vote
1answer
3k views

How to log ALL queries made by users in SQL Server 2017 Standard? [duplicate]

Is there a possibility to do this? All queries and actions performed in any database need to be logged, because of in house compliance. I need information (and/or source) if we need MS SQL 2017 ...
1
vote
1answer
317 views

SQL server Audit- Does it cause overhead

If I enable Audit on production databases that have over 100 m rows and have constant DML statements going (24 hours), is that going to cause any overhead on SQL server performance or tempdb? Does ...
1
vote
1answer
2k views

Audit Logins on PostgreSQL 9.0

I have setup a script, created from various links on the web to trace activity in a table using a trigger. /* Create the MinUser Table */ CREATE TABLE MinUser ( User_Id int NOT NULL ...
1
vote
2answers
236 views

Is there an equivalent to Azure SQL Threat Detection for on-premise database servers?

Due to GDPR, we are seeking software to help identify malicious activity or data breaches from our production SQL Server. It seems if we were using Azure, this is a flick of a switch. What is ...
1
vote
1answer
31 views

How can I get the host_name who creates a DB (proactive mode) in SQL Server 2008?

First, I want to clarify that I am not looking for a SELECT HOST_NAME(). I am managing a database environment and have given the developers permission to create the databases they need in the ...
1
vote
1answer
2k views

SQL trigger to get User ID column

I would like to achieve the following: Users log into a web app, using their credentials from the users table. After inserting a row into the inserttest table, a trigger activates in which it ...
1
vote
1answer
513 views

Multi event Trigger syntax

I have a db2 LUW 10.5 database. I want to create a trigger that saves a copy of a record into an audit table whenever, a record gets updated and inserted. I came up with follwing syntax: CREATE ...
1
vote
1answer
416 views

Triggers on Slave database (in the context of replication) for auditing purpose in MySQL

I have a requirement for auditing in MySQL database. It means I am interested in what data is changed in my database and when. For fulfilling this requirement I am thinking about the triggers. I am ...
1
vote
1answer
131 views

In Oracle DB 11.2g, is it possible for the audit trail to explicitly mention account locking events?

As it is, the audit trail will show login failures, and an attempt to log into a locked account (ORA-01017 and ORA-28000). What I would like to know is if it's possible for it to make a mention when ...
1
vote
1answer
2k views

Mysql triggers for auditing

We have a requirement to fulfill - we need an auditing table for all of our entities. We wonder if creating the following triggers will be a good practice: CREATE DEFINER=`root`@`localhost` TRIGGER `...
1
vote
1answer
42 views

Auditing all User activities

Today I had to grant sysadmin rights for 2 users. ;( As I couldn't change that, I at least want to see, what they are doing, so I am looking for a way, to audit all activities by these 2 Users. ...
1
vote
1answer
194 views

Managing AUD$ without DBMS_AUDIT_MGMT

I have a SYSTEM's table AUD$ where AUDIT records are stored. My AUDIT_TRAIL is set to DB,EXTENDED. I am on Oracle DB version 12c (12.2.0.1.0). With time (in 3 years) my AUD$ table grew to 500GB in ...
1
vote
1answer
110 views

Server Principal SID showing as NULL and name as empty string

In my SQL Server 2016 server,i set up a user logins Audit for Login successful and Login Failed action. Here is the script. USE [master] GO CREATE SERVER AUDIT SPECIFICATION [...
1
vote
1answer
180 views

Audit Plug-in for MYSQL 5.7.24 error

I have tried installing MariaDB audit plugin for MySQL 5.7.24. I have downloaded the 'server_audit.so' from MariaDB-10.3.11 and I think it is compatible with MySQL 5.7.24. But I have encountered this ...
1
vote
2answers
467 views

Queries not logging when using Extended Events in MS-SQL Server to track queries

I'm using MS-SQL Server 2012 Standard, running on Windows Server 2012 RTM. I used SSMS to create a Extended Event Session, where I used the built-in "Batch Query Tracking" template and save the result ...
1
vote
1answer
151 views

Know what tables each user is accessing

I have a database with a lot of users, all of them with full read privileges on all the tables but not all the users are reading all the tables. I want to have each user having as little privileges as ...
1
vote
2answers
117 views

SQL Server - storing audit to table

Is there a standardised way to store auditing information constantly to a table for further analyse?
1
vote
1answer
1k views

SQL Server Audit not tracking changes at the database level

I'm currently trying to create a test implementation of SQL Server Audit in SQL Server Management Studio to see how it works. I created an test audit at the server level, and another one at the ...
1
vote
1answer
131 views

Database agnostic auditing [duplicate]

Background Various databases have custom implementations for auditing: SQL Server Audit Oracle Audit PostgreSQL Audit Trigger MySQL Enterprise Audit Problem A number of problems exist: There is ...
1
vote
1answer
50 views

Oracle 12 - Reporting on Roles

Is there a way to report on all the custom roles and/or responsibilities created within Oracle, Outside of SQL? I am looking for a dashboard that shows how many have x role, y role that could be ...
1
vote
1answer
2k views

Field Level Auditing in Oracle 11g R2

I want to enable auditing on some column in a table. I have tested the SYS, Schema and Table level auditing. Guide me or refer me some document to enable auditing on column level.
1
vote
1answer
2k views

Audit select queries against specified tables by specified users

I have a requirement to audit all SELECT queries (by access) against specified tables by specified users. As far as I can tell, this can't be done with normal auditing; it only supports auditing all ...

1 2
3
4 5
7