Questions tagged [audit]

Database auditing involves observing a database so as to be aware of the actions of database users.

Filter by
Sorted by
Tagged with
1
vote
1answer
235 views

How big should I make a column in an audit table for storing the output of COLUMNS_UPDATED()?

I have a stored procedure which creates a complementary trigger and audit table when a table name is passed into it. The SP filters out all the calculated columns and other stuff that stops you doing ...
1
vote
1answer
95 views

How to distinguish the current operation is done from system or from sql server management studio

We want to record who insert or update a table, so we add "CreatedBy" and "ModifiedBy" columns. When the data is changed through the application, we can easily get the person. But when someone uses ...
1
vote
1answer
1k views

Audit 'sa' login in SQL Server 2005

I have a requirement where I need to audit (and potentially be notified) whenever the 'sa' user account logs into an SQL Server 2005 instance. Additionally, there is a preference that the database ...
1
vote
1answer
34 views

Oracle Audit on Types

I found that auditing can be done on oracle schema objects like procedures and views. Is there any possibility to do the auditing on Types?
1
vote
1answer
96 views

Percona Audit Log plugin not auditing account

I have setup the Percona-server-5.6.41-89 Audit plugin with the following settings: audit_log_policy=QUERIES audit_log_handler=FILE audit_log_file=/var/log/mysql/perc_audit.txt audit_log_format=CSV ...
1
vote
2answers
1k views

Oracle Database Security - Audit Trail for specific user and specific module application

I want to enable audit trail for specific user, but only for sessions when this user connect to database using one specific module applications. For ex. I want to enable audit trail for user test1 ...
1
vote
1answer
5k views

missing FROM-clause entry for table in trigger function in postgresql

I have created an audit trigger for table "product" that should insert data into "log_product". CREATE FUNCTION public.insert_log_product() RETURNS trigger LANGUAGE 'plpgsql' COST 100 VOLATILE NOT ...
1
vote
1answer
2k views

How to grant permission to view database audit logs to non-sysadmin login

I have a non-sysadmin user which must be provided with an ability to view "server audit logs" Tried to grant below permissions to this login / user: grant ALTER ANY server AUDIT to [login] grant ...
1
vote
1answer
1k views

Audit Database Log On/Off

SQL Server 2012 introduced a few new audit action groups. Two that I'm interested in using are to audit log-ons/offs at the database level: SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP ...
1
vote
1answer
850 views

Select from sys.server_file_audits returns wrong filename

I activated an audit on a SQL Server 2016 istance. Version i SP1 CU3, Enterprise Edition. With this query: SELECT * FROM sys.server_file_audits I get as log_file_path: O:\auditfiles\ In ...
1
vote
1answer
396 views

Trigger to track changes

In SQL Server, version 2008R2 Enterprise, 64 bit, we created a database to track DDL changes. I was inspired by this solution: https://www.mssqltips.com/sqlservertip/2085/sql-server-ddl-triggers-to-...
1
vote
2answers
62 views

Audit kernel module usage in Oracle

In my continuing effort to bring my database up to a given standard, I need to ensure that all loading, unloading, and restarting of kernel modules are being audited. I have no idea what this thing is ...
1
vote
1answer
576 views

Find current users DDL statement running, Oracle 11g

I have created a database trigger (oracle 11.2.0.4 standard edition on windows 2008 R2) to intercept any drop or truncate statements, eg drop table abc123; and that will raise an exception to ...
1
vote
1answer
2k views

Audit trail tables in Oracle 12c

I came across this description of this feature, AuditTrail Tables: https://docs.oracle.com/cd/A60725_05/html/comnls/us/fnd/auddat02.htm Our project needs to track changes on a per table basis, so ...
1
vote
1answer
321 views

Auditing authentication issues in a distributed environment

I'm trying to get a better handle on what locked out a specific user when multiple Oracle databases are involved using database links. Setup: sqlplus kjohnston@db2 create user testuser identified ...
1
vote
1answer
239 views

Auditing - sp_send_dbmail from server-level triggers failed

I have a server-level trigger to send a mail when a database is created. I have a few users in the db_creator server role. The trigger fails for these users because they don't have permissions to ...
1
vote
1answer
162 views

Applying audit policy on multiple auditing subject or object

I have created a policy on execute category and I would like to know if this policy can be applied on multiple auditing subject or object. Since the execute category will generate many audit entries I ...
1
vote
1answer
523 views

Database design. And get last modified time with each column in PostgreSQL

My database/table each endpoint/scope have multiple table, e.g user: user, user_information, user_role ... I was wondering should I separate table like below, or not? This is my first time to ...
1
vote
1answer
614 views

Auditing DDL with MySQL

We have a MySQL database on an IBM i (as/400) that has many people with admin access. We would like to audit who is making changes, and when they are made. On SQL Server we would use DDL Triggers, but ...
1
vote
1answer
229 views

SQL logins Audit for SQL Server 2005/2008

For the Security Audit of SQL servers 2005/8 R2, We are looking for a method which can list us SQL accounts which have not changed password for last X days. For a single login we can do it via ...
1
vote
1answer
809 views

Audit Plug-in in MYSQL 5.7.5

Following error occured while using installing MariaDB Audit Plugin Library (i.e. server_audit-1.1.8.tar.gz) in 5.7.5-m15 MySQL Community Server (GPL) in Centos release 6.5: ERROR 1126 (HY000): Can't ...
1
vote
1answer
556 views

Server audit with more than 1.000 entries

On my Mssql 2008r2 I created a server audit for all login and logout: USE MASTER GO CREATE SERVER AUDIT audit_test TO FILE (FILEPATH = 'D:\Audit') GO ...
1
vote
1answer
7k views

Can I delete SQL Server 2008 R2 “audittrace” (.trc) files

This is precaution question :) When I was configuring SQL Server 2008 R2 database engine, I checked "Enable C2 audits" which I don't really need. From that time it created a lot of files like ...
1
vote
1answer
1k views

What are some good methods of structuring a MySQL audit trail to be both immutable, and perform well for usage?

In one application, we have an audit table that uses the ArchiveEngine in conjunction with a few triggers to capture 100% of the changes that occur. The upside to this is that 20+ million rows ...
1
vote
1answer
34 views

How to determine if Oracle Java classes are being used

Oracle EE 12.1.0.2 As part of a general clean up of a legacy application prior to a migration I'm trying to determine what objects are actually in use. There are some 230 JAVA class objects in my ...
1
vote
1answer
59 views

Discover who changed SQL Server service state

There's any way to find out who stopped\restarted\started the following services ? SQL Server Database Engine SQL Server Agent SQL Server Analysis Services Thanks !
1
vote
2answers
38 views

SQL Server Logon Auditing and Reporting the data from a DB Table

Is it possible to configure a SQL Server database to write audit information for logons (success and failure) to a database table that can be queried? The requirement is to be able to generate a ...
1
vote
0answers
51 views

Oracle Still Auditing after NOAUDIT

We're redoing what is and isn't being auditing in a database my team has been put in charge of. Old audit settings were producing ~2M audit entries a day. Audit_trail parameter is set to DB. So we ...
1
vote
0answers
32 views

Audit trail database design for multiple related tables [closed]

We have the database design requirement for audit trail purpose in MySQL 5.7. There is one main table and there are few sub-tables to the main table. For every record in the main table, there will ...
1
vote
0answers
14 views

SQL Server - Change AuditLevel on Linux hosted instance

just wondering if it's possible to change the AuditLevel on SQL Server 15.0.1800.32 (2019) hosted on Linux to "Failed logins only". Currently it's set to audit failed and successful logins and I ...
1
vote
1answer
29 views

Auditing of modification of change to encryption keys

Is it possible to audit/log any attempts or actual changes to the keys used in the encryption hierarchy? We are using 2014 Enterprise edition and have recently enabled TDE across our databases and ...
1
vote
0answers
31 views

SQL Server Audit Specifications Not Writing to the Security Log

I've come across an issue where SQL Server database audit specifications have stopped writing to the security event log. The audit object will write events to a SQL audit file or the Application ...
1
vote
1answer
79 views

Optimize MySQL query retrieval from audit log table

I am running MySQL InnoDB 5.6. This is my first post, so please bare with me of any mistakes. I have this schema: I have a list of invoices in the invoice table, and if I want to see all the ...
1
vote
1answer
116 views

Audit trigger 91plus: setting up with proper role?

One of the solutions available for auditing in PostgreSQL is Audit trigger 91plus. wiki page github page There is a section in the wiki that is confusing to me: Changes by the table owner and ...
1
vote
0answers
23 views

How to measure durations (import, update) in Postgres DB?

we have a Postgres database which receives data by an extern web client. We would like to measure the duration of the UPDATE, INSERT and DELETE processes on our tables. Until now, we used the ...
1
vote
0answers
25 views

MS SQL 2008 R2, security and auditing

I have an 2008R2 SQL Server. There are a few AD groups added to the logins. Each group must have some permissions (and only these permissions if possible). Can someone help me with a few questions: ...
1
vote
0answers
125 views

SQL Server Agent Alert does not pick up some of Events from Application Log written by SQL Server Audit

My end goal is to be emailed when new object (schema, table, procedure etc.) is created / altered / dropped at one of my databases on SQL Server I created a server-level audit, that writes to Windows ...
1
vote
0answers
20 views

Any way to pass additional parameters to Azure SQL Audit?

We are exploring Azure SQL Auditing capabilities. It gives us a list of all the queries executed and some additional data which is good. However, field server_principal_name is always reflecting a ...
1
vote
0answers
967 views

SQL Audit and Truncating the Audit File

I'd like to set up SQL Audit on our SQL 2014 database and then setup a process where we read the contents of the audit file, on a periodic basis, using fn_get_audit_file() but then immediately ...
1
vote
2answers
47 views

Audit Trail trigger can't detect if dates are the same

I know this is a common problem with SQL language triggers, but I just cannot seem to get this right. Basically I'm trying to write an "Audit Trail" trigger for all of my fields. I'm using an IF ...
1
vote
1answer
3k views

Designing a bank database schema with multiple balances per account [closed]

I'm trying to build a schema to keep a record of the transactions made on some accounts, but those accounts are not "user accounts", instead there are orders that are being paid, and money is being ...
1
vote
1answer
357 views

ip address record in sybase ASE auditing database? [closed]

everone. I installed the sybsecurity database for auditing in sybase ase 15.5. The installation is OK. I configured the audit commands, for example, for auditing the sa user, and other users of the ...
1
vote
0answers
1k views

How to audit database user password changes in oracle 11g?

I want to record how many times or which user accounts passwords were changed using Oracle database auditing techniques. I also want to record any password changes done to system user account.
1
vote
0answers
107 views

SQL Server Audit with dynamic sql

I'm trying to implement database level audit on some tables for tracking the changes. When I activate the audit I see the results in the audit file as seen below. UPDATE "MYDB"."dbo"."MyCompany$Mail ...
1
vote
3answers
838 views

I need to audit all actions for a user on all databases - not sure best way

I have a user on a SQL Server that is used for executing SSRS queries. This user was made a sysadmin before I started at this job. I want to remove the sysadmin permission, but not break any reports. ...
1
vote
0answers
265 views

How do I find the identity of a failed connection request

I have two Microsoft SQL servers, one running 2008 R2 Enterprise, one running 2012 Enterprise. Both are logging lots of failed connections requests due to untrusted domain : =============== SSPI ...
1
vote
0answers
1k views

Trying to install Audit_log Plugin on MySQL

I'm trying to install the Percona Audit_log plugin for my instance of MySQL. I ran it previously so I know it works ok with MySQL (I'm sure it says so in the documentation anyway). I have MySQL 5.5....
1
vote
1answer
247 views

Statement specific auditing - Oracle

I have enabled default auditing in one of my database. Oracle 11g. Audit_trail is set to DB, other than that for a particular schema 'test' I have set: audit all on test by access With the above ...
1
vote
0answers
86 views

Tracking MySQL DML Operations Source

We have a table that will get inserts and updates from 10 different jobs. We need to track each DML operation with its source i.e job name. We have used audit tables and triggers to get old and new ...
1
vote
0answers
113 views

Auditing a Single User in SQL Server

I have an application that accesses my SQL Server using a username\password. However our lead developer has access to this password and I suspect that he may be utilizing this outside of our terms of ...

1 2 3
4
5
7