| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
 |
 | |||
| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
|
| |||
Home -> Community -> Mailing Lists -> Oracle-L -> Re: auditing entire schema
Implemented something of the kind many years ago. You need not audit everything. In fact just AUDIT SELECT BY SESSION (uncertain about precise syntax), it will be enough. Implement some daily purging of the audit log, and you can keep track of how many people access what everyday. Quite useful to detect who has been fired or is on maternity leave, by the way - personnel department sometimes fail to communicate this type of information, and as the site was security-sensitive we were disabling accounts with no activity after a suitable grace period.
HTH
Stephane Faroult
Oriole Corporation
Voice: +44 (0) 7050-696-269
Fax: +44 (0) 7050-696-449
Performance Tools & Free Scripts
Christopher Spence wrote:
>
> Perhaps sum of used blocks, rows, and such stored into a table, then daily
> populate this table and do a comparison.
>
> It will be significantly less expensive than using full auditing.
>
> "Walking on water and developing software from a specification are easy if
> both are frozen."
>
> Christopher R. Spence
> Oracle DBA
> Fuelspot
>
> -----Original Message-----
> Sent: Tuesday, May 29, 2001 3:56 AM
> To: Multiple recipients of list ORACLE-L
>
> I want to audit ALL objects in the database - we have a lot of objects lying
> around and even the developers dont know whether some of them are being used
> or not.
> I dont think there is any way by which I can audit all objects in the
> database (thats by issuing a single stmt).
> I tried to audit by schema :
> audit all on TRAVEL by session;
> but that does not work.
> Currently I am doing this :
> spool audit_all
> select 'audit all on '||owner||'.'||segment_name||' by session;' from
> dba_segments where owner not in ('SYS','SYSTEM');
> spool off
>
> Any better ideas ?
> regards,
> ~dbatag
-- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Stephane Faroult INET: sfaroult_at_oriole.com Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).Received on Tue May 29 2001 - 15:12:50 CDT
 |
 |