RE: Auditing

From: Norrell, Brian <BNorrell_at_QuadraMed.com>
Date: Fri, 22 Jun 2001 08:59:02 -0700
Message-ID: <F001.00333D61.20010622090556@fatcity.com>

I did
this about 3 years ago, so either Oracle plugged the hole, or I am not remembering correctly. Maybe it is a public synonym, or try create view sys.aud$ as select * from system.aud$. That sounds vaguely familiar...

Brian Norrell Manager, MPI Development QuadraMed 511 E John Carpenter Frwy, Su 500 Irving, TX 75062 (972) 831-6600
-----Original Message-----From: Nirmal Kumar Muthu Kumaran [mailto:NIRMALK_at_qtel.com.qa]Sent: Friday, June 22, 2001 5:42 AMTo: Multiple recipients of list ORACLE-LSubject: RE: Auditing
Hi Norrell,
I just tested ur case.
Can you tell me, how it's possible ,
when doing auditing, oracle will refer to the sys.aud$ table itself, correct?.

If i droped it (even there is a synonym on that name),
Oracle giving an error, it's not able
to find the sys.aud$ table.
Nirmal,
-----Original Message----- <FONT

  face=Arial size=1>From:   <FONT face=Arial 
  size=1>Norrell, Brian [SMTP:BNorrell_at_QuadraMed.com] <FONT 
  face=Arial size=1>Sent:   <FONT face=Arial 
  size=1>Thursday, June 21, 2001 6:33 PM <FONT face=Arial 
  size=1>To:     Multiple

recipients of list ORACLE-L Subject: RE: Auditing
 aud$ is one of the few system tables that can have an owner other than sys. You can create it under another schema (like system) and give sys a private synonym pointing to system.aud$. Then put the trigger on the alternate aud$
 create table system.aud$ as select * from sys.aud$; drop table sys.aud$;
 create synonym sys.aud$ for system.aud$; create trigger x on system.aud$ as ... Brian Norrell Manager, MPI Development QuadraMed 511 E John Carpenter Frwy, Su 500 Irving, TX 75062 (972) 831-6600
 -----Original Message----- Sent: Thursday, June 21, 2001 6:00 AM To: Multiple recipients of list ORACLE-L This will not work as you can't create triggers on sys objects. So tell me the way how i should create triggers on aud$.
 -----Original Message----- Sharma Sent: Thursday, June 21, 2001 2:56 PM To: Multiple
 recipients of list ORACLE-L
 i think u can use triggers such kind of auditing. create aud$ table with one more column, and try updating the column as soon user fires some sql.
 this is just a thought. could find another opinion.
 saurabh -----
 Original Message ----- To: Multiple
 recipients of list ORACLE-L <ORACLE-L_at_fatcity.com> Sent: Thursday, June 21, 2001 11:15 AM
> Hi all there, > I am auditing a database where 400 users are concurrently accessing the > database.
> Now in the table AUD$ we have all the records
 of the user transactions.But > is there any way to store what sort of query he is running so that i can see > the
 actual text of query which was fired 3 days before. > Regards, >
 Anand > > -- > Please see the official ORACLE-L FAQ: <A href="http://www.orafaq.com" target=_blank>http://www.orafaq.com > -- > Author: Anand
 > INET: karhadkar_at_rolta.com
> > Fat

 City Network Services -- (858) 538-5051 FAX: (858) 538-5051 > San Diego,
 California -- Public Internet access / Mailing Lists >

> To REMOVE yourself from this mailing list,
 send an E-Mail message > to:
 ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing:
 UNSUB ORACLE-L > (or the name of mailing list you want to be removed from). You may > also send the HELP command for other information (like subscribing).

Please see the official ORACLE-L FAQ: <A href="http://www.orafaq.com" target=_blank>http://www.orafaq.com -- Author: Saurabh Sharma INET: ssharma1_at_fcsltd.com Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Please see the official ORACLE-L FAQ: <A href="http://www.orafaq.com" target=_blank>http://www.orafaq.com -- Author: Anand INET: karhadkar_at_rolta.com Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: <A href="http://www.orafaq.com" target=_blank>http://www.orafaq.com -- Author: Norrell, Brian INET: BNorrell_at_QuadraMed.com Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).

Received on Fri Jun 22 2001 - 10:59:02 CDT