Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> RE: Auditing

RE: Auditing

From: Ron Thomas <rthomas_at_hypercom.com>
Date: Fri, 22 Jun 2001 10:17:15 -0700
Message-ID: <F001.00333F53.20010622101656@fatcity.com>

FWIR, recerate the table as user sys but specify a different tablespace. Does not require synonyms,
views, act of vodoo, etc.

Ron
rthomas_at_hypercom.com
ron_at_karaoke-time.com

"Karaoke- Japanese for migraine."

                                                                                       
                        
                    BNorrell_at_Quad                                                      
                        
                    raMed.com            To:     ORACLE-L_at_fatcity.com                  
                        
                    Sent by:             cc:                                           
                        
                    root_at_fatcity.        Subject:     RE: Auditing                     
                        
                    com                                                                
                        
                                                                                       
                        
                                                                                       
                        
                    06/22/01                                                           
                        
                    10:05 AM                                                           
                        
                    Please                                                             
                        
                    respond to                                                         
                        
                    ORACLE-L                                                           
                        
                                                                                       
                        
                                                                                       
                        




I did this about 3 years ago, so either Oracle plugged the hole, or I am not remembering correctly.
Maybe it is a public synonym, or try create view sys.aud$ as select * from system.aud$. That
sounds vaguely familiar...

Brian Norrell
Manager, MPI Development
QuadraMed
511 E John Carpenter Frwy, Su 500
Irving, TX 75062
(972) 831-6600

-----Original Message-----
Sent: Friday, June 22, 2001 5:42 AM
To: Multiple recipients of list ORACLE-L

Hi Norrell,

I just tested ur case.

Can you tell me, how it's possible , when doing auditing, oracle will refer to the sys.aud$ table
itself, correct?.

If i droped it (even there is a synonym on that name),

Oracle giving an error, it's not able to find the sys.aud$ table.

Nirmal,

     -----Original Message-----
     From:   Norrell, Brian [SMTP:BNorrell_at_QuadraMed.com]
     Sent:   Thursday, June 21, 2001 6:33 PM
     To:     Multiple recipients of list ORACLE-L
     Subject:        RE: Auditing


     aud$ is one of the few system tables that can have an owner other than sys.
     You can create it under another schema (like system) and give sys a private
     synonym pointing to system.aud$.  Then put the trigger on the alternate aud$


     create table system.aud$ as select * from sys.aud$;
     drop table sys.aud$;
     create synonym sys.aud$ for system.aud$;
     create trigger x on system.aud$ as ...


     Brian Norrell
     Manager, MPI Development
     QuadraMed
     511 E John Carpenter Frwy, Su 500
     Irving, TX 75062
     (972) 831-6600





     -----Original Message-----
     Sent: Thursday, June 21, 2001 6:00 AM
     To: Multiple recipients of list ORACLE-L





     This will not work as you can't create triggers on sys objects.
     So tell me the way how i should create triggers on aud$.


     -----Original Message-----
     Sharma
     Sent: Thursday, June 21, 2001 2:56 PM
     To: Multiple recipients of list ORACLE-L





     i think u can use triggers such kind of auditing.
     create aud$ table with one more column, and try updating the column as soon
     user fires some sql.


     this is just a thought. could find another opinion.


     saurabh
     ----- Original Message -----
     To: Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com>
     Sent: Thursday, June 21, 2001 11:15 AM






> Hi all there,
> I am auditing a database where 400 users are concurrently accessing the
> database.
> Now in the table AUD$ we have all the records of the user transactions.But
> is there any way to store what sort of query he is running so that i can
see
> the actual text of query which was fired 3 days before.
> Regards,
> Anand
>
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: Anand
> INET: karhadkar_at_rolta.com
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
-- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Saurabh Sharma INET: ssharma1_at_fcsltd.com Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Anand INET: karhadkar_at_rolta.com Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Norrell, Brian INET: BNorrell_at_QuadraMed.com Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Ron Thomas
  INET: rthomas_at_hypercom.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
Received on Fri Jun 22 2001 - 12:17:15 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US