Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> RE: auditing CREATE DATABASE

RE: auditing CREATE DATABASE

From: Gogala, Mladen <MGogala_at_oxhp.com>
Date: Thu, 17 Oct 2002 10:54:36 -0800
Message-ID: <F001.004EC813.20021017105436@fatcity.com>


Now, without joking, you can do the following: alter system set events='1501 trace name context forever, level 10"; and it will generate an entry in alert_$ORACLE_SID.log and a trace file for every attempt. You should be able to see username from all those trace files.

> -----Original Message-----
> From: Tim Gorman [mailto:Tim_at_SageLogix.com]
> Sent: Thursday, October 17, 2002 1:51 PM
> To: Multiple recipients of list ORACLE-L
> Subject: Re: auditing CREATE DATABASE
>
>
> What a tongue-in-cheek answer: "only catches successful
> attempts"! I like
> his/her sense of humor...
>
> Issuing a CREATE DATABASE command against an already mounted and open
> database triggers an ORA-01501 error. If you are running
> Oracle8i or above,
> you could create an AFTER SERVERERROR database-event trigger
> to capture such
> errors and then log the occurrance in a table somewhere.
>
> Regardless of what version you are running, ORA-01501 gets
> logged to the
> "alert.log" file, so you can catch it that way, too...
>
> ----- Original Message -----
> To: "Multiple recipients of list ORACLE-L" <ORACLE-L_at_fatcity.com>
> Sent: Thursday, October 17, 2002 10:41 AM
>
>
> Is there a way of capturing info on people who issue CREATE DATABASE
> statements?
>
> My Oracle Support technician says auditing won't catch this,
> only catches
> successful attempts.
>
> Regards,
> Patrice Boivin
> Systems Analyst (Oracle Certified DBA)
>
> Systems Admin & Operations | Admin. et Exploit. des systèmes
> Technology Services | Services technologiques
> Informatics Branch | Direction de l'informatique
> Maritimes Region, DFO | Région des Maritimes, MPO
>
> E-Mail: boivinp_at_mar.dfo-mpo.gc.ca
>
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: Boivin, Patrice J
> INET: BoivinP_at_mar.dfo-mpo.gc.ca
>
> Fat City Network Services -- 858-538-5051 http://www.fatcity.com
> San Diego, California -- Mailing list and web hosting services
> ---------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
>
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: Tim Gorman
> INET: Tim_at_SageLogix.com
>
> Fat City Network Services -- 858-538-5051 http://www.fatcity.com
> San Diego, California -- Mailing list and web hosting services
> ---------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
>

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Gogala, Mladen
  INET: MGogala_at_oxhp.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
Received on Thu Oct 17 2002 - 13:54:36 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US