Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> Re: Database Auditing

Re: Database Auditing

From: Arup Nanda <orarup_at_hotmail.com>
Date: Tue, 10 Jun 2003 22:42:52 -0700
Message-ID: <F001.005AED89.20030610221420@fatcity.com>


Ravindra,

I'm not sure I understand the question correctly. Statement level auditing? Are you referring to recording that a particular statement was executed on a specific table? If so, the plain vanilla AUDIT statement is for you. There is no need for any triggers to be set up.

If you want more elaborate, which rows the user updated, etc. you have a challenge. In Oracle 8i, you could go to log miner to mine all statements that modified data. Thi swill capture all but the SELECT statements. In Oralce 9i, there is a new feature called Fine Grained Auditing that can capture the exact statement the user issued and can even audit on based on the predicate of the select query. If youwant some moreinformation on the FGA, let me know.

If you want to capture the DDL changes, the best option is to use system level triggers.

I am not sure what you mean by OS level auditing of statements.

HTH. Arup Nanda
Author of the forthcoming book "HIPAA Security and Auditing for Oracle" from Rampant TechPress (www.Rampant.cc)

> Hi All,
>
> How do we turn on statement level auditing (DB and OS Level) to audit the
> DML/DDL's on the database.Is this possible with out triggers?
>
> Thanks
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> --
> Author: Basavaraja, Ravindra
> INET: [EMAIL PROTECTED]
>
> Fat City Network Services -- 858-538-5051 http://www.fatcity.com
> San Diego, California -- Mailing list and web hosting services
> ---------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
>

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Arup Nanda
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
Received on Wed Jun 11 2003 - 00:42:52 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US