RE: Database Auditing

Beware that user SYS is not AUDITable in 8i...

Rich

Rich Jesse                           System/Database Administrator
[EMAIL PROTECTED]                  Quad/Tech Inc, Sussex, WI USA

> -----Original Message-----
> From: Arup Nanda [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, June 11, 2003 1:14 AM
> To: Multiple recipients of list ORACLE-L
> Subject: Re: Database Auditing
>
>
> Ravindra,
>
> I'm not sure I understand the question correctly. Statement
> level auditing?
> Are you referring to recording that a particular statement
> was executed on a
> specific table? If so, the plain vanilla AUDIT statement is
> for you. There
> is no need for any triggers to be set up.
>
> If you want more elaborate, which rows the user updated, etc.
> you have a
> challenge. In Oracle 8i, you could go to log miner to mine
> all statements
> that modified data. Thi swill capture all but the SELECT
> statements. In
> Oralce 9i, there is a new feature called Fine Grained
> Auditing that can
> capture the exact statement the user issued and can even
> audit on based on
> the predicate of the select query. If youwant some
> moreinformation on the
> FGA, let me know.
>
> If you want to capture the DDL changes, the best option is to
> use system
> level triggers.
>
> I am not sure what you mean by OS level auditing of statements.
>
> HTH.
>
> Arup Nanda
> Author of the forthcoming book "HIPAA Security and Auditing
> for Oracle" from
> Rampant TechPress (www.Rampant.cc)
>
>
>
> ----- Original Message -----
> To: "Multiple recipients of list ORACLE-L" <[EMAIL PROTECTED]>
> Sent: Wednesday, June 11, 2003 12:04 AM
>
>
> > Hi All,
> >
> > How do we turn on statement level auditing (DB and OS
> Level) to audit the
> > DML/DDL's on the database.Is this possible with out triggers?
> >
> > Thanks
>

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jesse, Rich
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).