RE: Oracle Audit aud$ vs Database Logon Trigger

From: Lange, Kevin G <kevin.lange_at_ppoone.com>
Date: Thu, 18 Oct 2012 09:57:45 -0500
Message-ID: <F077F09A0E11504D9E720358BEE994D10B13A361_at_APSW0553EVS.ms.ds.uhc.com>



I use both for different databases and reasons. I think I like the logon trigger more simply because it is more customizable on what data is recorded. Plus, it's a lot easier to exclude certain IDs in the logon trigger than it is in the Oracle Auditing. Of course, auditing is written by Oracle and integrated into the system (as opposed to one of us writing a logon trigger) so I tend to think that the code is beter and less of a drag on the system.

-----Original Message-----
From: oracle-l-bounce_at_freelists.org [mailto:oracle-l-bounce_at_freelists.org] On Behalf Of Sanjay Mishra Sent: Thursday, October 18, 2012 9:40 AM To: Michael Dinh
Cc: oracle-l
Subject: Re: Oracle Audit aud$ vs Database Logon Trigger

Thanks Mike. Do we have any pros and cons for both approach. This database is heavily accessed in terms of logon like 500+ user anytime and has 3000+ user in the database. So want to explore as use this approach for this many user or so based on maintenance and reliability.

Tx
Sanjay



 From: Michael Dinh <mdinh235_at_gmail.com> To: smishra_97_at_yahoo.com
Cc: oracle-l <oracle-l_at_freelists.org> Sent: Wednesday, October 17, 2012 11:28 PM Subject: Re: Oracle Audit aud$ vs Database Logon Trigger  

I would use audit functionality for simplicity. 

AUDIT SESSION WHENEVER SUCCESSFUL; Query DBA_AUDIT_SESSION

Use DBMS_AUDIT_MGMT to manage.

HTH -Michael.

On Wed, Oct 17, 2012 at 7:32 PM, Sanjay Mishra <smishra_97_at_yahoo.com> wrote:

Hi
>
>Can someone help as what is best approach in term system performance and best practices for auditing. Requirements is only to check what user has not logon to the database in x number of days and create a report on daily basis. Requirement is to report user who has not logon to the database in last 180 days. So what is best practices like to use Audit command or Database Logon Trigger. Any help in providing any fact is highly appreciable
>
>TIA
>Sanjay
>
>
>--
>http://www.freelists.org/webpage/oracle-l
>
>
>

--
http://www.freelists.org/webpage/oracle-l



This e-mail, including attachments, may include confidential and/or
proprietary information, and may be used only by the person or entity
to which it is addressed. If the reader of this e-mail is not the intended
recipient or his or her authorized agent, the reader is hereby notified
that any dissemination, distribution or copying of this e-mail is
prohibited. If you have received this e-mail in error, please notify the
sender by replying to this message and delete this e-mail immediately.

--
http://www.freelists.org/webpage/oracle-l
Received on Thu Oct 18 2012 - 16:57:45 CEST

Original text of this message