Re: Auditing: Trigger or Audit_Trail?

Hi,

You might find useful my paper "An introduction to simple Oracle auditing" from http://www.petefinnigan.com/orasec.htm - it shows how to turn on audit, review what's turned on and includes some sample queries to check for abuse. With what you are doing i would go for kernel features and the basic audit commands rather than triggers. Its better resource wise. Also should you want to go to more detail you could consider fine grained audit as its performs better than triggers.

hth

kind regards

Pete

-- 
Pete Finnigan
email:pete_at_petefinnigan.com
Web site: http://www.petefinnigan.com - Oracle security audit specialists
Book:Oracle security step-by-step Guide - see http://store.sans.org for details.