Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: Auditing Question

Re: Auditing Question

From: <fitzjarrell_at_cox.net>
Date: Fri, 08 Jun 2007 13:22:14 -0700
Message-ID: <1181334134.255259.184530@k79g2000hse.googlegroups.com>


On Jun 8, 3:13 pm, "ame..._at_iwc.net" <ame..._at_iwc.net> wrote:
> On Jun 8, 2:49 pm, "fitzjarr..._at_cox.net" <fitzjarr..._at_cox.net> wrote:
>
>
>
>
>
> > On Jun 8, 2:40 pm, "fitzjarr..._at_cox.net" <fitzjarr..._at_cox.net> wrote:
>
> > > On Jun 8, 2:11 pm, "ame..._at_iwc.net" <ame..._at_iwc.net> wrote:
>
> > > > Hi,
>
> > > > We have a situation here where I've been asked to audit the database
> > > > for queries or DML on tables with an 'email' column, for a specific
> > > > email address. So, when any DML is done to the record containing that
> > > > email address, or any select is done on that record, write the info to
> > > > a file or table on the who, when, what, etc.
>
> > > > The DML is easy, actually I can do that using triggers. However, I
> > > > really have no clue on how to audit select statements. Is this FGA?
> > > > I thought that was more for security.........
>
> > > > Can anyone help, or point me in the right direction. I'm not looking
> > > > to read the Oracle manual from start to finish. I'm hoping that
> > > > someone else has done this and can give me a few instructions.
>
> > > > Thanks in advance!!
>
> > > You can start here:
>
> > >http://oratips-ddf.blogspot.com/2006/05/audit-this.html#links
>
> > > It should give you a start on configuring and using FGA. Then you can
> > > read further in the documentation as the need arises.
>
> > > David Fitzjarrell- Hide quoted text -
>
> > > - Show quoted text -
>
> > I hit 'Send' before I realized Daniel also has worked examples:
>
> >http://www.psoug.org/reference/fgac_demo.html
>
> > Between the two you should be able to get FGA working.
>
> > David Fitzjarrell- Hide quoted text -
>
> > - Show quoted text -
>
> This client is running 8i. I do not think FGA is part of 8i........- Hide quoted text -
>
> - Show quoted text -

It is not. You now have some work to do, however the first link gives you an option for 8i connection auditing you can expand with v$sql and v$sqlarea to possibly obtain the information you've been charged with producing.

David Fitzjarrell Received on Fri Jun 08 2007 - 15:22:14 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US