Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: Auditing Question

Re: Auditing Question

From: <amerar_at_iwc.net>
Date: Fri, 08 Jun 2007 13:38:21 -0700
Message-ID: <1181335101.630635.244740@q66g2000hsg.googlegroups.com>


On Jun 8, 3:22 pm, "fitzjarr..._at_cox.net" <fitzjarr..._at_cox.net> wrote:
> On Jun 8, 3:13 pm, "ame..._at_iwc.net" <ame..._at_iwc.net> wrote:
>
>
>
>
>
> > On Jun 8, 2:49 pm, "fitzjarr..._at_cox.net" <fitzjarr..._at_cox.net> wrote:
>
> > > On Jun 8, 2:40 pm, "fitzjarr..._at_cox.net" <fitzjarr..._at_cox.net> wrote:
>
> > > > On Jun 8, 2:11 pm, "ame..._at_iwc.net" <ame..._at_iwc.net> wrote:
>
> > > > > Hi,
>
> > > > > We have a situation here where I've been asked to audit the database
> > > > > for queries or DML on tables with an 'email' column, for a specific
> > > > > email address. So, when any DML is done to the record containing that
> > > > > email address, or any select is done on that record, write the info to
> > > > > a file or table on the who, when, what, etc.
>
> > > > > The DML is easy, actually I can do that using triggers. However, I
> > > > > really have no clue on how to audit select statements. Is this FGA?
> > > > > I thought that was more for security.........
>
> > > > > Can anyone help, or point me in the right direction. I'm not looking
> > > > > to read the Oracle manual from start to finish. I'm hoping that
> > > > > someone else has done this and can give me a few instructions.
>
> > > > > Thanks in advance!!
>
> > > > You can start here:
>
> > > >http://oratips-ddf.blogspot.com/2006/05/audit-this.html#links
>
> > > > It should give you a start on configuring and using FGA. Then you can
> > > > read further in the documentation as the need arises.
>
> > > > David Fitzjarrell- Hide quoted text -
>
> > > > - Show quoted text -
>
> > > I hit 'Send' before I realized Daniel also has worked examples:
>
> > >http://www.psoug.org/reference/fgac_demo.html
>
> > > Between the two you should be able to get FGA working.
>
> > > David Fitzjarrell- Hide quoted text -
>
> > > - Show quoted text -
>
> > This client is running 8i. I do not think FGA is part of 8i........- Hide quoted text -
>
> > - Show quoted text -
>
> It is not. You now have some work to do, however the first link gives
> you an option for 8i connection auditing you can expand with v$sql and
> v$sqlarea to possibly obtain the information you've been charged with
> producing.
>
> David Fitzjarrell- Hide quoted text -
>
> - Show quoted text -

Not to sound ignorant, but I've worked with v$sql & v$sqlarea before. Often times when trying to audit the SQL statement you wind up getting the statement you're using to query the data dictionary.

But, I'll give this a shot. Too bad 8i does not have some type of Column Value Auditing....... Received on Fri Jun 08 2007 - 15:38:21 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US