Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: Auditing Question

Re: Auditing Question

From: <amerar_at_iwc.net>
Date: Fri, 08 Jun 2007 14:01:21 -0700
Message-ID: <1181336481.576001.119030@e65g2000hsc.googlegroups.com>


On Jun 8, 3:45 pm, "fitzjarr..._at_cox.net" <fitzjarr..._at_cox.net> wrote:
> On Jun 8, 3:38 pm, "ame..._at_iwc.net" <ame..._at_iwc.net> wrote:
>
>
>
>
>
> > On Jun 8, 3:22 pm, "fitzjarr..._at_cox.net" <fitzjarr..._at_cox.net> wrote:
>
> > > On Jun 8, 3:13 pm, "ame..._at_iwc.net" <ame..._at_iwc.net> wrote:
>
> > > > On Jun 8, 2:49 pm, "fitzjarr..._at_cox.net" <fitzjarr..._at_cox.net> wrote:
>
> > > > > On Jun 8, 2:40 pm, "fitzjarr..._at_cox.net" <fitzjarr..._at_cox.net> wrote:
>
> > > > > > On Jun 8, 2:11 pm, "ame..._at_iwc.net" <ame..._at_iwc.net> wrote:
>
> > > > > > > Hi,
>
> > > > > > > We have a situation here where I've been asked to audit the database
> > > > > > > for queries or DML on tables with an 'email' column, for a specific
> > > > > > > email address. So, when any DML is done to the record containing that
> > > > > > > email address, or any select is done on that record, write the info to
> > > > > > > a file or table on the who, when, what, etc.
>
> > > > > > > The DML is easy, actually I can do that using triggers. However, I
> > > > > > > really have no clue on how to audit select statements. Is this FGA?
> > > > > > > I thought that was more for security.........
>
> > > > > > > Can anyone help, or point me in the right direction. I'm not looking
> > > > > > > to read the Oracle manual from start to finish. I'm hoping that
> > > > > > > someone else has done this and can give me a few instructions.
>
> > > > > > > Thanks in advance!!
>
> > > > > > You can start here:
>
> > > > > >http://oratips-ddf.blogspot.com/2006/05/audit-this.html#links
>
> > > > > > It should give you a start on configuring and using FGA. Then you can
> > > > > > read further in the documentation as the need arises.
>
> > > > > > David Fitzjarrell- Hide quoted text -
>
> > > > > > - Show quoted text -
>
> > > > > I hit 'Send' before I realized Daniel also has worked examples:
>
> > > > >http://www.psoug.org/reference/fgac_demo.html
>
> > > > > Between the two you should be able to get FGA working.
>
> > > > > David Fitzjarrell- Hide quoted text -
>
> > > > > - Show quoted text -
>
> > > > This client is running 8i. I do not think FGA is part of 8i........- Hide quoted text -
>
> > > > - Show quoted text -
>
> > > It is not. You now have some work to do, however the first link gives
> > > you an option for 8i connection auditing you can expand with v$sql and
> > > v$sqlarea to possibly obtain the information you've been charged with
> > > producing.
>
> > > David Fitzjarrell- Hide quoted text -
>
> > > - Show quoted text -
>
> > Not to sound ignorant, but I've worked with v$sql & v$sqlarea before.
> > Often times when trying to audit the SQL statement you wind up getting
> > the statement you're using to query the data dictionary.
>
> > But, I'll give this a shot. Too bad 8i does not have some type of
> > Column Value Auditing.......- Hide quoted text -
>
> > - Show quoted text -
>
> You haven't looked at the first link I supplied. The connection
> auditing table is a key component of this method, along with v
> $session, v$process and v$sqltext. I would read that link before you
> go any further.
>
> David Fitzjarrell- Hide quoted text -
>
> - Show quoted text -

Well, I see where this connection audit table may be helpful. But in terms of auditing and capturing a select statement when a user queries a table for the given value being audited, that looks nearly hopeless........ Received on Fri Jun 08 2007 - 16:01:21 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US