Re: Oracle Auditing
From: The Magnet <art_at_unsu.com>
Date: Mon, 22 Feb 2010 07:53:02 -0800 (PST)
Message-ID: <2d060df4-a661-4c58-be32-f80bd381f07e_at_f29g2000yqa.googlegroups.com>
On Feb 22, 9:18 am, John Hurley <johnbhur..._at_sbcglobal.net> wrote:
> On Feb 22, 10:04 am, The Magnet <a..._at_unsu.com> wrote:
>
> snip
>
> > Has anyone used some of the Oracle FGA? We're needing to enable some
> > auditing. I'm having trouble getting it to work. Reading all the
> > documentation on this is taking a while as there are so many options.
>
> > We're running 10g R2 Enterprise on CentOS. We want to basically audit
> > everything that 5 users do. Can anyone help me with the command
> > syntax for this? I tried this to spool it to a file with no luck:
>
> > ALTER SYSTEM SET audit_file_dest=/u05/NI00/audit;
> > audit all by customer,product,data_holder,mutual_fund,orders by
> > access;
>
> > Thanks.
>
> It would probably help if you supplied an error message.
>
> Did you ever hear of putting single quotes around parameters when
> doing an alter system?
>
> Lots of examples around the internet of how to do it ...
Date: Mon, 22 Feb 2010 07:53:02 -0800 (PST)
Message-ID: <2d060df4-a661-4c58-be32-f80bd381f07e_at_f29g2000yqa.googlegroups.com>
On Feb 22, 9:18 am, John Hurley <johnbhur..._at_sbcglobal.net> wrote:
> On Feb 22, 10:04 am, The Magnet <a..._at_unsu.com> wrote:
>
> snip
>
> > Has anyone used some of the Oracle FGA? We're needing to enable some
> > auditing. I'm having trouble getting it to work. Reading all the
> > documentation on this is taking a while as there are so many options.
>
> > We're running 10g R2 Enterprise on CentOS. We want to basically audit
> > everything that 5 users do. Can anyone help me with the command
> > syntax for this? I tried this to spool it to a file with no luck:
>
> > ALTER SYSTEM SET audit_file_dest=/u05/NI00/audit;
> > audit all by customer,product,data_holder,mutual_fund,orders by
> > access;
>
> > Thanks.
>
> It would probably help if you supplied an error message.
>
> Did you ever hear of putting single quotes around parameters when
> doing an alter system?
>
> Lots of examples around the internet of how to do it ...
Well, I figure this will probably do everything I want, hopefully excluding SYSTEM / SYS
ALTER SYSTEM SET audit_file_dest='/u05/NI00/audit';
ALTER SYSTEM set AUDIT_TRAIL = db,extended scope=spfile;
SHUTDOWN
STARTUP
AUDIT ALL BY ACCESS;
Received on Mon Feb 22 2010 - 09:53:02 CST