Re: Auditing
Date: Thu, 14 Jul 2011 16:11:00 -0700 (PDT)
Message-ID: <c67d406a-c79f-4b64-a0fd-58a824e15948_at_j15g2000yqf.googlegroups.com>
[Quoted] On Jul 12, 9:06 pm, The Magnet <a..._at_unsu.com> wrote:
> I'm looking to audit DML & Selects on a single table in a given
> schema. I'm not looking to audit everything in the database. We are
> on 10g R2. I set the AUDIT_TRAIL parameter to DB,EXTENDED in the
> init.ora, but it audits everything. Even if I enter a ton of NOAUDIT
> commands, it continues to audit.
>
> I'm not interested in that. I'm only interested in the one table.
> What or how must I set the parameters to do this? I see lots of
> auditing options, but none that are as narrow as I want.
>
> Thanks!
This should work for you:
SQL> audit select, insert, update, delete on emp;
Audit succeeded.
SQL>
SQL> select sessionid, userid, sqltext from sys.aud$;
no rows selected
SQL>
SQL> select * from emp;
EMPNO ENAME JOB MGR HIREDATE SAL COMM DEPTNO
---------- ---------- --------- ---------- --------- ---------- ---------- ----------
7369 SMITH CLERK 7902 17-DEC-80 800 20 7499 ALLEN SALESMAN 7698 20-FEB-81 1600 300 30 7521 WARD SALESMAN 7698 22-FEB-81 1250 500 30 7566 JONES MANAGER 7839 02-APR-81 2975 20 7654 MARTIN SALESMAN 7698 28-SEP-81 1250 1400 30 7698 BLAKE MANAGER 7839 01-MAY-81 2850 30 7782 CLARK MANAGER 7839 09-JUN-81 2450 10 7788 SCOTT ANALYST 7566 09-DEC-82 3000 20 7839 KING PRESIDENT 17-NOV-81 5000 10 7844 TURNER SALESMAN 7698 08-SEP-81 1500 0 30 7876 ADAMS CLERK 7788 12-JAN-83 1100 20 EMPNO ENAME JOB MGR HIREDATE SAL COMM DEPTNO
---------- ---------- --------- ---------- --------- ---------- ---------- ----------
7900 JAMES CLERK 7698 03-DEC-81 950 30 7902 FORD ANALYST 7566 03-DEC-81 3000 20 7934 MILLER CLERK 7782 23-JAN-82 1300 10
14 rows selected.
SQL>
SQL> select sessionid, userid, sqltext from sys.aud$;
SESSIONID USERID SQLTEXT ---------- ------------------------------ -------------------------------------------------------------------------------- 2281 BING select * from emp
SQL> David Fitzjarrell Received on Fri Jul 15 2011 - 01:11:00 CEST