Re: oracle system audit for local host activity

dan - i'm sorry, but I don't understand. I haven't been able to find any documentation on controlling audit log event generation by attributes in the context.

i understand how to query the context to figure out if the session is local console based, but I don't understand how that bit of information can control the generation of audit log events.

lets say that IP_ADDRESS is a good indicator that the session is local. how then do I "turn on" auditing for that session?

thanks very much for your help,
/rpf

DA Morgan wrote:
> Richard wrote:
> > dan - can you give me an example, now, of how to implement system
> > auditing on oracle 9.2, capturing *only* events caused as a result of
> > interactions with the database from a local terminal?
>
> You will need to combined a couple of different capabilities to
> achieve this:
>
> First the AFTER LOGON system event trigger
>
> Then the SYS_CONTEXT function has a number of variations that might
> be useful such as:
>
> HOST: Name of the host machine from which the client has connected.
> IP_ADDRESS: IP address of the machine from which the client is connected.
> ISDBA: TRUE if you are logged on as SYS.
> NETWORK_PROTOCOL: Network protocol being used for communication, as
> specified in the 'PROTOCOL=protocol' portion of the connect string.
> TERMINAL: The operating system identifier for the client of the current
> session.
> Some combination will clearly identify what you want ...
>
> Then, having identified the user, create a CONTEXT using
> DBMS_APPLICATION_INFO.SET_CLIENT_INFO, and audit what you wish.
> --
>
Received on Wed Oct 11 2006 - 19:39:37 CDT