Re: Auditing
Date: Thu, 14 Jul 2011 16:11:00 -0700 (PDT)
Message-ID: <c67d406a-c79f-4b64-a0fd-58a824e15948_at_j15g2000yqf.googlegroups.com>
[Quoted] On Jul 12, 9:06 pm, The Magnet <a..._at_unsu.com> wrote:
> I'm looking to audit DML & Selects on a single table in a given
> schema. I'm not looking to audit everything in the database. We are
> on 10g R2. I set the AUDIT_TRAIL parameter to DB,EXTENDED in the
> init.ora, but it audits everything. Even if I enter a ton of NOAUDIT
> commands, it continues to audit.
>
> I'm not interested in that. I'm only interested in the one table.
> What or how must I set the parameters to do this? I see lots of
> auditing options, but none that are as narrow as I want.
>
> Thanks!
This should work for you:
SQL> audit select, insert, update, delete on emp;
Audit succeeded.
SQL>
SQL> select sessionid, userid, sqltext from sys.aud$;
no rows selected
SQL>
SQL> select * from emp;
EMPNO ENAME JOB MGR HIREDATE SAL
COMM DEPTNO
---------- ---------- --------- ---------- --------- ---------- ---------- ----------
7369 SMITH CLERK 7902 17-DEC-80
800 20
7499 ALLEN SALESMAN 7698 20-FEB-81 1600
300 30
7521 WARD SALESMAN 7698 22-FEB-81 1250
500 30
7566 JONES MANAGER 7839 02-APR-81
2975 20
7654 MARTIN SALESMAN 7698 28-SEP-81 1250
1400 30
7698 BLAKE MANAGER 7839 01-MAY-81
2850 30
7782 CLARK MANAGER 7839 09-JUN-81
2450 10
7788 SCOTT ANALYST 7566 09-DEC-82
3000 20
7839 KING PRESIDENT 17-NOV-81
5000 10
7844 TURNER SALESMAN 7698 08-SEP-81
1500 0 30
7876 ADAMS CLERK 7788 12-JAN-83
1100 20
EMPNO ENAME JOB MGR HIREDATE SAL
COMM DEPTNO
---------- ---------- --------- ---------- --------- ---------- ---------- ----------
7900 JAMES CLERK 7698 03-DEC-81
950 30
7902 FORD ANALYST 7566 03-DEC-81
3000 20
7934 MILLER CLERK 7782 23-JAN-82
1300 10
14 rows selected.
SQL>
SQL> select sessionid, userid, sqltext from sys.aud$;
SESSIONID USERID SQLTEXT
---------- ------------------------------
--------------------------------------------------------------------------------
2281 BING select * from emp
SQL> David Fitzjarrell Received on Fri Jul 15 2011 - 01:11:00 CEST
