RE: Auditing

Norrell, Brian Fri, 22 Jun 2001 08:59:02 -0700

Title: RE: Auditing

I did this about 3 years ago, so either Oracle plugged the hole, or I am not remembering correctly. Maybe it is a public synonym, or try create view sys.aud$ as select * from system.aud$. That sounds vaguely familiar...

Brian Norrell
Manager, MPI Development
QuadraMed
511 E John Carpenter Frwy, Su 500
Irving, TX 75062
(972) 831-6600

-----Original Message-----
From: Nirmal Kumar Muthu Kumaran [mailto:[EMAIL PROTECTED]]
Sent: Friday, June 22, 2001 5:42 AM
To: Multiple recipients of list ORACLE-L
Subject: RE: Auditing

Hi Norrell,

I just tested ur case.

Can you tell me, how it's possible , when doing auditing, oracle will refer to the sys.aud$ table itself, correct?.

If i droped it (even there is a synonym on that name),

Oracle giving an error, it's not able to find the sys.aud$ table.

Nirmal,

-----Original Message-----
From:   Norrell, Brian [SMTP:[EMAIL PROTECTED]]
Sent:   Thursday, June 21, 2001 6:33 PM
To:     Multiple recipients of list ORACLE-L
Subject:        RE: Auditing

aud$ is one of the few system tables that can have an owner other than sys.
You can create it under another schema (like system) and give sys a private
synonym pointing to system.aud$. Then put the trigger on the alternate aud$

create table system.aud$ as select * from sys.aud$;
drop table sys.aud$;
create synonym sys.aud$ for system.aud$;
create trigger x on system.aud$ as ...

Brian Norrell
Manager, MPI Development
QuadraMed
511 E John Carpenter Frwy, Su 500
Irving, TX 75062
(972) 831-6600

-----Original Message-----
Sent: Thursday, June 21, 2001 6:00 AM
To: Multiple recipients of list ORACLE-L

This will not work as you can't create triggers on sys objects.
So tell me the way how i should create triggers on aud$.

-----Original Message-----
Sharma
Sent: Thursday, June 21, 2001 2:56 PM
To: Multiple recipients of list ORACLE-L

i think u can use triggers such kind of auditing.
create aud$ table with one more column, and try updating the column as soon
user fires some sql.

this is just a thought. could find another opinion.

saurabh
----- Original Message -----
To: Multiple recipients of list ORACLE-L <[EMAIL PROTECTED]>
Sent: Thursday, June 21, 2001 11:15 AM

> Hi all there,
> I am auditing a database where 400 users are concurrently accessing the
> database.
> Now in the table AUD$ we have all the records of the user transactions.But
> is there any way to store what sort of query he is running so that i can
see
> the actual text of query which was fired 3 days before.
> Regards,
> Anand
>
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: Anand
>   INET: [EMAIL PROTECTED]
>
> Fat City Network Services    -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California        -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).

--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Saurabh Sharma
INET: [EMAIL PROTECTED]

Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
San Diego, California -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).

--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Anand
INET: [EMAIL PROTECTED]

RE: Auditing

Reply via email to