Yes, that does work (and I've been doing just that), but I was hoping for some database function (in python preferably) that I could return a row with it's columns and then query corresponding data to make more sense out of it. I see it as a complicated function, but if someone would have a similar function, it would make it 10x easier to make sense of the audit table. I think it could be made to query corresponding data from any table.

On 08/16/2011 03:08 PM, Hoover, Jeffrey wrote:
If you reformat it like:

        original,B04TaEsAAIG5bEEX5xBVPQ,2,jakew,mag,...,2011-07-05
        new, B04TaEsAAIG5bEEX5xBVPQ,3,jakew,mag,...,2011-08-04

you could probably load it into excel



-----Original Message-----
From: [email protected] 
[mailto:[email protected]] On Behalf Of M. D.
Sent: Tuesday, August 16, 2011 5:03 PM
To: [email protected]; [email protected]
Subject: [ADMIN] parsing audit table

Hi everyone,

I'm a bit lazy, or actually in a bit of a crunch.  I added an audit
recording a few months ago, but never really used it much, but today I'm
seeing a bunch of suspicious activity by one user.  Does someone have
any function to quickly parse this data?

I followed this: http://wiki.postgresql.org/wiki/Audit_trigger - so I'm
hoping someone else has something to parse that.

original data:
"(B04TaEsAAIG5bEEX5xBVPQ,2,jakew,mag,"",2011-07-05,2011-07-05,,,7,528284,"",2011-07-05,13:20:59,2011-07-05,"",A04CQUUABSxYfxftPQqJlg,,JUfhSzwADKqAFSN1Cbv+mg,BUiZqlIABburW7jqdY9JJQ,HUZPx0gACfCxy1Y34QSTQw,,,0,N,Y,Y,919.9100,0.0000,0.0000,2011-07-05,2011-07-05)"
new data:
"(B04TaEsAAIG5bEEX5xBVPQ,3,jakew,mag,"",2011-07-05,2011-07-05,,,7,528284,"",2011-07-05,13:20:59,2011-07-05,"",A04CQUUABSxYfxftPQqJlg,,JUfhSzwADKqAFSN1Cbv+mg,BUiZqlIABburW7jqdY9JJQ,HUZPx0gACfCxy1Y34QSTQw,,,0,N,N,Y,919.9100,919.9100,0.0000,,2011-08-04)"

those 22 alphanumeric columns are IDs.

Thanks for any help,
Mark



--
Sent via pgsql-admin mailing list ([email protected])
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin

Reply via email to