RE: audit_trail=db Overhead ?

2003-03-21 Thread Stephen Lee
> -Original Message-
> 
> "It depends."
> 
> I would think that it largely depends on what you intend to 
> audit

> You may also want to consider moving the AUD$ table out of the SYSTEM
> tablespace.  If you've got Metalink, see article 1019377.6.
> 
-

I would add:
If you do this, you should monitor the tablespace usage for AUD$ to ensure
that it doesn't fill up the tablespace, which could stop anyone from doing
anything, depending on what you audit.

Here's a sample set of commands, that I've had laying around for a long
time, for you to pick and choose and edit.


CREATE TABLESPACE ORA_AUDIT

DATAFILE '/dir1/dir2/ora_audit_01.dbf' SIZE 500M REUSE  
DEFAULT STORAGE (INITIAL 1M NEXT 1M   
MINEXTENTS 1 MAXEXTENTS UNLIMITED

PCTINCREASE 1)

ONLINE

PERMANENT

/

 

CREATE TABLESPACE ORA_AUDIT_IDX

DATAFILE '/dir1/dir2/ora_audit_idx_01.dbf' SIZE 100M REUSE  
DEFAULT STORAGE (INITIAL 1M NEXT 1M   
MINEXTENTS 1 MAXEXTENTS UNLIMITED

PCTINCREASE 1)

ONLINE

PERMANENT

/


create table audx tablespace ORA_AUDIT
   storage (initial 1M next 1M pctincrease 0) 
  as select * from aud$ where 1 = 2 
/
rename AUD$ to AUD$$ 
/
rename audx to aud$ 
/
drop index i_aud1
/
create index i_aud1 
  on aud$(sessionid, ses$tid) 
tablespace ORA_AUDIT_IDX storage(initial 1M next 1M pctincrease 0) 
/

NOAUDIT ALL;
NOAUDIT ALL PRIVILEGES;
-- Check for old auditing
select * from sys.dba_stmt_audit_opts order by audit_option;

audit cluster;
audit connect;
audit context;
audit database link;
audit dimension;
audit directory;
audit index;
audit procedure;
audit profile;
audit public database link;
audit public synonym;
audit role;
audit rollback segment;
audit sequence;
audit synonym;
audit system audit;
audit system grant;
audit table;
audit tablespace;
audit trigger;
audit type;
audit user;
audit view;
audit alter sequence;
audit alter table;
audit comment table;
audit grant directory;
audit grant procedure;
audit grant sequence;
audit grant table;
audit grant type;
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Stephen Lee
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).



Re: audit_trail=db Overhead ?

2003-03-21 Thread Connor McDonald
Depends on what you audit.  If what you are auditing
occurs with high frequency then naturally there is
some overhead

Connor

 --- VIVEK_SHARMA <[EMAIL PROTECTED]> wrote: > 
> What would be the overhead of setting audit_trail=db
> in init.ora 
> on the overall database performance ?
> 
> NOTE - This is a heavily loaded Hybrid Database
> having 4000 concurrent users 
> 
> What optional settings may be better ?
> 
> Thanks
> 
> -- 
> Please see the official ORACLE-L FAQ:
> http://www.orafaq.net
> -- 
> Author: VIVEK_SHARMA
>   INET: [EMAIL PROTECTED]
> 
> Fat City Network Services-- 858-538-5051
> http://www.fatcity.com
> San Diego, California-- Mailing list and web
> hosting services
>
-
> To REMOVE yourself from this mailing list, send an
> E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of
> 'ListGuru') and in
> the message BODY, include a line containing: UNSUB
> ORACLE-L
> (or the name of mailing list you want to be removed
> from).  You may
> also send the HELP command for other information
> (like subscribing).
>  

=
Connor McDonald
web: http://www.oracledba.co.uk
web: http://www.oaktable.net
email: [EMAIL PROTECTED]

"GIVE a man a fish and he will eat for a day. But TEACH him how to fish, and...he will 
sit in a boat and drink beer all day"

__
Do You Yahoo!?
Everything you'll ever need on one web page
from News and Sport to Email and Music Charts
http://uk.my.yahoo.com
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: =?iso-8859-1?q?Connor=20McDonald?=
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).



Re: audit_trail=db Overhead ?

2003-03-21 Thread Hemant K Chitale
Setting AUDIT_TRAIL=DB just allows you to enable audit.  It, by itself, has 
no load.

I have AUDIT_TRAIL=DB and AUDIT SESSION with about 100 connections
a minute and haven't noticed any performance impact.
But, then, I haven't set an STATEMENT or OBJECT audit options.
I have a daily SQL job which queries the audit view to identify failed 
login attempts
and another job to purge the audit trail of data more than 7 days old.
Hemant

At 03:28 AM 21-03-03 -0800, you wrote:

What would be the overhead of setting audit_trail=db in init.ora
on the overall database performance ?
NOTE - This is a heavily loaded Hybrid Database having 4000 concurrent users

What optional settings may be better ?

Thanks

--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: VIVEK_SHARMA
  INET: [EMAIL PROTECTED]
Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
Hemant K Chitale
My personal web site is :  http://hkchital.tripod.com
--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Hemant K Chitale
 INET: [EMAIL PROTECTED]
Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).


RE: audit_trail=db Overhead ?

2003-03-21 Thread Jesse, Rich
"It depends."

I would think that it largely depends on what you intend to audit and how
often those audits occur.  For example, on a production system, auditing
failed logins may be OK, but auditing both failed and successful logins may
put some load on the DB.

You may also want to consider moving the AUD$ table out of the SYSTEM
tablespace.  If you've got Metalink, see article 1019377.6.

HTH!  GL!

Rich


Rich JesseSystem/Database Administrator
[EMAIL PROTECTED]   Quad/Tech International, Sussex, WI USA

-Original Message-
Sent: Friday, March 21, 2003 5:29 AM
To: Multiple recipients of list ORACLE-L



What would be the overhead of setting audit_trail=db in init.ora 
on the overall database performance ?

NOTE - This is a heavily loaded Hybrid Database having 4000 concurrent users


What optional settings may be better ?

Thanks
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jesse, Rich
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).



audit_trail=db Overhead ?

2003-03-21 Thread VIVEK_SHARMA

What would be the overhead of setting audit_trail=db in init.ora 
on the overall database performance ?

NOTE - This is a heavily loaded Hybrid Database having 4000 concurrent users 

What optional settings may be better ?

Thanks

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: VIVEK_SHARMA
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).