| How can I audit ALL activity for a specific Client Id? [message #617803] |
Thu, 03 July 2014 13:43  |
 |
schenk
Messages: 2
Registered: July 2014
Location: United States
|
Junior Member |
|
|
We are running Oracle 11.2.0.4 / Web Application / Connection Pooling / Logging in with a single Database User and setting the Client ID for each application user.
I would like to audit ALL activity for a specific Client Id. It is easy to audit a client id for a database object (below), but what about all activity?
BEGIN
DBMS_FGA.ADD_POLICY(
OBJECT_SCHEMA => 'ABC',
OBJECT_NAME => 'EMPLOYEE',
POLICY_NAME => 'TRACK_EMPL_CLIENTID',
AUDIT_CONDITION => 'SYS_CONTEXT(''USERENV'', ''CLIENT_IDENTIFIER'') = ''aduser''',
HANDLER_SCHEMA => NULL,
HANDLER_MODULE => NULL,
ENABLE => true,
STATEMENT_TYPES => 'INSERT,UPDATE,DELETE,SELECT',
AUDIT_TRAIL => DBMS_FGA.DB + DBMS_FGA.EXTENDED,
AUDIT_COLUMN => NULL);
END;
/
I read a post that if you leave the OBJECT_NAME = NULL, it will audit all activity, which is exactly what I would like to do. However, this does not work. I get an ORA-01405 Fetched column value is NULL error.
BEGIN
DBMS_FGA.ADD_POLICY(
OBJECT_SCHEMA => 'ABC',
OBJECT_NAME => NULL,
POLICY_NAME => 'TRACK_CLIENTID',
AUDIT_CONDITION => 'SYS_CONTEXT(''USERENV'', ''CLIENT_IDENTIFIER'') = ''aduser''',
HANDLER_SCHEMA => NULL,
HANDLER_MODULE => NULL,
ENABLE => true,
STATEMENT_TYPES => 'INSERT,UPDATE,DELETE,SELECT',
AUDIT_TRAIL => DBMS_FGA.DB + DBMS_FGA.EXTENDED,
AUDIT_COLUMN => NULL);
END;
/
Does anyone know if there is a way to audit all activity for a specific Client ID?
(DB After Login trigger does not work because the Connection Pooling maintains a connection.)
Any ideas are greatly appreciated.
Thanks in advance,
MF
|
|
|
|
|
|
|
|
] 
Blog
Search
Help
Members
Register
Login
Home
