Re: Auditing

From: Saurabh Sharma <ssharma1_at_fcsltd.com>
Date: Fri, 22 Jun 2001 04:09:32 -0700
Message-ID: <F001.00333649.20010622041532@fatcity.com>

why don't u create a separate tablespace for containing the audit information.
it depends on ur requirements what level of auditing u want.
and also what diff info u want to
store.

create a separate tablespace and create the aud$ table in it by selecting from sys.aud$. when this is created drop from sys and create a synonym for it in sys.

saurabh
<BLOCKQUOTE
style="BORDER-LEFT: #000000 2px solid; MARGIN-LEFT: 5px; MARGIN-RIGHT: 0px; PADDING-LEFT: 5px; PADDING-RIGHT: 0px">

Original Message ----- <DIV style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black">From: Nirmal Kumar Muthu Kumaran To: <A href="mailto:ORACLE-L_at_fatcity.com" title=ORACLE-L_at_fatcity.com>Multiple recipients of list ORACLE-L Sent: Friday, June 22, 2001 4:11 PM Subject: RE: Auditing

  Hi Norrell,
  I just tested ur case.
  Can you tell me, how it's possible ,
  when doing auditing, oracle will refer to the sys.aud$ table itself, correct?.

  If i droped it (even there is a
  synonym on that name),
  Oracle giving an error, it's not able   to find the sys.aud$ table.
  Nirmal,

-----Original Message----- <FONT

    face=Arial size=1>From:   <FONT face=Arial 
    size=1>Norrell, Brian [SMTP:BNorrell_at_QuadraMed.com] <FONT 
    face=Arial size=1>Sent:   <FONT face=Arial 
    size=1>Thursday, June 21, 2001 6:33 PM <FONT face=Arial 
    size=1>To:     <FONT face=Arial 
    size=1>Multiple recipients of list ORACLE-L <FONT face=Arial 
    size=1>Subject:        <FONT 
    face=Arial size=1>RE: Auditing

    aud$ is one of the few system tables that can     have an owner other than sys. You can     create it under another schema (like system) and give sys a private     synonym pointing to system.aud$. Then put     the trigger on the alternate aud$
    create table system.aud$ as select * from     sys.aud$; drop table sys.aud$;
    create synonym sys.aud$ for system.aud$;     create trigger x on system.aud$ as ...

Brian Norrell Manager, MPI Development QuadraMed 511 E John Carpenter Frwy, Su 500 Irving, TX 75062
 (972) 831-6600
 -----Original Message----- Sent: Thursday, June 21, 2001 6:00 AM To: Multiple recipients of list ORACLE-L This will not work as you can't create triggers on sys objects. So tell me the way how i should create triggers on aud$.
 -----Original Message----- Sharma Sent: Thursday, June 21, 2001 2:56 PM To: Multiple
 recipients of list ORACLE-L
 i think u can use triggers such kind of auditing. create aud$ table with one more column, and try updating the column as soon user fires some sql.
 this is just a thought. could find another opinion.
 saurabh -----
 Original Message ----- To: Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com> Sent: Thursday, June 21, 2001 11:15 AM
> Hi all there, > I am auditing a database where 400 users are concurrently accessing the > database.
> Now in the table AUD$ we have all the
 records of the user transactions.But > is there any way to store what sort of query he is running so that i can see > the actual text of query which was fired 3 days before.
> Regards, > Anand > > -- > Please see the official ORACLE-L FAQ: <A href="http://www.orafaq.com" target=_blank>http://www.orafaq.com > -- > Author: Anand
 > INET:
 karhadkar_at_rolta.com > > Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 >
 San Diego, California -- Public Internet access / Mailing Lists >

> To REMOVE yourself from this mailing list,
    send an E-Mail message > to:
    ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line

    containing: UNSUB ORACLE-L > (or the     name of mailing list you want to be removed from). You may
> also send the HELP command for other
    information (like subscribing).

Please see the official ORACLE-L FAQ: <A href="http://www.orafaq.com" target=_blank>http://www.orafaq.com -- Author: Saurabh Sharma INET: ssharma1_at_fcsltd.com Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Please see the official ORACLE-L FAQ: <A href="http://www.orafaq.com" target=_blank>http://www.orafaq.com -- Author: Anand INET: karhadkar_at_rolta.com Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: <A href="http://www.orafaq.com" target=_blank>http://www.orafaq.com
Author: Norrell, Brian INET: BNorrell_at_QuadraMed.com Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).

Received on Fri Jun 22 2001 - 06:09:32 CDT