Solved

Auditing DBA activity in Oracle

Posted on 2001-07-23
6
1,461 Views
Last Modified: 2008-01-16
I am currently trying to find a way of auditing DBA activity but my investigations have shown that it is not possible to create audit records for activity by the user 'SYS' - DBA within Oracle 8i. Do you know of any way of doing this? I have looked into using a 3rd party tool but have been unable to find anything of any help as yet.
If you know of any way of auditing DBA activity, either within Oracle itself or through the use of a third party tool, your help would be much appreciated.
Thankyou

Fiona Campbell
0
Comment
Question by:fionacampbell
6 Comments
 
LVL 3

Expert Comment

by:myerpz
ID: 6308741
Perhaps you could try switching on Session Auditing, then using the session info. connected to the view which shows which users have got DBA privileges ?

select os_username      "OS User",
       username,
       returncode,
       count(*)         "No. of Logons"
from   sys.dba_audit_session
where  username in
      (
       select grantee
       from   dba_role_privs
       where  granted_role = 'DBA'
      )
group by os_username, username, returncode
/


Sorry if I'm preaching to the converted, but you will need to have had the line
     audit_trail = true
in your init.ora file at database startup time
and then in SQL*Plus, you'll need to execute the command
     AUDIT BY SESSION;

and then session auditing will be switched on.


Hope this helps
0
 
LVL 2

Expert Comment

by:jbever
ID: 6308860
have you tried the new archive mining options?
j.
0
 
LVL 1

Expert Comment

by:edice
ID: 6308980
We use a parameter in the INIT.ORA configuration file.
For Oracle 8.0.5, I believe we used this:

Parameter: AUDIT_TRAIL = DB

This will load DBA actions into the DBA_AUDIT_TRAIL view
              (aka SYS.AUD$ table)

Ed
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 1

Accepted Solution

by:
edice earned 50 total points
ID: 6380409
Did it work?
Get what you need?

Ed
0
 

Author Comment

by:fionacampbell
ID: 6383184
i passed your answer on to my boss and he seemed very happy with it.
Cheers
0
 
LVL 1

Expert Comment

by:edice
ID: 6394671
Glad I could help.

Thanks,
Ed
0

Featured Post

On Demand Webinar - Networking for the Cloud Era

This webinar discusses:
-Common barriers companies experience when moving to the cloud
-How SD-WAN changes the way we look at networks
-Best practices customers should employ moving forward with cloud migration
-What happens behind the scenes of SteelConnect’s one-click button

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
grant user/role question 11 36
dbms_crypto.decrypt   errors out 6 47
Input a SQl, output tables amd columns used in the SQL 19 62
join actual table rows based on the column 25 31
Working with Network Access Control Lists in Oracle 11g (part 1) Part 2: http://www.e-e.com/A_9074.html So, you upgraded to a shiny new 11g database and all of a sudden every program that used UTL_MAIL, UTL_SMTP, UTL_TCP, UTL_HTTP or any oth…
From implementing a password expiration date, to datatype conversions and file export options, these are some useful settings I've found in Jasper Server.
This video shows, step by step, how to configure Oracle Heterogeneous Services via the Generic Gateway Agent in order to make a connection from an Oracle session and access a remote SQL Server database table.
This video shows how to Export data from an Oracle database using the Datapump Export Utility.  The corresponding Datapump Import utility is also discussed and demonstrated.

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question