The FGA for oracle 10g/11g

Dear all,

I read this http://www.oracle.com/technetwork/articles/sql/week10-10gdba-097438.html

and I am not sure how to turn the FGA on and why should we use this instead of "after insert/after update/before and after delete trigger".

 We need to do data level auditing for the after insert/before and after update/ before and after update and save the log to another table.

  it seems that before change value and only commited vaule has to use trigger instead of this ?

 I know this could create a large volume of data though in the SYS.AUD$ and/or SYS.FGA_LOG$ tables.  And by default these tables are inin the SYSTEM tablespace.

 So, if I use FGA, I need to either move these tables out of the SYSTEM tablespace.
 
  if we install Oracle on top of Windows,  where can we find these folde from Toad for Oracle?

  How to move the record from that default location and save the FGA result to a dedicated table store in a separate tablespace?

  Also who to :

1) Turn the FGA on ? just do the audit_trail = db_extended in the parameter file ? where is the parameter files ?
2) Once FGA is on, how to setup the insert/update/delete trigger.
3) it seems the FGA is the extention of standard audit ? and I must turn on the standard audit first? how to do it? once standard audit is on I just need to do the audit_trail = db_extended in the parameter file, that's it ?
4) standard audit use DBA_COMMON_AUDIT_TRAIL and FGA use DBA_FGA_AUDIT_TRAIL, how to make use of it?

is what tells from this article is true :

http://wingsinwk.wordpress.com/2010/05/24/oracle-database-audit-trail/  ?
LVL 1
marrowyungSenior Technical architecture (Data)Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Mark GeerlingsDatabase AdministratorCommented:
1) "where is the parameter file?"  In Oracle for UNIX or Linux, it is in the ORACLE_HOME/dbs directory.  With Oracle on Windows, I think it is in the ORACLE_HOME\dba or ORACLE_HOME\dbms directory.  Oracle10 and Oracle11 usually use the "spfile" not the older "pfile' but they may both be present in this directory.  The "pfile" has a name like: init[SID].ora. That can be modified with a text editor, then an Oracle shutdown and restart are required to use the new value(s).  The "spfile" has a name like: spfile[SID].ora.  It may *NOT* be edited directly!  But, you can use "alter system ..." commands in TOAD or SQL*Plus or SQL*Developer to change the spfile *AND* have the results take effect immediately in most cases.  In some cases, it will be necessary to shutdown and restart Oracle for the change to take effect.

2) "Once FGA is on, how to setup the insert/update/delete trigger?"  No, those are two different things.  If you use FGA, you don't need to write triggers manually.  But, if you want triggers to capture information in addition to what FGA captures, you may use triggers also if you wish.

3) "it seems the FGA is the extention of standard audit ? and I must turn on the standard audit first?"  Yes.  "how to do it?"  I don't remember the exact parameter and value, but it is something like: "audit_trail = db_extended".

4). "standard audit use DBA_COMMON_AUDIT_TRAIL and FGA use DBA_FGA_AUDIT_TRAIL, how to make use of it?"  Any way that you want to.  You can query those two tables (or views) with any query or reporting tool that you have, if you connect to Oracle as a user who has permission to query these.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
marrowyungSenior Technical architecture (Data)Author Commented:
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Oracle Database

From novice to tech pro — start learning today.