give advice on auditing in oracle

Hi guys,.

DB version: 10.2.0.4.

Need some advice here.

If the ability to choose, you guys prefer (XML, extended) audit trail or (DB_EXTENDED)?

When defining XML, extended, audit files will be stored in the file system OS and DB_EXTENDED by which the files will be written to the table.

What's the downside for xml, extended? It take more space compared to db_extended and cause performance problem?

Thank you

XML is naturally a more verbose way of coding data than a simple audit trail. That means a little more time and a little more e/s to generate. But XML is easier to analyze if you have some downstream process that consumes the audit data.

If you configure things properly, you can configure an external audit trail (XML, expanded or extended os) such as DBA cannot alter the audit trail. Data stored in the database of audit will be always subject to changes of DBA. If your audit is, in part, trying to keep an eye on what DBA do, storing the verification information in the database probably is not an option.

Justin

Tags: Database

Similar Questions

  • audit of oracle applications

    Hi all

    We have r12.0.4 installed on solaris...


    Now the management request to audit all financial users, basically, they want
    to know the user name, the log0ut, the transactions it did, daily activities.


    Told them that this will be heavy on systems... additional need
    points on the audit... the highest is possible thanks to audit?



    Kai

    Kai,

    It is not possible to enable auditing on all users of applications and transactions that would have a significant impact on the performance of the system.

    Enabling auditing on users of the application can be done by setting ' Sign-On: Audit level "profile option.

    Note: 395849.1 - How do you audit an Oracle Applications user?
    https://metalink2.Oracle.com/MetaLink/PLSQL/ml2_documents.showDocument?p_database_id=not&P_ID=395849.1

    Note: 436316.1 - audit: how to audit data and responsibilities?
    https://metalink2.Oracle.com/MetaLink/PLSQL/ml2_documents.showDocument?p_database_id=not&P_ID=436316.1

    For audit data, it is recommended that you enable it on tables appropriate so that you won't have any measurable performance impact.

    Note: 60828.1 - Overview of Oracle Applications AuditTrails
    https://MetaLink.Oracle.com/MetaLink/PLSQL/ml2_documents.showDocument?p_database_id=not&P_ID=60828.1

    Note: 105624.1 - Troubleshooting (Audit Trail)
    https://metalink2.Oracle.com/MetaLink/PLSQL/ml2_documents.showDocument?p_database_id=not&P_ID=105624.1

    You can also check:

    Note: 171830.1 - What is the potential Impact on performance when implementing the Signon Option Audit users profile?
    https://metalink2.Oracle.com/MetaLink/PLSQL/ml2_documents.showDocument?p_database_id=not&P_ID=171830.1

    Note: 580281.1 - the number of columns in a Table can be made active Audit?
    https://metalink2.Oracle.com/MetaLink/PLSQL/ml2_documents.showDocument?p_database_id=not&P_ID=580281.1

    E Business suit health/Audit?
    E Business suit health/Audit?

    Guide to auditing in Oracle Applications
    http://www.Integrigy.com/security-resources/whitepapers/Integrigy_Oracle_11i_Auditing.PDF

    Kind regards
    Hussein

  • Give advice about uninstalling the database Client Oracle under Windows with multiple Oracle homes

    Hi all.

    Probably a Client of Oracle database uninstall will arrive in a Windows box, where there are several houses of Oracle:

    (1) the Oracle Database 11 g Client is.

    (2) the House of Oracle Oracle database server.

    (3) oracle 6i Oracle Home.

    I have these concerns:

    (1) do I stop Oracle Services NOT related to the Oracle Home being deleted? I guess that's not necessary, but it is recommended?

    (2) the YES program to run must be or is better to use the YES program located at removed Oracle (Oracle Client to Database 11 g in this situation)?

    "(3) I see there are additional post - installation according to section 5.3 steps"manually remove the Oracle database Client components remaining' the Oracle Client Installation Guide for Windows.

    Could someone provide the additional steps or recommendations?

    Sorry but I do not trust the windows plataform much!

    Thanks in advance!

    Best regards, Luis!

    Hello myluism,

    You can use the oracle supplied binary dinstall to uninstall oracle binaries that you can download from this url of Oracle Database 11 g Release 2 for Microsoft Windows (x 64) that looks good in your context.

    In addition, you can also uninstall the binary files by running the dinstall respecitive houses Oracle located in the path: ORACLE_HOME\dinstall.

    Please go through the url: https://docs.oracle.com/cd/E11882_01/install.112/e47959/deinstall.htm#NTCLI1326

    I hope this helps.

    Thank you and best regards.

  • Generating a lot of audit to /oracle/admin/PROD/adump/*.aud log

    Hi all

    11.2.0.1

    My PROD/adump/*.aud file generates a lot of newspapers, like 1 million + per day. I don't know what that the audit which lit.

    If the verification of the db.

    SQL > see the parameter checking

    VALUE OF TYPE NAME

    ------------------------------------ ----------- ------------------------------

    audit_file_dest string/oracle/admin/PROD/adump

    audit_sys_operations boolean FALSE

    audit_syslog_level string

    AUDIT_TRAIL DB string

    SQL > select count (*) in the sys.aud$;

    COUNT (*)

    ----------

    1891815

    The sys.aud$ is not also quickly generate newspapers like the/oracle/admin/PROD/adump. Why is - what the adump has more?

    I tried to open the *.aud file and there this content only:

    File /oracle/admin/PROD/adump/PROD_ora_2801794_7.aud check

    Oracle Database 11 g Enterprise Edition Release 11.2.0.1.0 - 64 bit Production

    With partitioning, OLAP, Data Mining and Real Application Testing options

    ORACLE_HOME = /oracle/product/11.2.0/dbhome_1

    Name of the system: AIX

    Name of the node: server1

    Version: 1

    Version: 6

    Machine: 00CBC2354C00

    Instance name: PROD

    Redo thread mounted by this instance: 1

    Oracle process number: 56

    The Unix process PID: 2801794, image: oracle@server1

    Sun 20 Oct 15:17:55 2013 + 08:00

    LENGTH: "224".

    SESSIONID: [9] ENTRYID "915275243": [1] '1' USERID: ACTION OF "ORAPROD" [6]: [3] '102' RETURNCODE: [1] '0' LOGOFF$ PREAD: [1] '0' LOGOFF$ PEOPLE: [3]

    "215" LOGOFF$ LWRITE: [1] "4" LOGOFF$ DEAD: [1] DBID '0': [8] SESSIONCPU "58658374": [1] "0".

    This audit is connected also to the SYS. AUD$?

    How can I stop this?

    Thank you

    zxy

    I already said it was not possible to disable it-why do you think it is called mandatory audit?

    You can not turn it off. You can try to reconfigure some of these connections that use SYSDBA or SYSOPER to use something else instead, or write a script to delete the files of audit from time to time

  • Give advice on building my new computer

    I am currently running windows XP and Photoshop CS3 (CS4 is also installed on the same computer)... the two 32 bit

    A few weeks ago, I had problems with the photoshop slowing and showing a significant drop in performance % (I have 4 GB of ram installed).

    I posted this problem here and the general counsel was that I should expect this slowdown and the solution was to change to Windows 7 and photoshop CS4 (64-bit version), I decided to follow this advice and it was close to Christmas, I thought I'd buy me a gift at the beginning

    I talked to the man in the shop (I noticed the previous warnings about men in computer stores!) and he sugested existing a system to be networked in my system. Before I give it to the llclear to assemble the system I would be grateful for more advice, comments, criticism or suggestions replacement on the proposed system, which is:--

    Motherboard ASUS P6T7 WS SUPERCOMPUTER Socket 1366 Core i7 DDR3 ECC. No ECC, a buffer

    Processor Processor Intel xeon Quad core 3.3 GHZ boxed processor W3580, 6.4 GT/s QPI, 8 MB memory cache LGA 1366

    Memory Crucial 12 G Kit (4 GB x 3) 240 DIMM, PC3 DDR3 PC3-8500

    Memory RAM of G.skill Turbulence Cooler cooler

    Graphics card (he suggested 2 and I don't know why) ASUS ENGTX295/2DI/1792MD3 (in Sli configuration)

    Disks hard hdd 1 (TO RUN WINDOWS AND APPLICATIONS) OCZ vertex Turbo Series 120 GB SATA ii 2.5 "disk solid stae

    hard disk 2 (scratch disk) GCO Vertex Turbo Series 60 GB SATA ii 2.5 "SSD drive

    HHD 3 (to store data) 2 TB 3.5 7200 RPM Western digital Serial ATAII - 300 disc HARD 64 MB cache (WD2001fass) Caviar Black

    SuperFlower 1200W POWER supply pyramid 80 more modular power supply

    Pioneer black SATA Blu Ray double layer drive optical drive

    ASUS WL - 167 G USB network adapter wireless network

    Windows 7 operating system

    Network (I don't know why this appears twice) Billion BiPAC 5200 G R4 802.11 g ADSL @ + firewall router

    I am a photographer with a knowledge of computers very slightly less than my 7 year old son!

    The man in the shop tells me that this would be the whiskers of cats and I'd be the envy of every photograper in my street

    The cost (including the installation of the software, Setup day and 48 hours Burn in test is appx a $12800 (about $1100.00 US))

    I would be very grateful for any comments or reviews.

    Ron Bentley

    SSDS are the thing coming but inform opinion seems to be at the moment:

    1. they are not particularly advantageous for the specific requirements of Photoshop.

    2. they are not competitive in terms of $ per GB.

  • auditing in Oracle 10 g

    Hello
    Just a quick question,

    I have set up auditing for the user of an oracle on Oracle 10 G:

    ANY AUDIT OF myuser BY ACCESS;
    AUDIT SELECT one TABLE, TABLE update, INSERT a TABLE, DELETE the TABLE OF myuser BY ACCESS;
    AUDIT PROCEDURE EXECUTED BY myuser BY ACCESS;


    now, where can I find information on the audit? in what views?

    Thank you all,

    Checking is not enabled on your database.

    you need to do:

    ALTER SYSTEM SET AUDIT_TRAIL=DB scope=spfile;
    

    THEN bounce the db.

    You may also want to read this quick tutorial on audit:

    http://oracleflash.com/16/audit-trail-example-in-Oracle-10gR2.html

    Published by: zahid79 on July 19, 2010 18:40

  • Can someone give advice on apparently loose confidentiality and security settings in Safari on Mac

    I'm new to Mac and see that the security and privacy etc.settings for Safari seem to be very loose. (I have I have these much tighter settings on my Windows 7 PC) I am concerned about privacyand on web security, but I don't want any more to hinder the default mac system? So I would appreciate any advice on this subject. Thank you!

    Post edited by: bobhom

    There are a few easy steps you can take to improve your privacy on the Web.

    In the Safari menu bar, select

    ▹ Safari preferences... ▹ Extensions

    An inventory of the extensions you have installed, as appropriate. A few Safari extensions are adware or spyware. Carefully read the privacy policies or the terms of use. Delete everything that you don't really need, or you are not sure.

    An extension that you may want to install is called "Ghostery." It blocks tracking cookies a lot. Extensions "ClickToFlash" and "ClickToPlugin" prevents Flash content from loading automatically.

    If you have installed hacks supported by advertising as "Glims" affecting the Safari, uninstall them as instructed by the developer. Doing so will improve the stability of Safari, as well as your privacy.

    In the Safari Preferences dialog box, select the Privacy tab. You have the option to delete data, such as cookies, stored on your computer by web servers. You can delete all of these data, or only some of them remove by clicking on the Details button. The other parameters are little explicit.

    On a more advanced level, you can change the DNS servers used by your computer or router, to find the addresses of all the Internet servers that you use. In general, the best choice from the point of view of privacy is to use the DNS servers of your ISP. Your Internet traffic goes through the network of your Internet service provider anyway, so in theory, there is no loss of privacy in the use of its DNS servers. Avoid third party DNS services such as "OpenDNS", which is in the business of selling your information to marketing specialists.

    Consider using software like 'GlimmerBlocker' ad-blocking, which also blocks certain forms of abuse of JavaScript that can be used to track you. It is only suitable for advanced users, and it can block some web content you want to see.

    This comment is not an endorsement of any third party software. Do your own research before deciding whether to use the software.

    When you use a public network such as a Wi - Fi hotspot, don't forget that others connected to the same network may be able to listen to your network traffic. They will not be able to read the content of this traffic, if you connect to Web sites secured like this, but they know the addresses of the sites. It is the same for the e-mail and Messaging. Public VPN services to sell as a solution to this problem, but using these services may have a serious security and privacy implications.

  • (For Microsoft Emplyee) Apology for Ungenuine Windows 7 Ultimate second Post, need more advice, or audit)

    I have a laptop with Windows 7 Home Basic pre installed, it was authentic 100%. At that time I was 12, I don't know what Windows Anytime Upgrade (I don't know about the authentic software, pirate, crack, serial, k product key, etc because I was 12). I entered, and there was a lot of function of the new Windows 7 (Home Premium, professional, ultimate). I tried the product key for Windows 7 Ultimate upgrade (just try, you know about the time that was my first laptop...), I found it on a website, not a keygen, crack or hack, it is only the serial number. I try to enter the upgrade key Windows 7 Ultimate for Windows Anytime Upgrade. First of all, the upgrade to Windows 7 Ultimate cancelled because the series was not valid. So, I canceled it.

    Suddenly, when I restart my pc, it is automatically upgraded to Windows 7 Ultimate! It's weird! I waited and my PC has become Windows 7 Ultimate... I used the Windows Update, and it is perfectly works like a charm! I did not know why the non-genuine Windows 7 Ultimate could not detected as not authentic, I used it for almost 2 years as a truly authentic Windows, no window pop up, no warning non-genuine, it's like the real genuine Windows.

    When I was 15, I recently know that no authentic (cracked, steal the serial number) is an action contrary to the law, 'hurt' Microsoft Corporation and the true owner series I entered... I feel guilty...

    "I apologize (very apology) for Microsoft Corporation and all employees of Microsoft, especially under Windows, because I use non-genuine Windows 7 Ultimate edition (upgrade of Windows 7 Edition family Basic)." I don't know anything at this moment here because I was still 12. »

    Now, I have to my WIndows 7 Home Basic with the product under the laptop key... But, the problem is, I get the Windows 7 Home Basic, Windows 7 Ultimate edition not authentic, I downloaded it on the third party site, it's 100% clean official Installer for Windows (not cracked, hacked, or more). I created the bootable USB and installed on the laptop.

    My question... Is my Windows 7 Home Basic (now has been updated 10 Windows entitled Digital Home) become non-genuine (in religion: illegal, prohibited, illegal) because I have no money to buy the actual key Windows 7 Ultimate upgrade... I'm really very sorry...

    Please accept my apologies to Microsoft Corporation and need your advice for me...

    Thank you

    I'm not a employee of MS, but recognized by the company as an MVP for six years.  Your question has touched me because of your honesty and good character.

    We all make mistakes, and you have obviously learned and right.

    If you reinstalled or recovered the version that came with the PC, then updated this licensed version of Windows 10, you should have nothing to fear.

    Are you satisfied with your performance of Windows 10?  If so, I would like to put a Backup system of Image so you can easily retrieve it in 20 minutes using a recovery disk.

    If not you can always do a superior Clean install Windows Upgrade 10.

    Even if you don't do this now, there are many tips in the link to ensure the best possible installation.

    Let us know how it goes.

  • Need advice on creating in Oracle decision tree

    Hello. I've been tasked with finding how to convert a decision tree to the Oracle tables. It is used for a user Help Center: If the appellant responds to A Question with answer 1, then C question, ask any other Question B, etc.. And they would like to record the responses of the user along the way. Specialists are developing the questions/typical responses and must now build a web-based system to guide people through this decision tree.

    How to create such a thing in a relational database? Your guidance is appreciated. Thank you.

    I would use two tables: one for questions and one for answers. Associate a response with the respondent to the question and then associate each question and answer that drives this question witch is nothing when it comes to the root.

    create table questions (
         question_id number,
         constraint questions_pk
              primary key (question_id),
         question_text varchar2(4000),
         parent_question_answer_id number,
         constraint questions_unq
              unique (parent_question_answer_id)
    )
    /
    
    create table answers (
         answer_id number,
         constraint answers_pk
              primary key (answer_id),
         question_id number not null,
         constraint answers_fk
              foreign key (question_id)
              references questions,
         answer_text varchar2(4000),
         constraint answers_unq
              unique(question_id,answer_text)
    )
    /
    
    alter table questions add (
         constraint questions_fk
              foreign key (parent_question_answer_id)
              references answers
    )
    /
    

    Where a question can be reached from several responses put you this relationship in a third table fits in this case.

    create table questions (
         question_id number,
         constraint questions_pk
              primary key (question_id),
         question_text varchar2(4000),
    )
    /
    
    create table answers (
         answer_id number,
         constraint answers_pk
              primary key (answer_id),
         question_id number not null,
         constraint answers_fk
              foreign key (question_id)
              references questions,
         answer_text varchar2(4000),
         constraint answers_unq
              unique(question_id,answer_text)
    )
    /
    
    create table question_links (
         answer_id number,
         constraint question_links_pk
              primary key (answer_id),
         constraint question_links_fk_1
              foreign key (answer_id)
              references answers,
         question_id number not null,
         constraint question_links_fk_1
              foreign key (question_id)
              references questions
    )
    /
    

    Alessandro Bye

  • Cannot find what I am looking for, please give advice.

    Hi, I repair computers and I have a client with a HP G72-b27cl. The left hinge is broken and cover part of the screen (the black border around the screen, the car is perfectly fine). She wants to replace me broken parts. How can I go about getting these? I searched online for a few hours and can't find it nowhere I need to pad the screen, the left hinge and possibly some parts of small connector for this.

    If it is not posted in the right section of the Forum Please tell me where to post, thank you.

    Hello

    Please use the following list:

    http://PartSurfer.HP.com/search.aspx?SearchText=XG983UA

    You may need to buy some more because all vendors are now selling just a small piece of the part.

    Kind regards.

  • Need to upgrade video/power supply for my HP can someone give advice?

    Here are my computer specs:

    http://support.HP.com/us-en/document/c02871948

    Thank you

    Hi SilentOne,

    The Corsair CX500 is an excellent choice for a power supply. $50

    The aforementioned ATI HD3850 is insufficient to run your games.  I know because I have a HD4850 (a faster card) and replaced it with a NVIDIA GTX 460.  I have StarCraft 2, BF3 and cod.  These games all play very well on the bright and even some of the Ultra settings.

    This Sapphire 6850 is $ 135.

  • give advice on the collection

    Hi Master,


    Please help / advise me how to pass multiple reference numbers in this script?


    DECLARE

    I_SALEORDERNO VARCHAR2 (32767).

    I_PARTNO LKM. PKG_LKM_DIGI_STACK_KEYS_PART.t_partno;

    I_FACILITYNAME VARCHAR2 (32767).

    NUMBER OF I_QTY;

    I_USERNAME VARCHAR2 (32767).

    NUMBER OF I_ORDER_BUID;

    I_SERVICE_TAG VARCHAR2 (32767).

    I_REF_ID VARCHAR2 (32767).

    I_NEED_ASSOCIATION VARCHAR2 (32767).

    I_CCN VARCHAR2 (32767).

    I_SHIP_FROM_FACILITY VARCHAR2 (32767).

    I_SHIP_TO_FACILITY VARCHAR2 (32767).

    O_RESULT pkg_lkm_oem_common_utilities.cursor_type;

    O_STATUS VARCHAR2 (32767).

    BEGIN

    I_SALEORDERNO: = NULL;

    I_FACILITYNAME: = NULL;

    I_QTY: = 2;

    I_USERNAME: = NULL;

    I_ORDER_BUID: = NULL;

    I_SERVICE_TAG: = NULL;

    I_REF_ID: = NULL;

    I_NEED_ASSOCIATION: = NULL;

    I_CCN: = NULL;

    I_SHIP_FROM_FACILITY: = NULL;

    I_SHIP_TO_FACILITY: = NULL;

    O_RESULT: = NULL;

    O_STATUS: = NULL;

    LKM. PKG_LKM_DIGI_STACK_KEYS_PART. PRC_GET_STACK_KEY_REQUEST (I_SALEORDERNO, I_PARTNO, I_FACILITYNAME, I_QTY, I_USERNAME, I_ORDER_BUID, I_SERVICE_TAG, I_REF_ID, I_NEED_ASSOCIATION, I_CCN, I_SHIP_FROM_FACILITY, I_SHIP_TO_FACILITY, O_RESULT, O_STATUS);

    COMMIT;

    dbms_ouput.put_line (O_STATUS);

    END;

    need to pass values

    I_PARTNO (0): = "K6TC1";

    I_PARTNO (1): = "K17XJ";

    I_QTY: = 2;


    Please advise... !


    Concerning

    AR

    874273 wrote:

    Please advise... !

    In this case - please take note that your keyboard is broken and the SHIFT key is stuck.

    Suspicion. All the code in upper case is NOT a standard in ANY modern programming language. PL/SQL is derived from the Ada language. More appropriate to follow to PL/SQL programming standards therefore Ada standards. Which is well documented and explained.  See quality Ada and Guide of Style for professional programmers.

  • Give advice on the best way to create tables

    Hello

    I'm just after the best method to create a pdf document that got charts?

    I have an order form which must be converted to an editable pdf form that users can fill in electronically and email back. Currently, the document is in Excel, and while I can convert it to PDF, I prefer to create the whole thing using the PDF.

    Should what tools I use for this?

    Kind regards

    Peter

    PDF files should not be created from scratch and if you try to do you will soon discover that it is extremely difficult and heavy.

    Stick with the creation of the file in Excel (or any other similar application, such as Word, InDesign, etc.) and then convert to PDF and add form fields in Acrobat.

    Be sure to keep a copy of the Excel file, well, in case you need to make any changes to the layout of the file later.

    If you don't do this then you can order replace Pages use in Acrobat to insert new pages (static) on the 'old' in your PDF file, that will keep all the form fields and scripts of tact. You need to just adjust the locations or the size of the fields, where this is necessary.

  • Give advice on the autonomous role on ESXi 4.1

    Hi all

    I use ESXi 4.1 standalone (no VC).

    I noticed that the role on 4.1 is now rather different from 4.0.

    It seems that I can not find the correct setting to allow users to CREATE of NEW virtual machine. The button cannot be clicked by users.

    I had access to these permissions:

    Data store: allocate space, datastore, operation of low level file browser

    File: all THE

    Host: local operation: all THE

    Network: all THE

    vApp: ALL

    VM: ALL

    Help me pls on what Miss me?

    Thank you.

    Try the resource > VM add to the list of resources and tasks > create task.  You can also refine the rights of network and host that you have given.

  • Can someone give advice ome on this code

    Doest seem to work:

    function framechecker (): void {}

    if(currentFrame == 1)

    {

    previous_btn. Visible = false;

    } else {(currentFrame > 1)

    previous_btn. Visible = true;

    }

    another (currentFrame = totalFrames) {}

    next_btn. Visible = false;

    }

    }

    Any help thanks

    If it is a single framework containing a movieclip, and that the code is in this unique setting, so you never have to leave this unique image, so currentFrame will always == 1.  If you want to test the slides_mc currentFrame property, then you must change your conditional statements to test for that and not the currentFrame on the main timeline.

    if(slides_mc.currentFrame == 1)

    PS - there is no 0 image, so...

    If (currentFrame! = 0)... would be always true.

Maybe you are looking for

  • Duplicate songs...

    Hi all... Recently, I noticed in my music app on my iPhone and iPad there are a few 'Albums' who have a song duplicate, some who have duplicate songs and some that the 'Album' and every song on it, are duplicated. For clarity, double means "two." In

  • bought TV shows stall after the start, then get message will take hours to downloadload

    New Apple TV, TV series (Sherlock Holmes) bought can not read episodes Episodes begin, after that 5-10 minute install time, start, play for a few minutes. Then playback will stop When I click on the episode and decided to restart / resume or start fr

  • After update ios9.2 will not send my videos by email

    After updating my iphone 6 to iOS9.2 my videos will not send an e-mail. When I take a video with my phone and I select to send it by e-mail, used to compress or something, that you would see the blue progress bar and the video I sent yesterday was 5M

  • To obtain an 'automatic' peripheral register without PSN?

    Hello Everyone pleade suggest me the ISE1.2 config I have to do separate ssid called embedded. Once that the device not registed happens, ISE is sredirect to the registration of portal. I can finish the auto fill in the peripheral register that the u

  • Is there a graphics cards that can be put in my Pavilion g7?

    I have a HP Pavilion notebook g7. Right now, it runs on the windows 7 Home Premium operating system. My current graphics "card" is the Intel(r) HD Graphics Family. I just want to be able to play the Sims 3. Are there suggestions for a graphics card (