SoftTree Technologies SoftTree Technologies
Technical Support Forums
RegisterSearchFAQMemberlistUsergroupsLog in
DB Audit - Reporting

 
Reply to topic    SoftTree Technologies Forum Index » DB Audit, DB Mail, DB Tools View previous topic
View next topic
DB Audit - Reporting
Author Message
Andy Bain Smith



Joined: 10 Jun 2004
Posts: 3

Post DB Audit - Reporting Reply with quote

Hi

I have just started evaluating DB audit (Oracle) for LLoyds TSB.

I am trying to find reports on the system commands which have been logged in the Aud$ table.

e.g.:

ALTER USER and ALTER SYSTEM are being Audited.
The commands are reflected in AUD$

I am unable to report on this.

Is there a report option available or is this a separate purchasable option?

regards

Andy


Thu Jun 10, 2004 4:54 am View user's profile Send private message
SysOp
Site Admin


Joined: 26 Nov 2006
Posts: 7849

Post Re: DB Audit - Reporting Reply with quote

Check Reports/System Audit Trail/Object Access and Statement Audit report. They supposed be there

: Hi

: I have just started evaluating DB audit (Oracle) for LLoyds TSB.

: I am trying to find reports on the system commands which have been logged in
: the Aud$ table.

: e.g.: ALTER USER and ALTER SYSTEM are being Audited.
: The commands are reflected in AUD$

: I am unable to report on this.

: Is there a report option available or is this a separate purchasable option?

: regards

: Andy

Thu Jun 10, 2004 9:09 am View user's profile Send private message
Andy Bain Smith



Joined: 10 Jun 2004
Posts: 3

Post Re: DB Audit - Reporting Reply with quote

I double checked it.

Here is the report:

username owner obj_name action_name timestamp
ABSDEF ABSDEF AUD_BACK CREATE TABLE 09/06/2004 15:41:42
ABSDEF ABSDEF DBA_AUDIT_TRAILX SELECT 09/06/2004 14:27:08
ABSDEF SYSTEM BENTHIC_ACCESS SELECT 09/06/2004 14:19:19
ABSDEF SYSTEM BENTHIC_ACCESS SELECT 09/06/2004 14:25:51
ABSDEF SYSTEM BENTHIC_ACCESS SELECT 09/06/2004 14:53:18
ABSDEF SYSTEM BENTHIC_ACCESS SELECT 10/06/2004 09:31:37
CHPROF CHPROF BIOG CREATE TABLE 09/06/2004 14:20:26
CHPROF CHPROF BIOG CREATE TABLE 09/06/2004 14:34:44
CHPROF CHPROF BIOG CREATE TABLE 09/06/2004 14:37:57
CHPROF CHPROF DUAL2 SELECT 10/06/2004 09:43:31
CHPROF SYSTEM BENTHIC_ACCESS SELECT 09/06/2004 14:20:25
CHPROF SYSTEM BENTHIC_ACCESS SELECT 09/06/2004 14:34:44
CHPROF SYSTEM BENTHIC_ACCESS SELECT 09/06/2004 14:45:14
CHPROF SYSTEM BENTHIC_ACCESS SELECT 10/06/2004 09:39:26
CHPROF SYSTEM BENTHIC_ACCESS SELECT 10/06/2004 09:42:05
SYSTEM SYSTEM BENTHIC_ACCESS SELECT 10/06/2004 09:27:27
SYSTEM SYSTEM DBA_AUDIT_TRAILT SELECT 10/06/2004 09:30:07

and here is the complete AUD$ content

SESSIONID ENTRYID STATEMENT TIMESTAMP# USERID USERHOST TERMINAL ACTION# RETURNCODE OBJ$CREATOR OBJ$NAME AUTH$PRIVILEGES AUTH$GRANTEE NEW$OWNER NEW$NAME SES$ACTIONS SES$TID LOGOFF$LREAD LOGOFF$PREAD LOGOFF$LWRITE LOGOFF$DEAD LOGOFF$TIME COMMENT$TEXT SPARE1 SPARE2 OBJ$LABEL SES$LABEL PRIV$USED
68 1 1 06/09/04 14:09 ABSDEF LAPTOP 101 0 473 12 79 0 06/09/04 14:53 Authenticated by: DATABASE; Client address: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1055)) LAPTOP\Andy Bain Smith 5
69 1 1 06/09/04 14:11 CHPROF LAPTOP 101 0 205 2 57 0 06/09/04 14:20 Authenticated by: DATABASE; Client address: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1058)) LAPTOP\Andy Bain Smith 5
70 1 1 06/09/04 14:16 ABSDEF LAPTOP 101 0 90 0 6 0 06/09/04 14:19 Authenticated by: DATABASE; Client address: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1061)) LAPTOP\Andy Bain Smith 5
71 1 1 06/09/04 14:19 ABSDEF LAPTOP 101 0 102 0 18 0 06/09/04 16:47 Authenticated by: DATABASE; Client address: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1064)) LAPTOP\Andy Bain Smith 5
71 2 4 06/09/04 14:19 ABSDEF LAPTOP 3 942 SYSTEM BENTHIC_ACCESS LAPTOP\Andy Bain Smith
71 3 7 06/09/04 14:19 ABSDEF LAPTOP 49 0 LAPTOP\Andy Bain Smith 3
72 1 1 06/09/04 14:20 CHPROF LAPTOP 101 0 116 0 26 0 06/09/04 14:34 Authenticated by: DATABASE; Client address: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1067)) LAPTOP\Andy Bain Smith 5
72 2 4 06/09/04 14:20 CHPROF LAPTOP 3 942 SYSTEM BENTHIC_ACCESS LAPTOP\Andy Bain Smith
72 3 9 06/09/04 14:20 CHPROF LAPTOP 1 955 CHPROF BIOG LAPTOP\Andy Bain Smith 40
73 1 1 06/09/04 14:25 ABSDEF LAPTOP 101 0 1852 1 18 0 06/09/04 16:47 Authenticated by: DATABASE; Client address: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1070)) LAPTOP\Andy Bain Smith 5
73 2 4 06/09/04 14:25 ABSDEF LAPTOP 3 942 SYSTEM BENTHIC_ACCESS LAPTOP\Andy Bain Smith
73 3 22 06/09/04 14:27 ABSDEF LAPTOP 3 942 ABSDEF DBA_AUDIT_TRAILX LAPTOP\Andy Bain Smith
74 1 1 06/09/04 14:34 CHPROF LAPTOP 101 0 158 0 34 0 06/09/04 14:45 Authenticated by: DATABASE; Client address: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1073)) LAPTOP\Andy Bain Smith 5
74 2 4 06/09/04 14:34 CHPROF LAPTOP 3 942 SYSTEM BENTHIC_ACCESS LAPTOP\Andy Bain Smith
74 3 8 06/09/04 14:34 CHPROF LAPTOP 1 955 CHPROF BIOG LAPTOP\Andy Bain Smith 40
74 4 12 06/09/04 14:37 CHPROF LAPTOP 1 955 CHPROF BIOG LAPTOP\Andy Bain Smith 40
75 1 1 06/09/04 14:45 CHPROF LAPTOP 101 0 117 0 41 0 06/09/04 16:47 Authenticated by: DATABASE; Client address: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1076)) LAPTOP\Andy Bain Smith 5
75 2 4 06/09/04 14:45 CHPROF LAPTOP 3 942 SYSTEM BENTHIC_ACCESS LAPTOP\Andy Bain Smith
76 1 1 06/09/04 14:53 ABSDEF LAPTOP 101 0 1606 4 492 0 06/09/04 16:47 Authenticated by: DATABASE; Client address: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1079)) LAPTOP\Andy Bain Smith 5
76 2 4 06/09/04 14:53 ABSDEF LAPTOP 3 942 SYSTEM BENTHIC_ACCESS LAPTOP\Andy Bain Smith
76 3 8 06/09/04 14:53 ABSDEF LAPTOP 43 0 CHPROF LAPTOP\Andy Bain Smith 22
76 4 10 06/09/04 14:53 ABSDEF LAPTOP 43 0 CHPROF LAPTOP\Andy Bain Smith 22
76 5 12 06/09/04 15:41 ABSDEF LAPTOP 1 0 ABSDEF AUD_BACK LAPTOP\Andy Bain Smith 40
83 1 1 06/10/04 07:57 DBSNMP LAPTOP 100 0 Authenticated by: DATABASE SYSTEM 5
103 1 1 06/10/04 08:08 DBSNMP LAPTOP 100 0 Authenticated by: DATABASE SYSTEM 5
123 1 1 06/10/04 09:13 DBSNMP LAPTOP 100 0 Authenticated by: DATABASE SYSTEM 5
124 1 1 06/10/04 09:27 SYSTEM LAPTOP 100 0 Authenticated by: DATABASE; Client address: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1673)) LAPTOP\Andy Bain Smith 5
125 1 1 06/10/04 09:27 SYSTEM LAPTOP 100 0 Authenticated by: DATABASE; Client address: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1694)) LAPTOP\Andy Bain Smith 5
125 2 4 06/10/04 09:27 SYSTEM LAPTOP 3 942 SYSTEM BENTHIC_ACCESS LAPTOP\Andy Bain Smith
125 3 12 06/10/04 09:30 SYSTEM LAPTOP 3 942 SYSTEM DBA_AUDIT_TRAILT LAPTOP\Andy Bain Smith
126 1 1 06/10/04 09:31 ABSDEF LAPTOP 100 0 Authenticated by: DATABASE; Client address: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1867)) LAPTOP\Andy Bain Smith 5
126 2 4 06/10/04 09:31 ABSDEF LAPTOP 3 942 SYSTEM BENTHIC_ACCESS LAPTOP\Andy Bain Smith
127 1 1 06/10/04 09:39 CHPROF LAPTOP 101 0 151 0 12 0 06/10/04 09:40 Authenticated by: DATABASE; Client address: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=2182)) LAPTOP\Andy Bain Smith 5
127 2 4 06/10/04 09:39 CHPROF LAPTOP 3 942 SYSTEM BENTHIC_ACCESS LAPTOP\Andy Bain Smith
128 1 1 06/10/04 09:42 CHPROF LAPTOP 101 0 163 0 18 0 06/10/04 09:44 Authenticated by: DATABASE; Client address: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=2291)) LAPTOP\Andy Bain Smith 5
128 2 4 06/10/04 09:42 CHPROF LAPTOP 3 942 SYSTEM BENTHIC_ACCESS LAPTOP\Andy Bain Smith
128 3 13 06/10/04 09:43 CHPROF LAPTOP 3 942 CHPROF DUAL2 LAPTOP\Andy Bain Smith
129 1 1 06/10/04 09:49 ABSDEF LAPTOP 100 1017 Authenticated by: DATABASE; Client address: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=2575)) LAPTOP\Andy Bain Smith

The report picks up failed SQL DML statements - but not the DDL (eg. Action 43 ALTER USER).
It also does not differentiate between successful and unsuccessful statments
e.g. first Create table is successful (returncode 0) next two return code 955 (object exists.

Any way of encapsuating all of this in a report?

regards

Andy

: Check Reports/System Audit Trail/Object Access and Statement Audit report.
: They supposed be there

Thu Jun 10, 2004 9:58 am View user's profile Send private message
SysOp
Site Admin


Joined: 26 Nov 2006
Posts: 7849

Post Re: DB Audit - Reporting Reply with quote

I guess it internally runs a query against some audit view that filters object access only.

: I double checked it.

: Here is the report: username owner obj_name action_name timestamp
: ABSDEF ABSDEF AUD_BACK CREATE TABLE 09/06/2004 15:41:42
: ABSDEF ABSDEF DBA_AUDIT_TRAILX SELECT 09/06/2004 14:27:08
: ABSDEF SYSTEM BENTHIC_ACCESS SELECT 09/06/2004 14:19:19
: ABSDEF SYSTEM BENTHIC_ACCESS SELECT 09/06/2004 14:25:51
: ABSDEF SYSTEM BENTHIC_ACCESS SELECT 09/06/2004 14:53:18
: ABSDEF SYSTEM BENTHIC_ACCESS SELECT 10/06/2004 09:31:37
: CHPROF CHPROF BIOG CREATE TABLE 09/06/2004 14:20:26
: CHPROF CHPROF BIOG CREATE TABLE 09/06/2004 14:34:44
: CHPROF CHPROF BIOG CREATE TABLE 09/06/2004 14:37:57
: CHPROF CHPROF DUAL2 SELECT 10/06/2004 09:43:31
: CHPROF SYSTEM BENTHIC_ACCESS SELECT 09/06/2004 14:20:25
: CHPROF SYSTEM BENTHIC_ACCESS SELECT 09/06/2004 14:34:44
: CHPROF SYSTEM BENTHIC_ACCESS SELECT 09/06/2004 14:45:14
: CHPROF SYSTEM BENTHIC_ACCESS SELECT 10/06/2004 09:39:26
: CHPROF SYSTEM BENTHIC_ACCESS SELECT 10/06/2004 09:42:05
: SYSTEM SYSTEM BENTHIC_ACCESS SELECT 10/06/2004 09:27:27
: SYSTEM SYSTEM DBA_AUDIT_TRAILT SELECT 10/06/2004 09:30:07

: and here is the complete AUD$ content

: SESSIONID ENTRYID STATEMENT TIMESTAMP# USERID USERHOST TERMINAL ACTION#
: RETURNCODE OBJ$CREATOR OBJ$NAME AUTH$PRIVILEGES AUTH$GRANTEE NEW$OWNER
: NEW$NAME SES$ACTIONS SES$TID LOGOFF$LREAD LOGOFF$PREAD LOGOFF$LWRITE
: LOGOFF$DEAD LOGOFF$TIME COMMENT$TEXT SPARE1 SPARE2 OBJ$LABEL SES$LABEL
: PRIV$USED
: 68 1 1 06/09/04 14:09 ABSDEF LAPTOP 101 0 473 12 79 0 06/09/04 14:53
: Authenticated by: DATABASE; Client address:
: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1055)) LAPTOP\Andy Bain Smith
: 5
: 69 1 1 06/09/04 14:11 CHPROF LAPTOP 101 0 205 2 57 0 06/09/04 14:20
: Authenticated by: DATABASE; Client address:
: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1058)) LAPTOP\Andy Bain Smith
: 5
: 70 1 1 06/09/04 14:16 ABSDEF LAPTOP 101 0 90 0 6 0 06/09/04 14:19
: Authenticated by: DATABASE; Client address:
: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1061)) LAPTOP\Andy Bain Smith
: 5
: 71 1 1 06/09/04 14:19 ABSDEF LAPTOP 101 0 102 0 18 0 06/09/04 16:47
: Authenticated by: DATABASE; Client address:
: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1064)) LAPTOP\Andy Bain Smith
: 5
: 71 2 4 06/09/04 14:19 ABSDEF LAPTOP 3 942 SYSTEM BENTHIC_ACCESS LAPTOP\Andy
: Bain Smith
: 71 3 7 06/09/04 14:19 ABSDEF LAPTOP 49 0 LAPTOP\Andy Bain Smith 3
: 72 1 1 06/09/04 14:20 CHPROF LAPTOP 101 0 116 0 26 0 06/09/04 14:34
: Authenticated by: DATABASE; Client address:
: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1067)) LAPTOP\Andy Bain Smith
: 5
: 72 2 4 06/09/04 14:20 CHPROF LAPTOP 3 942 SYSTEM BENTHIC_ACCESS LAPTOP\Andy
: Bain Smith
: 72 3 9 06/09/04 14:20 CHPROF LAPTOP 1 955 CHPROF BIOG LAPTOP\Andy Bain Smith
: 40
: 73 1 1 06/09/04 14:25 ABSDEF LAPTOP 101 0 1852 1 18 0 06/09/04 16:47
: Authenticated by: DATABASE; Client address:
: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1070)) LAPTOP\Andy Bain Smith
: 5
: 73 2 4 06/09/04 14:25 ABSDEF LAPTOP 3 942 SYSTEM BENTHIC_ACCESS LAPTOP\Andy
: Bain Smith
: 73 3 22 06/09/04 14:27 ABSDEF LAPTOP 3 942 ABSDEF DBA_AUDIT_TRAILX
: LAPTOP\Andy Bain Smith
: 74 1 1 06/09/04 14:34 CHPROF LAPTOP 101 0 158 0 34 0 06/09/04 14:45
: Authenticated by: DATABASE; Client address:
: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1073)) LAPTOP\Andy Bain Smith
: 5
: 74 2 4 06/09/04 14:34 CHPROF LAPTOP 3 942 SYSTEM BENTHIC_ACCESS LAPTOP\Andy
: Bain Smith
: 74 3 8 06/09/04 14:34 CHPROF LAPTOP 1 955 CHPROF BIOG LAPTOP\Andy Bain Smith
: 40
: 74 4 12 06/09/04 14:37 CHPROF LAPTOP 1 955 CHPROF BIOG LAPTOP\Andy Bain Smith
: 40
: 75 1 1 06/09/04 14:45 CHPROF LAPTOP 101 0 117 0 41 0 06/09/04 16:47
: Authenticated by: DATABASE; Client address:
: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1076)) LAPTOP\Andy Bain Smith
: 5
: 75 2 4 06/09/04 14:45 CHPROF LAPTOP 3 942 SYSTEM BENTHIC_ACCESS LAPTOP\Andy
: Bain Smith
: 76 1 1 06/09/04 14:53 ABSDEF LAPTOP 101 0 1606 4 492 0 06/09/04 16:47
: Authenticated by: DATABASE; Client address:
: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1079)) LAPTOP\Andy Bain Smith
: 5
: 76 2 4 06/09/04 14:53 ABSDEF LAPTOP 3 942 SYSTEM BENTHIC_ACCESS LAPTOP\Andy
: Bain Smith
: 76 3 8 06/09/04 14:53 ABSDEF LAPTOP 43 0 CHPROF LAPTOP\Andy Bain Smith 22
: 76 4 10 06/09/04 14:53 ABSDEF LAPTOP 43 0 CHPROF LAPTOP\Andy Bain Smith 22
: 76 5 12 06/09/04 15:41 ABSDEF LAPTOP 1 0 ABSDEF AUD_BACK LAPTOP\Andy Bain
: Smith 40
: 83 1 1 06/10/04 07:57 DBSNMP LAPTOP 100 0 Authenticated by: DATABASE SYSTEM 5
: 103 1 1 06/10/04 08:08 DBSNMP LAPTOP 100 0 Authenticated by: DATABASE SYSTEM
: 5
: 123 1 1 06/10/04 09:13 DBSNMP LAPTOP 100 0 Authenticated by: DATABASE SYSTEM
: 5
: 124 1 1 06/10/04 09:27 SYSTEM LAPTOP 100 0 Authenticated by: DATABASE; Client
: address: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1673)) LAPTOP\Andy
: Bain Smith 5
: 125 1 1 06/10/04 09:27 SYSTEM LAPTOP 100 0 Authenticated by: DATABASE; Client
: address: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1694)) LAPTOP\Andy
: Bain Smith 5
: 125 2 4 06/10/04 09:27 SYSTEM LAPTOP 3 942 SYSTEM BENTHIC_ACCESS LAPTOP\Andy
: Bain Smith
: 125 3 12 06/10/04 09:30 SYSTEM LAPTOP 3 942 SYSTEM DBA_AUDIT_TRAILT
: LAPTOP\Andy Bain Smith
: 126 1 1 06/10/04 09:31 ABSDEF LAPTOP 100 0 Authenticated by: DATABASE; Client
: address: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1867)) LAPTOP\Andy
: Bain Smith 5
: 126 2 4 06/10/04 09:31 ABSDEF LAPTOP 3 942 SYSTEM BENTHIC_ACCESS LAPTOP\Andy
: Bain Smith
: 127 1 1 06/10/04 09:39 CHPROF LAPTOP 101 0 151 0 12 0 06/10/04 09:40
: Authenticated by: DATABASE; Client address:
: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=2182)) LAPTOP\Andy Bain Smith
: 5
: 127 2 4 06/10/04 09:39 CHPROF LAPTOP 3 942 SYSTEM BENTHIC_ACCESS LAPTOP\Andy
: Bain Smith
: 128 1 1 06/10/04 09:42 CHPROF LAPTOP 101 0 163 0 18 0 06/10/04 09:44
: Authenticated by: DATABASE; Client address:
: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=2291)) LAPTOP\Andy Bain Smith
: 5
: 128 2 4 06/10/04 09:42 CHPROF LAPTOP 3 942 SYSTEM BENTHIC_ACCESS LAPTOP\Andy
: Bain Smith
: 128 3 13 06/10/04 09:43 CHPROF LAPTOP 3 942 CHPROF DUAL2 LAPTOP\Andy Bain
: Smith
: 129 1 1 06/10/04 09:49 ABSDEF LAPTOP 100 1017 Authenticated by: DATABASE;
: Client address: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=2575))
: LAPTOP\Andy Bain Smith

: The report picks up failed SQL DML statements - but not the DDL (eg. Action
: 43 ALTER USER).
: It also does not differentiate between successful and unsuccessful statments
: e.g. first Create table is successful (returncode 0) next two return code 955
: (object exists.

: Any way of encapsuating all of this in a report?

: regards

: Andy

Thu Jun 10, 2004 10:58 am View user's profile Send private message
Andy Bain Smith



Joined: 10 Jun 2004
Posts: 3

Post Re: DB Audit - Reporting Reply with quote

I think you are right.

But how can I get a report that will supply the information that I need?

regards

Andy
: I guess it internally runs a query against some audit view that filters
: object access only.

Thu Jun 10, 2004 11:11 am View user's profile Send private message
SysOp
Site Admin


Joined: 26 Nov 2006
Posts: 7849

Post Re: DB Audit - Reporting Reply with quote

Andy,

We could not contact you by email because you supplied invalid email address. Here is a copy of the email message that was sent to you this morning.

**************************
Andy,

Graphical reports in DB Audit don't access AUD$ table directly instead they
rely on 2 main Oracle audit views which are dba_audit_object and
dba_audit_session. These reports are more oriented toward auditing of
object-level user activity rather then system-level. If you want to know
audit results by performed operation type you can run the following query in
SQL*Plus

SELECT name "action", userid "user", terminal "terminal", timestamp# "time"
FROM sys.audit_actions, sys.aud$
WHERE action# = action
ORDER BY 1, 2, 3, 4;

To limit this query to ALTER commands only you can use

SELECT name "action", userid "user", terminal "terminal", timestamp# "time"
FROM sys.audit_actions, sys.aud$
WHERE action# = action AND name LIKE 'ALTER%'
ORDER BY 1, 2, 3, 4;

*******************************

FYI: DB Audit version 2.0.23 will include a new report whose base query is an extended version of the query referenced above.
Stay tuned.

*******************************

: I think you are right.

: But how can I get a report that will supply the information that I need?

: regards

: Andy

Thu Jun 10, 2004 6:34 pm View user's profile Send private message
Display posts from previous:    
Reply to topic    SoftTree Technologies Forum Index » DB Audit, DB Mail, DB Tools All times are GMT - 4 Hours
Page 1 of 1

 
Jump to: 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


 

 

Powered by phpBB © 2001, 2005 phpBB Group
Design by Freestyle XL / Flowers Online.