Enable audit in oracle

最新推荐文章于 2024-07-30 23:47:05 发布

转载最新推荐文章于 2024-07-30 23:47:05 发布 · 163 阅读

0 ·

CC 4.0 BY-SA版权

原文链接：https://my.oschina.net/l1z2g9/blog/203054

文章标签：

#数据库

本文详细介绍Oracle数据库中审计功能的配置与管理方法，包括如何设置审计跟踪、启用系统操作审计，以及如何创建和禁用特定的审计选项。此外，还介绍了如何查看审计记录和维护审计表空间。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

为什么80%的码农都做不了架构师？>>>

Check audit settting

select name,value from v$parameter where name like 'audit%'
show parameter audit;

Change setting of audit_trail

Method 1

<pre> alter system set audit_trail=DB,Extended scope=spfile (cannot set both as Change Static Parameters Through the SPFILE) alter system set audit_sys_operations=true scope=spfile </pre>

Method 2

add config in $ORACLE_HOME/dbs/init*.ora as below since db starting with pfile, error 'specified initialization parameter can not be modified'
audit_trail=DB ( oracle9i not support 'Extended' in init*.ora file)
audit_sys_operations=true

Restart db

<pre> shutdown immediate; startup; </pre>

Check audit option in db

select * from dba_stmt_audit_opts
OR
select * from dba_priv_audit_opts

Make some audit option

<pre> AUDIT ALTER TABLE; AUDIT DELETE ANY TABLE; AUDIT DROP ANY TABLE; AUDIT AUDIT ANY; AUDIT AUDIT SYSTEM; AUDIT ALL BY FRED BY ACCESS; audit select table, update table, delete table, insert table, execute procedure by FRED by access; AUDIT SELECT, INSERT, DELETE ON jward.dept BY ACCESS WHENEVER SUCCESSFUL; AUDIT SELECT TABLE, INSERT TABLE, DELETE TABLE, EXECUTE PROCEDURE BY ACCESS WHENEVER NOT SUCCESSFUL; AUDIT SELECT, UPDATE, DELETE ON SYS.AUD$ BY ACCESS; -------- disable them NOAUDIT ALTER TABLE; ... </pre>

List audit record

<pre> select * from dba_audit_session order by timestamp desc select * from dba_audit_trail order by timestamp desc select * from dba_audit_object order by timestamp desc; select * from dba_audit_statement order by timestamp desc; </pre>