Home » RDBMS Server » Server Administration » Traditional auditing: how to query existing audits? (18)
Traditional auditing: how to query existing audits? [message #689788] Mon, 22 April 2024 09:57 Go to next message
Darth Waiter
Messages: 78
Registered: October 2020
Member
Unified audit policies can be queried from 2x views. Can traditional audits be queried in a similar fashion? I am looking to find out what traditional audits exist and for which objects.

Many thanks!
Re: Traditional auditing: how to query existing audits? [message #689789 is a reply to message #689788] Mon, 22 April 2024 15:28 Go to previous messageGo to next message
Michel Cadot
Messages: 68648
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
SQL> col table_name format a30
SQL> col comments format a80
SQL> select table_name, comments from dict where table_name like 'DBA%' and lower(comments) like '%audit%' order by 1;
TABLE_NAME                     COMMENTS
------------------------------ --------------------------------------------------------------------------------
DBA_AUDIT_EXISTS               Lists audit trail entries produced by AUDIT NOT EXISTS and AUDIT EXISTS
DBA_AUDIT_MGMT_CLEANUP_JOBS    The view displays the currently configured audit trail purge jobs
DBA_AUDIT_MGMT_CONFIG_PARAMS   The view displays the currently configured audit trail properties that are defin
                               ed by the DBMS_AUDIT_MGMT PL/SQL package
DBA_AUDIT_MGMT_LAST_ARCH_TS    The Last Archive Timestamps set for the Audit Trail Clean up
DBA_AUDIT_OBJECT               Audit trail records for statements concerning objects, specifically: table, clus
                               ter, view, index, sequence,  [public] database link, [public] synonym, procedure
                               , trigger, rollback segment, tablespace, role, user
DBA_AUDIT_POLICIES             Fine grained auditing policies in the database
DBA_AUDIT_POLICY_COLUMNS       All fine grained auditing policy columns in the database
DBA_AUDIT_SESSION              All audit trail records concerning CONNECT and DISCONNECT
DBA_AUDIT_STATEMENT            Audit trail records concerning  grant, revoke, audit, noaudit and alter system
DBA_AUDIT_TRAIL                All audit trail entries
DBA_COMMON_AUDIT_TRAIL         Combined Standard and Fine Grained audit trail entries
DBA_FGA_AUDIT_TRAIL            All fine grained audit event logs
DBA_OBJ_AUDIT_OPTS             Auditing options for all tables and views with atleast one option set
DBA_PRIV_AUDIT_OPTS            Describes current system privileges being audited across the system and by user
DBA_STMT_AUDIT_OPTS            Describes current system auditing options across the system and by user
DBA_XS_AUDIT_POLICY_OPTIONS    Describes auditing options defined under all XS security specific
                               audit policies
DBA_XS_ENABLED_AUDIT_POLICIES  Describes all XS related audit policy's enablement to users
DBA_XS_ENB_AUDIT_POLICIES      Synonym for DBA_XS_ENABLED_AUDIT_POLICIES
Re: Traditional auditing: how to query existing audits? [message #689790 is a reply to message #689789] Mon, 22 April 2024 16:01 Go to previous messageGo to next message
Darth Waiter
Messages: 78
Registered: October 2020
Member
So, is it this?
Michel Cadot wrote on Mon, 22 April 2024 15:28
DBA_AUDIT_POLICIES             Fine grained auditing policies in the database
I read about that view but the note got me confused: it says in negative that:
Quote:
When unified auditing is enabled in Oracle Database, the audit records are populated in the new audit trail
The records part confuses me because it is the audits themselves that I am looking for, not audit records.

[Updated on: Mon, 22 April 2024 16:03]

Report message to a moderator

Re: Traditional auditing: how to query existing audits? [message #689791 is a reply to message #689790] Tue, 23 April 2024 00:25 Go to previous messageGo to next message
Michel Cadot
Messages: 68648
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator

It is:
DBA_OBJ_AUDIT_OPTS             Auditing options for all tables and views with atleast one option set
DBA_PRIV_AUDIT_OPTS            Describes current system privileges being audited across the system and by user
DBA_STMT_AUDIT_OPTS            Describes current system auditing options across the system and by user
Re: Traditional auditing: how to query existing audits? [message #689792 is a reply to message #689791] Tue, 23 April 2024 07:14 Go to previous messageGo to next message
Darth Waiter
Messages: 78
Registered: October 2020
Member
Merci beaucoup!
Re: Traditional auditing: how to query existing audits? [message #689805 is a reply to message #689792] Fri, 26 April 2024 07:21 Go to previous messageGo to next message
Darth Waiter
Messages: 78
Registered: October 2020
Member
I realized that I also need to determine programmatically whether only the traditional auditing is available, traditional or unified, or unified only.
Which will be a better way of doing it: by looking at whether the above views exist and which combination thereof, or by querying the version (pre-12, post-23)?
Re: Traditional auditing: how to query existing audits? [message #689807 is a reply to message #689805] Fri, 26 April 2024 12:37 Go to previous message
Michel Cadot
Messages: 68648
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
SQL> col parameter format a30
SQL> col value format a30
SQL> select * from v$option where lower(parameter) like '%audit%' order by 1;
PARAMETER                      VALUE                              CON_ID
------------------------------ ------------------------------ ----------
Fine-grained Auditing          TRUE                                    0
Unified Auditing               FALSE                                   0
Check the last line.
Previous Topic: ALLOW_LEGACY_RECO_PROTOCOL
Goto Forum:
  


Current Time: Fri May 03 11:55:17 CDT 2024