Could you monitor all changes made within a postgresql database by somehow...
I've been reading about postgresql replication and was wondering if it was somehow possible to listen to the replication binary log and push that to some tool like sumologic or splunk so that any...
View ArticleAudit trigger 91plus: setting up with proper role?
One of the solutions available for auditing in PostgreSQL is Audit trigger 91plus.wiki pagegithub pageThere is a section in the wiki that is confusing to me:Changes by the table owner and superusers...
View ArticleOracle sys SYSDBA audit information to a report
I am trying to produce a monthly report on Audit. I am able to query the DBA_AUDIT_TRAIL, for all other users and no issue in that.I wanted to include the SYS/SYSDBA activities in this report and I...
View ArticleReading SQL Server .sqlaudit Files Stored in S3
I set up an audit in SQL Server that saves audit logs (.sqlaudit files) to RDS, which we then copy over to S3 using a standard process. All of the documentation I can find on reading these audit files...
View ArticleAudit table and foreign key
I have a database with multiples tables that must be audited.As an example, I have a table of objects defined with a unique ID, a name, and a description.The name will always be the same. It is not...
View ArticleHow to audit a specific query in Oracle
I want to audit a specific SQL query in Oracle. However I think we can audit only users or table level.For example I want to audit 'audit statements', such as who run the "AUDIT CREATE SESSION by...
View ArticleIs it possible to set Audit_trail parameter to both DB and OS in Oracle database
In Oracle database ,we can direct audit records to either db , os or in xml file by using the below command:ALTER SYSTEM SET AUDIT_TRAIL= DB SCOPE=SPFILE;But is it possible to direct audit records to...
View ArticleOracle Fine-Grained Access (FGA) auditing excluding one source
I want to audit DML statements coming from other places than application user "tomcat" (OS_USER attribute). I want to focus only on developers or support team changing data in any way.DML Trigger...
View ArticleTrack all modifications to a PostgreSQL table
We have a table which has only roughly 500 rows, but it is very important for us.I want see all changes which happen to this table. The changes should get tracked with a timestamp.I don't want the...
View ArticleWhy password return null for table master.. sys.logins? *SQL Server
I have made comparison between two sql servers on my environmentsA - SQL SERVER 2016 - Passowrd return valueB - SQL SERVER 2019 - Password is nullIs there any setting to check.Thank you in advance
View ArticleAuditing for direct Object Access (Skipping indirect access)
to isolate internal tables from third party database access, we've created schemas specifically for that use case. Third party Logins/DB Users only have access to those "public" Schemas.The problem is...
View ArticleSQL Server Database Audit used with a trigger to monitor CREATE TABLE events
Got SQL Audit enabled on a database with SQL Server 2016 SP1. Trying to catch a CREATE TABLE event with a trigger, and add that table to the audit to log data operations.Problem is that changes to the...
View ArticleHow to trace a query on Firebird?
With SQL Server we can trace for a period of time, to get what queries are running.How can I do this with Firebird? I'm reading something on their website but there's only user trace like if the login...
View ArticleCreating a server audit specification through SSMS: what is the correlation...
Having gone through https://learn.microsoft.com/en-us/sql/relational-databases/security/auditing/create-a-server-audit-and-server-audit-specification?view=sql-server-ver15 where it explains how to...
View ArticleHow to send alert on SQL Shutdown due to Audit Failure
Looking for a way to implement this STIG. What method should I use to monitor SQL Server, when it is shutdown due to "Shutdown on Audit Failure"?SQL Server must provide an immediate real-time alert to...
View ArticlePoint-in-Time-Recovery of Postgres at an arbitrary time for audit purposes
TL;DRWould you recommend using CDC or pg_wal-based recovery to reproduce the state of the database in an arbitrary time, or stick with joining SCD2 tables (with start end end date for every record) and...
View ArticleI can not read sqlaudit file generated in SQL 2019 from SQL2016
I am trying to read xxx.sql audit file(which has been generated by sql 2019) form sql server 2016 version and I am getting below error:Msg 33201, Level 17, State 1, Line 31An error occurred in reading...
View ArticleAudit attempts to access the Database, only failed for some users and all...
I am needing help to be able to configure an audit mechanism that allows me to record in the audit_trail the login (or create session) attempts in my databases, the problem comes when I need to record...
View ArticleHow to import Oracle unified audit spillover files generated by Data Guard...
I know that I can use the DBMS_AUDIT_MGMT.LOAD_UNIFIED_AUDIT_FILES procedure to load the unified audit spillover files (*.bin) into the internal unified audit tables in an Oracle 19c database. But,...
View ArticleWhat happens if sys.aud$ is full in Oracle?
I am not seeing this in the documentation, but what happens when the Oracle 10.2 audit trail is full? Does it just not making any more audit records? Overwrites the oldest records? Shuts down the...
View Articleare pg_cron and pgaudit database specific extensions? or is one installation...
I'm quite versed in postgresql, but new to any extension other than postgis. for example, one of the first things I do when setting up an instance is to install postgis in template1, so it's available...
View ArticleSQL Server must provide an immediate real-time alert of all audit log...
My team has been trying to implement STIG:SQL Server must provide an immediate real-time alert to appropriate support staff of all audit log failures (SV-213985r855969_rule).Obviously, email...
View ArticleHow to audit server settings configuration changes other than view server state?
I want to capture the audit of server configuration settings changes.For this I setup the SERVER_OPERATION_GROUP audit event.This event is raised when Security Audit operations such as...
View ArticleAuditing/Monitoring the DBA
We have a customer that would like to make sure that certain tables are not tampered with by their DBAs for compliance reasons.From my understanding their DBAs either do have or are able to run with...
View ArticleClik here to view.
What is the best way to setup SQL Server audit to get all SELECT for schema?
My goal:Show all tables from specific schema which are used in SELECT queries for all users in SQL Server database.[Optional] Show all tables from specific schema which are used in queries for all...
View ArticleHow to change the timestamp format of percona mysql audit logs
I have a RHEL linux server where I have installed mysql percona and set the auditing.The Queries received in the audit record has timestamp in below...
View ArticleConfigure Login Audit - Skip one user-
I have configured the login audit to save only the failed ones, but I need to omit a specific login in said audit, is it possible?I am using sqlserver 2008-r2
View ArticlepgAudit Install Not Working Because of Makefile (Postgres 15)
Hi My Makefile supposedly doesnt have an install target. How do I fix this?I dont understand how it even worked for others. Also, I cant use an updated version of Postgres due to restrictions at my...
View ArticleDatabase audit for Select on read only replica of Always On?
I'm working with SQL Server Always On Availability Groups and need to implement auditing for our environment. I have a specific requirement to audit activities on the secondary replicas that are...
View ArticlePercona audit_log_filter not working
Has anyone had any luck using the audit_log_filter plugin / component from Percona?I have installed Percona Server for MySQL 8.0 (8.0.41-32) and Percona Server for MySQL 8.4 (8.4.3-3) and followed the...
View Article