Quantcast
Channel: Active questions tagged audit - Database Administrators Stack Exchange
Viewing all articles
Browse latest Browse all 182

How can I audit actions done by my schema within my schema using Oracle Unified Auditing?

$
0
0

I want to be able to audit specific actions within my own schema (such as DDL, inserts, updates, anything I feel like). I am on Oracle 19C with mixed mode for auditing.

I have a user "SPLUNK", which has the following table:

CREATE TABLE BAT (  ID INT GENERATED ALWAYS AS IDENTITY NOT NULL , NAME VARCHAR2(20) );

I create and enable an audit policy to test any changes to the table structure as follows:

CREATE AUDIT POLICY ALTER_TABLE_POLICY_SPL ACTIONS ALTER ON SPLUNK.BAT;AUDIT POLICY ALTER_TABLE_POLICY_SPL;

If I, as the SPLUNK user, run the following SQL statement:

ALTER TABLE BAT ADD (AGE INT );

Then run this statement:

select * from unified_audit_trailORDER BY EVENT_TIMESTAMP DESC;

My alter statement is NOT included in the audit results. However, if I create another user TESTUSER, give ALTER and SELECT privileges to SPLUNK.BAT:

GRANT ALTER ON SPLUNK.BAT TO TESTUSER;GRANT SELECT ON SPLUNK.BAT TO TESTUSER;

Then I run this, as the TESTUSER:

ALTER TABLE SPLUNK.BAT ADD (FAVORITENUM INT );

My alter statement IS included in the unified_audit_trail. What gives? Specifically, why is my alter statement for the TESTUSER user audited but not for the SPLUNK user?

More importantly, how could I change my audit policy to audit the alter table action on SPLUNK.BAT by ALL users, including the SPLUNK user?


Viewing all articles
Browse latest Browse all 182

Latest Images

Trending Articles



Latest Images