Could you monitor all changes made within a postgresql database by somehow...
I've been reading about postgresql replication and was wondering if it was somehow possible to listen to the replication binary log and push that to some tool like sumologic or splunk so that any...
View ArticleAudit trigger 91plus: setting up with proper role?
One of the solutions available for auditing in PostgreSQL is Audit trigger 91plus.wiki pagegithub pageThere is a section in the wiki that is confusing to me:Changes by the table owner and superusers...
View ArticleOracle sys SYSDBA audit information to a report
I am trying to produce a monthly report on Audit. I am able to query the DBA_AUDIT_TRAIL, for all other users and no issue in that.I wanted to include the SYS/SYSDBA activities in this report and I...
View ArticleReading SQL Server .sqlaudit Files Stored in S3
I set up an audit in SQL Server that saves audit logs (.sqlaudit files) to RDS, which we then copy over to S3 using a standard process. All of the documentation I can find on reading these audit files...
View ArticleAudit table and foreign key
I have a database with multiples tables that must be audited.As an example, I have a table of objects defined with a unique ID, a name, and a description.The name will always be the same. It is not...
View ArticleHow to audit a specific query in Oracle
I want to audit a specific SQL query in Oracle. However I think we can audit only users or table level.For example I want to audit 'audit statements', such as who run the "AUDIT CREATE SESSION by...
View ArticleIs it possible to set Audit_trail parameter to both DB and OS in Oracle database
In Oracle database ,we can direct audit records to either db , os or in xml file by using the below command:ALTER SYSTEM SET AUDIT_TRAIL= DB SCOPE=SPFILE;But is it possible to direct audit records to...
View ArticleOracle Fine-Grained Access (FGA) auditing excluding one source
I want to audit DML statements coming from other places than application user "tomcat" (OS_USER attribute). I want to focus only on developers or support team changing data in any way.DML Trigger...
View ArticleWhy password return null for table master.. sys.logins? *SQL Server
I have made comparison between two sql servers on my environmentsA - SQL SERVER 2016 - Passowrd return valueB - SQL SERVER 2019 - Password is nullIs there any setting to check.Thank you in advance
View ArticleHow to send alert on SQL Shutdown due to Audit Failure
Looking for a way to implement this STIG. What method should I use to monitor SQL Server, when it is shutdown due to "Shutdown on Audit Failure"?SQL Server must provide an immediate real-time alert to...
View ArticlePoint-in-Time-Recovery of Postgres at an arbitrary time for audit purposes
TL;DRWould you recommend using CDC or pg_wal-based recovery to reproduce the state of the database in an arbitrary time, or stick with joining SCD2 tables (with start end end date for every record) and...
View ArticleI can not read sqlaudit file generated in SQL 2019 from SQL2016
I am trying to read xxx.sql audit file(which has been generated by sql 2019) form sql server 2016 version and I am getting below error:Msg 33201, Level 17, State 1, Line 31An error occurred in reading...
View ArticleWhat happens if sys.aud$ is full in Oracle?
I am not seeing this in the documentation, but what happens when the Oracle 10.2 audit trail is full? Does it just not making any more audit records? Overwrites the oldest records? Shuts down the...
View Articleare pg_cron and pgaudit database specific extensions? or is one installation...
I'm quite versed in postgresql, but new to any extension other than postgis. for example, one of the first things I do when setting up an instance is to install postgis in template1, so it's available...
View ArticleSQL Server must provide an immediate real-time alert of all audit log...
My team has been trying to implement STIG:SQL Server must provide an immediate real-time alert to appropriate support staff of all audit log failures (SV-213985r855969_rule).Obviously, email...
View ArticleHow to audit server settings configuration changes other than view server state?
I want to capture the audit of server configuration settings changes.For this I setup the SERVER_OPERATION_GROUP audit event.This event is raised when Security Audit operations such as...
View ArticleAuditing/Monitoring the DBA
We have a customer that would like to make sure that certain tables are not tampered with by their DBAs for compliance reasons.From my understanding their DBAs either do have or are able to run with...
View ArticleWhat is the best way to setup SQL Server audit to get all SELECT for schema?
My goal:Show all tables from specific schema which are used in SELECT queries for all users in SQL Server database.[Optional] Show all tables from specific schema which are used in queries for all...
View ArticleHow to change the timestamp format of percona mysql audit logs
I have a RHEL linux server where I have installed mysql percona and set the auditing.The Queries received in the audit record has timestamp in below...
View ArticleConfigure Login Audit - Skip one user-
I have configured the login audit to save only the failed ones, but I need to omit a specific login in said audit, is it possible?I am using sqlserver 2008-r2
View ArticlepgAudit Install Not Working Because of Makefile (Postgres 15)
Hi My Makefile supposedly doesnt have an install target. How do I fix this?I dont understand how it even worked for others. Also, I cant use an updated version of Postgres due to restrictions at my...
View ArticleDatabase audit for Select on read only replica of Always On?
I'm working with SQL Server Always On Availability Groups and need to implement auditing for our environment. I have a specific requirement to audit activities on the secondary replicas that are...
View ArticlePercona audit_log_filter not working
Has anyone had any luck using the audit_log_filter plugin / component from Percona?I have installed Percona Server for MySQL 8.0 (8.0.41-32) and Percona Server for MySQL 8.4 (8.4.3-3) and followed the...
View ArticleCannot start SQL Server Audit on file
I have the following SQL Server Audit:CREATE SERVER AUDIT [Omega_CA_Srv_Aud]TO FILE ( FILEPATH = N'C:\MS_Sql_Server_Audit\' ,MAXSIZE = 100 MB ,MAX_FILES = 3 ,RESERVE_DISK_SPACE = OFF) WITH (QUEUE_DELAY...
View ArticleMySQL: how to use audit_log plugin to audit user modification
I am trying to audit any user modification action (create user/alter user/drop user/rename user) on a MySQL Enterprise server 5.7.24.I have installed the audit_log plugin following the document,and...
View ArticleTrack MySQL Procedure Changes in MySQL
We want to keep track of changes being done to MySQL procedures only, actually recently our procedures seem to have overwritten to some previous versions and we were unable to track it that who did...
View ArticleTracking All MongoDB Read Operations Without Performance Impact (Free Solution)
I'm trying to implement a system to track all read-only operations on our MongoDB deployment with the following constraints:Requirements:Need to track all read operations (find, aggregate, etc.)...
View ArticleDiscover who changed SQL Server service state
There's any way to find out who stopped\restarted\started the following services ?SQL Server Database EngineSQL Server AgentSQL Server Analysis ServicesThanks !
View ArticleAuditing a Single User in SQL Server
I have an application that accesses my SQL Server using a username\password. However our lead developer has access to this password and I suspect that he may be utilizing this outside of our terms of...
View ArticleHow to trace a query on Firebird?
With SQL Server we can trace for a period of time, to get what queries are running.How can I do this with Firebird? I'm reading something on their website but there's only user trace like if the login...
View Article