How do you correlate SQL Database Audit spec's log column transaction_id with...
How do you correlate SQL Database Audit log column "transaction_id" with a LSN either from the trans log or a CDC capture table?I am trying to do this because cdc only captures the data changes, while...
View ArticleMSSQL 2022 always on contained audit not logging
when i try to create an audit from the listener he goes on the node directly not in the contained instance.Then the audit log only show's the node instance not the AG logHow to create an audit on the...
View ArticleAuditing for direct Object Access (Skipping indirect access)
to isolate internal tables from third party database access, we've created schemas specifically for that use case. Third party Logins/DB Users only have access to those "public" Schemas.The problem is...
View ArticleSQL Server Database Audit used with a trigger to monitor CREATE TABLE events
Got SQL Audit enabled on a database with SQL Server 2016 SP1. Trying to catch a CREATE TABLE event with a trigger, and add that table to the audit to log data operations.Problem is that changes to the...
View Articlecan't create database audit always on contained 2022
I've created a server audit with the same guid on each node.Then when I connect to the listener and I want to create an database audit with ssms it does not see the server audit.If I create it on the...
View Articleuses audit postgresql [closed]
I use the fork of audit trigger 91 plus :https://github.com/iloveitaly/audit-triggerbut I don't understand why this command don't workSELECT audit.audit_table('schema1.table1');I search with ', ",...
View ArticleHow to trace a query on Firebird?
With SQL Server we can trace for a period of time, to get what queries are running.How can I do this with Firebird? I'm reading something on their website but there's only user trace like if the login...
View ArticleCreating a server audit specification through SSMS: what is the correlation...
Having gone through https://learn.microsoft.com/en-us/sql/relational-databases/security/auditing/create-a-server-audit-and-server-audit-specification?view=sql-server-ver15 where it explains how to...
View ArticleHow to send alert on SQL Shutdown due to Audit Failure
Looking for a way to implement this STIG. What method should I use to monitor SQL Server, when it is shutdown due to "Shutdown on Audit Failure"?SQL Server must provide an immediate real-time alert to...
View ArticlePoint-in-Time-Recovery of Postgres at an arbitrary time for audit purposes
TL;DRWould you recommend using CDC or pg_wal-based recovery to reproduce the state of the database in an arbitrary time, or stick with joining SCD2 tables (with start end end date for every record) and...
View ArticleI can not read sqlaudit file generated in SQL 2019 from SQL2016
I am trying to read xxx.sql audit file(which has been generated by sql 2019) form sql server 2016 version and I am getting below error:Msg 33201, Level 17, State 1, Line 31An error occurred in reading...
View ArticleAudit attempts to access the Database, only failed for some users and all...
I am needing help to be able to configure an audit mechanism that allows me to record in the audit_trail the login (or create session) attempts in my databases, the problem comes when I need to record...
View ArticleHow to import Oracle unified audit spillover files generated by Data Guard...
I know that I can use the DBMS_AUDIT_MGMT.LOAD_UNIFIED_AUDIT_FILES procedure to load the unified audit spillover files (*.bin) into the internal unified audit tables in an Oracle 19c database. But,...
View ArticleWhat happens if sys.aud$ is full in Oracle?
I am not seeing this in the documentation, but what happens when the Oracle 10.2 audit trail is full? Does it just not making any more audit records? Overwrites the oldest records? Shuts down the...
View Articleare pg_cron and pgaudit database specific extensions? or is one installation...
I'm quite versed in postgresql, but new to any extension other than postgis. for example, one of the first things I do when setting up an instance is to install postgis in template1, so it's available...
View ArticleCorrelating SQL Audit transaction_id to LSN
I have a relatively simple question that is "Google resistant".I have a SQL Database Audit spec that logs a transaction_id. I also have a Change Data Capture (CDC) spec that logs __$seqval (LSN). As a...
View ArticleSQL Server must provide an immediate real-time alert of all audit log...
My team has been trying to implement STIG:SQL Server must provide an immediate real-time alert to appropriate support staff of all audit log failures (SV-213985r855969_rule).Obviously, email...
View ArticleHow to audit server settings configuration changes other than view server state?
I want to capture the audit of server configuration settings changes.For this I setup the SERVER_OPERATION_GROUP audit event.This event is raised when Security Audit operations such as...
View ArticleHow to audit all DML operations on a SQL Server 2008 R2 database
In order to assess options of implementing indexed views, I want to check the usage of DML operations of the tables. The database is new to me as well as the relevant business knowledge, so I just have...
View ArticleAuditing/Monitoring the DBA
We have a customer that would like to make sure that certain tables are not tampered with by their DBAs for compliance reasons.From my understanding their DBAs either do have or are able to run with...
View Article