Determining Oracle Auditing events/objects

I am testing some software using an Oracle database and I have confirmed that auditing has been enabled (and I can find the logs ok). I have not been able to figure out what events/objects are being audited however.
Does anyone know which table contains this information??
Thanks,
dirby.

DBA_OBJ_AUDIT_OPTS lists auditing options for all objects.
DBA_PRIVS_AUDIT_OPTS lists system privileges being audited.

Similar Messages

Looking for different audit events in Oracle Linux

Hi,
I am looking for different audit events in Oracle Linux. I did lot of googling but could not find anything relevant. Can you please share some doc/info if you have.
Thanks,
Ravi

You can probably spent all day searching in https://linux.oracle.com/documentation/ or http://docs.redhat.com/docs/en-US/index.html for information about this topic. Finding relevant information appears to be difficult.
The information you are looking for is about configuring the Linux Audit subsystem. There are some rules examples in /usr/share/doc/audit*
I found the following link in Google that seems to provide a reasonable overview:
http://dgz.dyndns.org/mediawiki/index.php/%28RHEL%29_HOWTO_configure_the_auditing_of_the_system_%28auditd%29

Data Access Service is unable to log audit events to the security event log

Hi,
Scenario: SCOM 2012 R2 UR4. (Windows 2012 R2)
Today SCOM have generated 4 alerts Data Access Service is unable to log audit events to the security event log.
The service account for "System Center Data Access Service" service is "Local System".
The users at "Generate security audits" are: LOCAL SERVICE and NETWORK SERVICE.
The question is:
how to resolve this alert? (Where look for to obtain more information to resolve this problem)
Thanks in advance!

Local system account is differet to local service account. Fo detail description of these accounts, pls. refer
LocalService Account
http://msdn.microsoft.com/en-us/library/windows/desktop/ms684188(v=vs.85).aspx
LocalSystem Account
http://msdn.microsoft.com/en-us/library/windows/desktop/ms684190(v=vs.85).aspx
Generate security audits which is under Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment of Group policy, determines which accounts can be used by a process to add entries to the security log. This user right
is defined in the Default Domain Controller Group Policy object (GPO) and in the local security policy of workstations and servers. By default, only the LocalSystem account has the privilege to be used by processes to generate security audits.
For identified the SDK account
1) open services.msc
2) From the system Center Data Access Service, you can see the SDK logon on as account
Roger

Oracle Audit Vault installation fails on DVCA assistant + libpthread.so.0

Hello experts, I did this post at general forums but nobody noticed anything, I need your help
I am able to install the Oracle Audit Vault Server on the following features:
OS: Suse Linux 10 SP 2
Clusterware version: 11.1.0 6
The Oracle Audit Vault server installation procces creates the database an starts the instances on each node and notice me the url for the Enterprise Manager but after that it fails at DVCA assistante because is not able to load the shared library libpthread.so.0.
I found in internet that some time there are files like srvctl, vipca, etc tha export LD_ASSUME_KERNEL ant we have to comment that line, but I do not found the line in those files. I just found in the crsctl file this line like
LD_ASSUME_KERNEL=
export LD_ASSUME_KERNEL
PD: The libpthread.so.0 library already exist
Should I comment this line at crsctl file?
Thank you in advance.

Here you are the error messages:
Is the Oracle Audit Vault server 10.2.3
Command = /opt/oracle/product/av/bin/dvca -action option -oh
/opt/oracle/product/av -s_path /opt/oracle/oradata/ -logfile
/opt/oracle/product/av/cfgtoollogs/dvca_install.log -owner_account vault
-owner_passwd ${s_ownerEncryptPwd} -acctmgr_account vault1 ${s_dvMgrPwdArg}
-jdbc_str jdbc:oracle:oci:@av1 ${s_sysPasswdArg} -languages {"en"} -racnode
seguridad1.min2.dtc -lockout
MANAGE_LISTENER start listener
MANAGE_LISTENER start listener
result=/opt/oracle/product/av/bin/dvca_start_listener.sh,127,/opt/oracle/product/av/jdk/jre/bin/java:
error while loading shared libraries: libpthread.so.0: cannot open shared
object file: No such file or directory
MANAGE_LISTENER start listener log=
MANAGE_INSTANCE start RDBMS
MANAGE_INSTANCE start RDBMS
result=/opt/oracle/product/av/bin/dvca_start_rdbms.sh,127,/opt/oracle/product/av/jdk/jre/bin/java:
error while loading shared libraries: libpthread.so.0: cannot open shared
object file: No such file or directory
MANAGE_INSTANCE start RDBMS log=
Executing task SQLPLUS_CATOLS
Executing task RESTART_SERVICES_OLS
MANAGE_INSTANCE stop isqlplus
MANAGE_INSTANCE stop OC4J
MANAGE_LISTENER start listener
MANAGE_LISTENER start listener
result=/opt/oracle/product/av/bin/dvca_start_listener.sh,127,/opt/oracle/product/av/jdk/jre/bin/java:
error while loading shared libraries: libpthread.so.0: cannot open shared
object file: No such file or directory
MANAGE_LISTENER start listener log=
MANAGE_INSTANCE start RDBMS
MANAGE_INSTANCE start RDBMS
result=/opt/oracle/product/av/bin/dvca_start_rdbms.sh,127,/opt/oracle/product/av/jdk/jre/bin/java:
error while loading shared libraries: libpthread.so.0: cannot open shared
object file: No such file or directory
MANAGE_INSTANCE start RDBMS log=
Executing task SQLPLUS_CATMAC
connect SYS:java.sql.SQLException: ORA-01034: ORACLE not available
Questions:
Is the Audit Vault Server Installation compatible with CRS version 11.1.0.6

Documention on Oracle Auditing Capabilities

I am trying to find extensive documentation to explain all Oracle auditing features.
I need to understand where things are audited and be able to query/find things and
store these audit trails for up to a year.
I am looking at V$session and V$AUD and V_$OPEN_CURSOR but do not have
documentation to define all of this. Where is the best source? Any source?
Auditing of general database actions and each successful or unsuccessful attempt:
- Password changed when/what/who
- Grants when/to whom/by whom/what
- Create/Drop/Alter Users/Objects
- Databsae Startup/shutdown when/who
- Terminal ID/Host IP of incoming users
- Database System alters
In other words, (Actions to database, users, etc other than application
Data updates.
Thanks
Kim

Thanks. I actually found it even though it basically logs it an an UNKOWN
command and no username in Oracle since I used sqlplus '/as sysdba'
SELECT substr(command,1,10) COMMAND, substr(ACTION,1,10) ACTION,
substr(OSUSER,1,10) OSUSER,
substr(machine,1,10) MACHINE, server, Process,
to_char(logon_time,'DD-MON-YYYY hh24:mi:ss'), PDDL_Status
FROM V$SESSION
WHERE username is null
ORDER BY logon_time;
I have been slowly finding things. I know thousands of people before me have done
this. I hate to reinvent the wheel everytime I need to find something.
Thanks
Kim

Purge Cache with Oracle BI Event tables don#t work

Hi,
i want to purge the bi server cache an oracle bi event table.
i created an table like:
create table BISE_UPDATE_EVENTS
UPDATE_TYPE INTEGER default 1 not null,
UPDATE_TIME DATE default SYSDATE not null,
DB_NAME VARCHAR2(40 BYTE),
CATALOG_NAME VARCHAR2(40 BYTE),
SCHEMA_NAME VARCHAR2(40 BYTE),
TABLE_NAME VARCHAR2(40 BYTE) not null,
OTHER VARCHAR2(80 BYTE)
and defied it in the Administration tool as an event table
i insert data into it:
INSERT INTO BISE_update_events
(db_name, catalog_name, schema_name, table_name
VALUES (NULL, NULL, 'PSLID_DT', 'DI_LI_MANDANT'
COMMIT
But purging the cache don't work.
I got error messages in NQServer.log:
2010-02-19 11:49:56
[55004] The prepare operation failed while polling from table BISE_UPDATE_EVENTS.
2010-02-19 11:49:56
[nQSError: 22006] Repository metadata: missing column object: ID=5111903:5046337.
2010-02-19 11:49:56
[55005] The cache polling delete statement failed for table BISE_UPDATE_EVENTS.
Got somebody help?
Regards Christian

From the Manual :-
SchemaName
The name of the schema where the physical table that was updated resides.
Populate the SchemaName column only if the event table does not reside in the same database as the physical tables being updated. Otherwise, set it to the null value.
TableName
The name of the physical table that was updated. The name has to match the name defined for the table in the Physical layer of the Administration Tool.
Values cannot be null.
Can you check once to see if you really need to put the schemaname and also if the tablename defined in the RPD is the same as put in the insert statement. Finally, the user used in the connection pool should have delete rights on your polling table.
hope this helps

Query to determine the no. of objects per object_type for a give

Hi,
Below is the query i m using to determine the no. of objects per object_type for a given owner in DBA_RECYCLEBIN.
SELECT count(OBJECT_NAME),TYPE from DBA_RECYCLEBIN
groupby TYPE
having OWNER='FRPDWSO';
ERROR at line 1:
ORA-00933: SQL command not properly endedI guess i m making a very silly mistake here, can anyone please help me solve this issue

Oracle GROUP BY HAVING can be used to limit the returned rows after the grouping. With Oracle GROUP BY HAVING, the HAVING clause is applied after the GROUP BY has taken place.
Oracle GROUP BY HAVING will group values that have a particular value. Oracle GROUP BY HAVING can be used in conjunction with other logical functions such as MIN, MAX, COUNT, and SUM.

BOBJ 4.1 Auditing - Dashboard object type

Hi BOBJ Gurus,
we have switched on auditing in BOBJ 4.1 SP1.
We have noticed for Dashboard object types, It appears the first audit event is being recorded but not subsequent views in the same day for that particular user. This is specific to dashboard object types only. Rest of the object types seems to be working fine.
Any thoughts?
Cheers
Sashi

Hi Sashi,
Is the user refreshing the same dashboard multiple times in a day without a re-login to the Web application i.e. BI Launchpad?
Or the user login multiple times to BI Launchpad and refreshes the Dashboard?
please clarify
Regards,
Tanveer

Unable to capture Exchange Mailbox Auditing events for email creation

We are looking to capture Owner mailbox auditing events using the native Exchange 2013 auditing tools (Search-MailboxAuditLog). I have auditing enabled with all actions for Owner, and capture items performed via Outlook, except for new emails created.
If I create new emails via OWA, I am able to capture the event, but as soon as I go back to Outlook and create a new message, I don’t see anything audited. I also tried this is our Dev environment and seeing the same behavior. Has anyone else experience this
behavior?

Hi,
I have a test in my environment. If I create a message on Outlook as a owner, the mailbox audit logging can't record it.
If I create a message on Outlook as a delegate, when using the Search-MailboxAuditLog cmdlet to search the audit log, it will be displayed as follows:
The operation is "SendAs", not "Create".
Hope this can be helpful to you.
Best regards,
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Amy Wang
TechNet Community Support

Internal Error in reading a Table of Oracle custom-defined objects.

Hi,
We are running into an Oracle internal error when trying to extract data from an OUT parameter of a stored procedure. The OUT parameter is of the type TABLE of Oracle custom-defined OBJECT.
Any help on this issue will be greatly appreciated.
Thanks, in advance,
OraNew
Program:
package test;
import java.sql.CallableStatement;
import java.sql.Connection;
import java.sql.DriverManager;
import java.sql.ResultSet;
import java.sql.SQLException;
import java.sql.Types;
import java.util.ArrayList;
import java.util.List;
import oracle.sql.ARRAY;
import oracle.sql.STRUCT;
import src.vo.ProfileBank;
public class TestOracle {
* @param args
public static void main(String[] args) {
try{
Connection con = getConnection();
ResultSet rsBalance = null;
CallableStatement cs =
con.prepareCall("{ CALL acr_profiles.get_profile_bank( ?, ?, ?)}");
cs.setLong(1, new Long(133).longValue());
cs.setLong(2, new Long(29032).longValue());
cs.registerOutParameter(3,Types.ARRAY,"ACR_USER." + "ACR_PROF_BANK_TAB");
cs.execute();
ARRAY array = (oracle.sql.ARRAY) cs.getObject(3);
System.out.println("length: "+ array.length());
System.out.println("isConvertible: " + array.isConvertibleTo(Object.class));
System.out.println("isInline: " + array.isInline());
rsBalance = array.getResultSet();
showResultSet(rsBalance);
} catch (Exception sql){
System.out.println("Exception "+ sql);
public static void showResultSet (ResultSet rs) throws SQLException
System.out.println("ResultSet = "+ rs.toString());
List profileBanks = new ArrayList();
while (rs != null && rs.next()) {
STRUCT struct = (STRUCT)rs.getObject (2); //getting the Internal Error on this line.
Object[] attribs = struct.getAttributes();
System.out.println("Bank Alias Id"+ (java.math.BigDecimal) attribs[0]);
System.out.println("Bank Name"+ (String)attribs[1]);
System.out.println("Bank set flag "+ (String) attribs[2]);
ProfileBank pBank = new ProfileBank();
pBank.setBankAliasId(new Integer(((java.math.BigDecimal) attribs[0]).intValue()));
pBank.setBankName((String) attribs[1]);
pBank.setSelBankFlag((String) attribs[2]);
profileBanks.add(pBank);
public static Connection getConnection() throws ClassNotFoundException, SQLException {
Class.forName("oracle.jdbc.driver.OracleDriver");
System.out.println("Driver loaded");
// establish a connection
Connection conn = DriverManager
.getConnection(
"jdbc:oracle:thin:@(DESCRIPTION = (ADDRESS = (PROTOCOL = TCP)(HOST=10.3.11.201)(Port=1521)) (CONNECT_DATA=(SERVICE_NAME= aada.a.al)))",
"acr_user", "acr_user");
System.out.println("Database connected");
return conn;
Console Output:
Driver loaded
Database connected
length: 2
isConvertible: false
isInline: true
ResultSet = oracle.jdbc.driver.ArrayDataResultSet@1f3aa07
Exception java.sql.SQLException: Internal Error
Partial Stacktrace obtained from the Eclipse Debug window:
oracle.jdbc.driver.DatabaseError.throwSqlException(int) line: 292
oracle.jdbc.oracore.OracleTypeCOLLECTION.initCollElemTypeName() line: 1192
oracle.jdbc.oracore.OracleTypeCOLLECTION.getAttributeType(int) line: 1225
oracle.jdbc.oracore.OracleTypeADT(oracle.jdbc.oracore.OracleNamedType).getFullName(boolean) line: 119
oracle.jdbc.oracore.OracleTypeADT(oracle.jdbc.oracore.OracleNamedType).getFullName() line: 93
oracle.sql.StructDescriptor(oracle.sql.TypeDescriptor).initSQLName() line: 497
oracle.sql.StructDescriptor(oracle.sql.TypeDescriptor).getName() line: 392
oracle.sql.StructDescriptor.getClass(java.util.Map) line: 2003
oracle.sql.STRUCT.toJdbc(java.util.Map) line: 983
oracle.jdbc.driver.ArrayDataResultSet.getObject(int, java.util.Map) line: 1379
oracle.jdbc.driver.ArrayDataResultSet.getObject(int) line: 1198
test.TestOracle.showResultSet(java.sql.ResultSet) line: 53
test.TestOracle.main(java.lang.String[]) line: 38
Environment:
Database: Oracle 10g (10.2.0.3)
JDBC Drivers: version 10.2.0.3 (ojdbc14, orai18n)
Database Server: HP-UX
Client machine: Windows XP
<end of thread>

hi Thom,
most error relating to table DOKTL are caused by misconfigured network card.
if this is a "home" system, install a loopback adapter from Microsoft and use IP address 127.0.0.1 and also check "hosts" file for inconsistency. do not use the IP adddress provided by your ISP as it may change.

Error when determining a number from object BI_ODS

Error When determining a number from object BI_ODS and number 01 when flat file source system is assigned to transfer rules of infosource , when activating this error occured .
plz need solution.

Hi,
Number ranges can be maintained through the transaction SNRO. For details check:
http://help.sap.com/saphelp_nw70/helpdata/EN/2a/fa02e3493111d182b70000e829fbfe/frameset.htm
Rgds-
Sonal

Error when determining a number from object BI_TSDTEL and number 01

Hi BW Experts,
After Transporting Infosources (Master & Transaction) to BW QA, the transfer rules were not getting activated in QA. The following error message was diaplyed.
"Error when determining a number from object BI_TSDTEL and number 01
Object name can only contain characters from syntactical character set
Object name can only contain characters from syntactical character set
Data element for InfoObject KOKRS 0CO_AREA could not be created
Data element for InfoObject KOKRS 0CO_AREA could not be created
Transfer structure 0IM_FA_IQ_2_SB activated under the name 0IM_FA_IQ_2_SA
It is not necessary to copy dependent objects for transfer structure 0IM_FA_IQ_2_SA
Transfer structure 0IM_FA_IQ_2_SA does not exist
Error RSAR 440 when handling objects with type R3TR ISTS."
I have gone through the Note: 674818.
Could someone clear me about BI_TSDTEl, By using this do we need to maintain object intervals manually in all the systems like BW ( Dev & QA ), R/3 (Dev & QA).
Because I have not seen the Intervals in R/3 ( Dev & QA) systems.
please could someone provide Inputs for this.
Thanks in Advance
Regards
SK

Hi,
Try to see that transfer structure is existing in the sytem which is connecting in
the BW quality.
You need the same to be transported from the development server of R/3 to quality server of R/3.
Just check if this helps.
Regards
Rahul Bindroo

Variant "_$$audit-event-count" has not been declared in the current scope.

I migrated my bpel process manager from Version 2.1.2 [oc4j linux] to 10.1.2.0.0 [using jboss as application server].
The orabpel schema for 10.1.2.0.0 seems to be a bit different.
I installed the new schema and then dumped all the data from my previous schema. I also successfully deployed the 2.1.2 processes onto 10.1.2 version.
I can initiate a new instance of the process, however , the previously completed instances or not completed instances fail with the following error,
16:28:06,061 INFO [STDOUT] <2006-01-31 16:28:06,061> <ERROR> <default.collaxa.cube> <BaseCubeSessionBean::logError> Error while invoking bean "instance manager": Variant not found.
The variant "_$$audit-event-count" has not been declared in the current scope. All variants must be declared in the scope before being accessed.
Any advice is greatly appreciated. Thanks.

JScript is JavaScript.
Ah, now there's part of the confusion :)
If you're asking about a Windows Script Host (WSH) script, you don't have to declare stdin because it's part of the host.
Ok... So if I understand you correctly, I'm actually programming in J(ava)Script on windows for WSH. Simply trying to call ReadLine fails as well, as it is not defined according to the compiler.
Be specific: What are you trying to do? Tell what you want to do, not
how you think it needs to be done.
which brings me to my current issue: attempting to ReadLine() (in order to get the program to pause for a moment, from
this example)
I know I put up a pretty big wall of text back there, sorry about that.
EDIT: Well, I think I've learned
about J*script. It sounds like JScript and Javascript are more just versions of ECMAScript.

Question on event object

In the official flex tutorial. They called a function and
passed in the event object, but they never used that object in that
function. Why is that? I have realized several times in Day1 and
Day2 tutorials. Here is the tutorial video:
Link
Here is partial of the code:
<mx:Script>
<![CDATA[
import mx.collections.ArrayCollection;
import mx.rpc.events.ResultEvent;
[Bindable]
private var account:ArrayCollection;
private function resultHandler(event:ResultEvent):void {
employeeData = event.result.employees.employee;
]]>
</mx:Script>
<mx:HTTPService id="employeeService"
url="data/employees.xml result="resultHandler(event)" />

In the official flex tutorial. They called a function and
passed in the event object, but they never used that object in that
function. Why is that? I have realized several times in Day1 and
Day2 tutorials. Here is the tutorial video:
Link
Here is partial of the code:
<mx:Script>
<![CDATA[
import mx.collections.ArrayCollection;
import mx.rpc.events.ResultEvent;
[Bindable]
private var account:ArrayCollection;
private function resultHandler(event:ResultEvent):void {
employeeData = event.result.employees.employee;
]]>
</mx:Script>
<mx:HTTPService id="employeeService"
url="data/employees.xml result="resultHandler(event)" />

Need help on Oracle Adverse Event Reporting System

Hi,
From where I can download "Oracle Adverse Event Reporting System". Please give me the link.
I have no option, rather than postion in Database-General form.
Thanks
Naveen.

See MOS Doc 405777.1 (Oracle Adverse Event Reporting System Installation Guide 4.6)
HTH
Srini

Determining Oracle Auditing events/objects

Similar Messages

Maybe you are looking for