Audit logs for read operation on tables

I have a requirement of implementing audit logs for tables on read / select operation in addition to insert,update,delete operations. Is there any way to achieve this since triggers are present only for insert,update and delete ?
thanks in advance

Hi,
yes there are many ways you can audit the Source database according to your requirments. as you need to audit the select , insert etc you can audit in many ways
1) By implementing policies , (i.e) FGA , or statement policy on a given table or a given user.
2) you can also do the required task by implementing the alerts on specific conditions like select on a specifc table etc
you can use these utileties from AV console.
Regards.

Similar Messages

  • Audit logs for tables

    Dear all,
    I have a requirement of implementing audit logs for tables to insert,update,delete operations. Is there any way to achieve this since triggers are present only for insert,update and delete ?
    I am using database 9.2.0.3.
    thanks in advance.

    Hi,
    After I turn on audit trail on the database sever and issue DML statment. I have found nothing in the audit table.
    1) Set "audit_trial" = true in teh init.ora file
    2) Run the $ORACLE_HOME/rdbms/admin/cataudit.sql
    3) Connect sys/password by sysdba and issue the following command:
    - AUDIT SELECT TABLE, UPDATE TABLE, INSERT TABLE, DELETE TABLE BY APPS BY ACCESS;
    Do I need to re-set the database after step 1? or I have made some wrong.
    Thanks.

  • SQLException in the audit log for the Message Display Tool

    Hi
    I´m newbie in PI Technology, and i have some issues when i try to do the next.
    This is the scenario:
    I need to communicate two systems, for one side i have SAP, and for the other side i have ADI (legal system) so, i use PI to do this (the communication), PI receive the data from SAP by means abap proxy, until this everything is correct, then i do the mapping of the data and i send a message to ADI (with the SAP XI Runtime Workbench) by means JDBC adapter, if i check the sended message with "Message Display Tool" show that the message was sent (status "Delivered") but if i check the received messages option, in the audit log displays the five next errors:
    Error: Could not execute statement for table/stored proc. "FADIA4" (structure "StatementFADIA4") due to java.sql.SQLException: FADIA4 in FILEMET not valid for operation.
    Error: JDBC Message processing failed, due to Error processing request in sax parser: Error when executing statement for table/stored proc. 'FADIA4' (structure 'StatementFADIA4'): java.sql.SQLException: FADIA4 in FILEMET not valid for operation.
    Error: MP: exception caught with cause com.sap.engine.interfaces.messaging.api.exception.MessagingException: Error processing request in sax parser: Error when executing statement for table/stored proc. 'FADIA4' (structure 'StatementFADIA4'): java.sql.SQLException: FADIA4 in FILEMET not valid for operation.
    Error: Adapter Framework caught exception: null
    Error: Delivering the message to the application using connection JDBC_http://sap.com/xi/XI/System failed, due to: com.sap.engine.interfaces.messaging.api.exception.MessagingException: Error processing request in sax parser: Error when executing statement for table/stored proc. 'FADIA4' (structure 'StatementFADIA4'): java.sql.SQLException: FADIA4 in FILEMET not valid for operation..
    if there are somebody that maybe could know what is the problem?, could the problem be the side of the legal system?, because inside of PI when i do the Test Configuration in the Integration Directory, the end of the test is successful.
    Any comment is well received!!
    Thanks,
    Vicman
    P.D. sometimes the error is: java.sql.SQLException: Token ) was not valid. Valid tokens: DAY PATH YEAR LABEL MONTH OPTION RESULT CONNECTION TRANSACTION.
    what does it means?

    Hi Pooja,
    thanks for you quickly response!
    XML sended:
    <?xml version="1.0" encoding="UTF-8"?>
    <ns0:MT_PgDocVentaECC_req xmlns:ns0="http://gmodelo.com/ECC/enviarCobranza">
       <DT_DatosDeControl>
          <MIDDLEWARE_ID/>
          <QUICK_ID/>
          <INTERFACE_NAME/>
          <MESSAGE_ID/>
          <LOG_ID/>
          <USER_ID/>
          <SOURCE_SYSTEM/>
          <TARGET_SYSTEM/>
       </DT_DatosDeControl>
       <DT_PagoDocVentaECC>
          <VKORG>TVKO</VKORG>
          <VKBUR>TVBUR</VKBUR>
          <VKBUR1>TVBUR</VKBUR1>
          <ROUTE>TVRO</ROUTE>
          <ROUTE1>TVRO</ROUTE1>
          <BLART>Q</BLART>
          <BELNR>100</BELNR>
          <WRBTR>200</WRBTR>
          <LFART>100</LFART>
          <VBELN>100</VBELN>
       </DT_PagoDocVentaECC>
    </ns0:MT_PgDocVentaECC_req>
    this is the XML received:
    <?xml version="1.0" encoding="UTF-8"?>
    <ns1:MT_PgDocVentaADI_req xmlns:ns1="http://gmodelo.com/ADI/recibirCobranza">
    <StatementFADIA7>
    <FADIA7action="INSERT">
    <Table>FADIA7</Table>
    <Access>
    <NUMCIA>123</NUMCIA>
    <NUMALM>234</NUMALM>
    <SUBALM>300</SUBALM>
    <CVETOP>16</CVETOP>
    <FOLOPV>22</FOLOPV>
    <SECOVA></SECOVA>
    <IMPOVA>200</IMPOVA>
    <ALMOVA>5678</ALMOVA>
    <SUBOVA>21</SUBOVA>
    <TOPOVA>21</TOPOVA>
    <FOPOVA>41</FOPOVA>
    <FECOVA>100</FECOVA>
    <STSOVA> </STSOVA>
    </Access>
    </FADIA7></StatementFADIA7>
    </ns1:MT_PgDocVentaADI_req>
    what do you think about it?, anything wrong?

  • Unable to get Audit logs for Data Mining Model Oracle11g

    Hi All, I followed all the steps given below 2 links but not getting any audit logs.
    http://download.oracle.com/docs/cd/B28359_01/datamine.111/b28130/install_odm.htm#DMADM024
    http://download.oracle.com/docs/cd/B28359_01/datamine.111/b28130/schemaobjs.htm#sthref233
    Made sure the audit_trail is set to DB.
    SQL cmds and its output shown below
    SQL> AUDIT GRANT,AUDIT,COMMENT,RENAME,SELECT ON mining model NB_SH_Clas_sample;
    Audit succeeded.
    SQL> COMMENT ON MINING MODEL NB_SH_Clas_sample IS 'i am here';
    COMMENT ON MINING MODEL NB_SH_Clas_sample IS 'i am here'
    ERROR at line 1:
    ORA-03113: end-of-file on communication channel
    Process ID: 31648
    Session ID: 135 Serial number: 114
    SQL> quit
    Please help me if i have left out any step
    Thanks in Advance

    Hi.
    Please take a look at the other concurrent thread on model object auditing for more detailed information. If you have Oracle support, please file a TAR with Metalink (http://metalink.oracle.com).
    Regards, Peter.

  • Logging for SmartView operation

    When I retrieve HFM data with SmartView on Excel spreadsheet, is there any log recording when the data retrieval begins and completed?

    hi
    i'd tru auditing tasks
    find the information about auditing tasks bellow
    Auditing Tasks
    You can use the Task Audit feature to view the tasks performed by users. You can filter audited tasks by date range, application server, user, and task performed.
    Note:
    Only users assigned the Administrator role can perform a task audit.
    These user activities are logged in the task audit:
    Idle
    Rules Load
    Rules Scan
    Rules Extract
    Consolidation
    Chart Logic
    Translation
    Custom Logic
    Allocate
    Data Load
    Data Extract
    Data Extract via HAL
    Data Entry
    Data Retrieval
    Data Clear
    Data Copy
    Journal Entry
    Journal Retrieval
    Journal Posting
    Journal Unposting
    Journal Template Entry
    Metadata Load
    Metadata Extract
    Member List Load
    Member List Scan
    Member List Extract
    Security Load
    Security Scan
    Security Extract
    Logon
    Logon Failure
    Logoff
    External
    Metadata Scan
    Data Scan
    Extended Analytics Export
    Extended Analytics Schema Delete
    Transactions Load
    Transactions Extract
    Document Attachments
    Document Detachments
    Create Transactions
    Edit Transactions
    Delete Transactions
    Post Transactions
    Unpost Transactions
    Delete Invalid Records
    Data Audit Purged
    Task Audit Purged
    Post All Transactions
    Unpost All Transactions
    Delete All Transactions
    Unmatch All Transactions
    AutoMatch by ID
    AutoMatch by Account
    IC Matching Report by ID
    IC Matching Report by Acct
    IC Transaction Report
    The task audit log includes this information:
    Username
    Activity performed
    Activity start time
    Activity end time
    Server name
    Description
    Current module
    Note:
    The Task Audit feature is available only in the Financial Management Web user interface.
    The task audit log information is stored in a table (APPNAME_TASK_AUDIT). You can back up or extract the information in the table. You should monitor the log size and clear it on a regular basis.
    To perform a task audit:
    Select Administration, then Task Audit.
    Note:
    You must have an application open for the Task Audit link to be available.
    Optional: You can filter the audit by selecting criteria:
    Enter a start date and an end date.
    Tip:
    Click to select dates from a pop-up calendar.
    From the Server Selection list, select a server, or select All.
    From the User Selection list, select the user to audit, or select All to audit all users.
    From the Task Filter list, select the task to audit, or select All to audit all tasks.
    Click View.
    The tasks that meet the filtering criteria are displayed. Tasks are sorted from most recent to least recent, as shown in this example.
    Optional: To export the audit information to a CSV file, click Export, and follow the download instructions.
    Optional: To delete the entries from the log, click Clear Log to delete the entries from the log.
    Note:
    When you clear the log, a record of the clear remains in the log and cannot be erased.
    regards
    alex

  • Failed to save admin audit log for this cmdlet invocation.

    HI, I have a co-existence of exchange 2010 and 2013SP1. We are in the process of user mailbox migration from old to new exchange. When we try to configure auditing we get the below message
    [PS] C:\Windows\system32>Set-AdminAuditLogConfig -AdminAuditLogEnabled $True
    WARNING: The arbitration mailbox 'SystemMailbox{e0dc1c29-89c3-4034-b678-e6c29d823ed9}' for the organization '' is
    located on a server that doesn't have Exchange 2013  installed. The arbitration mailbox must be moved to an Exchange
    2013 server before you can enable auditing.
    WARNING: The command completed successfully but no settings of 'Admin Audit Log Settings' have been modified.
    However as per below arbitration and system mailbox are already moved to new exchange.
    [PS] C:\Windows\system32>Get-Mailbox -Arbitration | FL Name,DisplayName,ServerName,Database,AdminDisplayVersion
    Name                : SystemMailbox{1f05a927-0bf4-475d-b944-392523e3cf54}
    DisplayName         : Microsoft Exchange Approval Assistant
    ServerName          : auh2mbx02
    Database            : EXHDB01
    AdminDisplayVersion : Version 15.0 (Build 847.32)
    Name                :
    SystemMailbox{e0dc1c29-89c3-4034-b678-e6c29d823ed9}
    DisplayName         : Microsoft Exchange
    ServerName          : auh2mbx02
    Database            : EXHDB01
    AdminDisplayVersion : Version 15.0 (Build 847.32)
    Name                : FederatedEmail.4c1f4d8b-8179-4148-93bf-00a95fa1e042
    DisplayName         : Microsoft Exchange Federation Mailbox
    ServerName          : auh2mbx02
    Database            : EXHDB01
    AdminDisplayVersion : Version 15.0 (Build 847.32)
    Name                : SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}
    DisplayName         : Microsoft Exchange
    ServerName          : auh2mbx02
    Database            : EXHDB01
    AdminDisplayVersion : Version 15.0 (Build 847.32)
    Name                : Migration.8f3e7716-2011-43e4-96b1-aba62d229136
    DisplayName         : Microsoft Exchange Migration
    ServerName          : auh2mbx02
    Database            : EXHDB01
    AdminDisplayVersion : Version 15.0 (Build 847.32)
    How can we fix this??

    Try running
    setup.exe /PrepareAD /IAcceptExchangeServerLicenseTerms
    from the Exchange 2013 distribution again.
    If that doesn't fix it, delete the mailbox database and run the setup command again.
    Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

  • Audit log for document library

    Hi All,
    I have a requirement to generate a report for a document library which contains confidential “Policies”
     documents, this library exist under sub site. Now my clients wants a log report, which should give information like Who accessed/download/modified document?
    Please guide me
    MercuryMan

    You need to first enable menu audit log reports SharePoint 2010. Please follow the given below steps.
    1. Site Action > site settings
    2. Site collection features
    3.Click on the reporting  features
    4.Search for the Reporting feature 
    4.Click on Activate button
    Otherwise, you could try automate solution named Lepide Auditor for SharePoint (http://www.lepide.com/lepideauditor/sharepoint.html) which assists to generate  report and and provides the
    auditing data into real time. It gets real time alerts on detecting changes to users, groups, lists, libraries, folder and permission etc.
    Lepide - Simplifying IT Management

  • Security Audit Log for XI IB

    Hello,
    on the ABAP Stack it is possible to activate the security audit log, to log activities on certain objects/functions. Is there also a possibilty to do this for the JAVA-Stack.
    We have for legal reasons to log, want users are doing on the productive XI system. E.g. we wanna log if someone is changing the value mapping or configurating the adapter.
    Regards, Werner

    Hi,
    chk out these links
    Audit Log
    http://help.sap.com/saphelp_me21sp2/helpdata/en/23/c9833b3bb1780fe10000000a11402f/content.htm
    regards
    jithesh

  • Security audit log for the last 30 days?

    Hi,
    My current settings for the security audit log is 20 MB (by default).  I dont want to control it with file size limitation, but by the no. of days the audit is recorded (max 30 days).
    What are the parameters that I would need to maintain?
    Or any additinal config is required?
    Thanks,
    Abdul

    Hi,
    My current configuration is like this:
    Name                Description                                           Current value                                            System default value
    FN_AUDIT     Name of security audit file          audit_++++++++
    DIR_AUDIT     Directory for security audit files     /usr/sap/GSP/DVEBMGS00/log     /usr/sap/GSP/D00/log
    rsau/enable     Enable Security Audit          0
    rsau/max_diskspace/local     Maximum space for security audit file     300M     20M
    rsau/max_diskspace/per_day     Maximum size of all security audit files per day          0
    rsau/max_diskspace/per_file     Maximum size of one single security audit file          0
    rsau/selection_slots     Number of selection slots for security audit          2
    rsau/user_selection     Defines the user selection method used inside kernel functions          0
    I have just activated the audit, and in just 30 minutes, I can see that the file is about 45MB.  If this is the growth rate, the 300MB allocated for audit will completely used in just a day.
    My requirement is - I want to track users and their activities for the last 30 days (or 45 days).  No log should be overwritten unless it is atleast 30 days old.
    In SM20, when I give selection from 1.1.10 to 31.1.10, it should show me all the activities during this period, without any breaks.
    Other doubts: Do I have to start auditing manually every day?  Or will it keep writing logs until it reaches 300 MB which can spread upto multiple days.
    Regards
    Abdul
    Edited by: Abdul Rahim Shaik on Feb 4, 2010 11:17 AM

  • Audit Logs for Administrators

    Hello
    How can we audit the Site Administrators or Farm admins when changing site Settings or enabling Features on the web applications or Site Collection level? the Site Collection Audit Logs Does Not
    Yasser

    Hi,
    There isn’t anything like site collection auditing for administrative events like feature activations etc. This info will however be in the ULS if the logging level is set high enough. Obviously there are downsides of a high logging level - lots
    of noise in the logs, logging location will get filled up quickly.
    Cheers
    Matt

  • Minimum timeout for read operation in PCI-6052E.

    Hi,
    I am running an application at 600Hz where I must read data from a deice using the PCI-6052E. Running at 600Hz, i.e Ts=1/600 second, my read timeout in the DAQmxReadAnalogF64 function must be < Ts. Although, the application starts fine after few reading cycles, the application crashes  with a DAQmx error:
    "DAQmx Error: Measurements: Specified operation did not complete, because the specified timeout expired.".
    knowing that the PCI-6052E can operate at 1Khz rate, taht is T=0.001, I find it wired that it is crashing for timeout I am using Tout=0.7*Ts whic is > than T. 
    What is the minimum timeout required?
    Thanks.
    Elias
    "A man can succeed at almost anything for which he has unlimited enthusiasm."

    Hi,
    Timeout specifies the amount of time in seconds to wait for
    samples to become available. If the time elapses, the VI returns an error and
    any samples read before the timeout elapsed. The default timeout is 10 seconds.
    If you set timeout to -1, the VI waits indefinitely. If you set timeout to 0,
    the VI tries once to read the requested samples and returns an error if it is
    unable to.
    By available we refer to the data that has been acquire by
    the card and placed into the buffer. You are doing a on sample at a time and
    that you are not using the onboard clock. Since you are not using the onboard
    clock you don’t have determinism on the rate at which you acquire the samples. “I
    think by default the 6052E clock is 1KHz”, incorrect if you select your timing
    as on “sample on demand” the rate is controlled by your “timed loop” but since
    you are not in a Real Time OS you don’t control the rate of the loop, at least
    at very high rates, you may run the first couple of iteration at one speed, then something happens on your PC and you CPU load increases, changing the rate of the while loop.
    You have two options to set the rate you can do a software
    timed operation (i.e. like you are doing right now), but it will be depended on
    your OS and your CPU load or you can do a hardware acquisition where an onboard
    clock controls the rate of the acquisition.
    “I do not expect this to happen especially that the
    PCI-6052E device used in doing the reading operation can run up to 1 KHz. I am
    not sure what the problem is.” The problem here is that is not the 6025e not
    been able to keep up is your computer. Look at the examples in: C:\Documents
    and Settings\All Users\Documents\National Instruments\NI-DAQ\Examples\DAQmx
    ANSI C\Analog In\Measure Voltage\ and let me know if they help.
    You can post your code and I will lok at it if you want
    I hope it helps
    Jaime Hoffiz
    National Instruments
    Product Expert
    Digital Multimeters and LCR Meters

  • Audit Log for HRP Infotypes

    Hi,
    Just like PCL4 for PA Infotypes, do we have a mechanism to check the changes done to HRP Infotypes?
    Thanks,
    Suryakiran

    Pl check this <a href="http://help.sap.com/saphelp_erp2005vp/helpdata/en/db/7a2a40ce93185de10000000a1550b0/frameset.htm">SAP Help</a> on maintaining log for PD infotypes..
    ~Suresh

  • How to save change log for a particular standard table in ZTABLE

    Hi Experts,
    Wouldlike to make one ztable in R3 which should  record changes made( say particualr field)  in standard SAP DB table ( say TXPDAT). I  think that there has to beway to do it.
    Could you please share the way to achieve it?
    Will appreciate a quick reply.
    Thank you
    Best Regards

    Hi,
    or else do like this...
    In order to maintain the log changes the main pre reuisite is to checkmark the checkbox in dataelement of table filed.
    To do this...
    goto transaction SE11>enter ur table name>cleck on fields tab>cleick on dataelement->click on Furthercharacterstics tab-->select the checkbox'Change Document'.
    If u dont select dis the u cannot see the log entry of the particuylar field..Do like this for each dataelement for each table field...selecting all the fields is not mandatory..u can choose the table field u want to see the log report..
    Once u done with dat...
    Goto SCDO transaction> click on create>give a name change doc startwith Z or Y only>Follow the prodedure and in-->name of table field>enter u r TABLE NAME->click on individual field checkbox.--->insertentries..
    Once u done with dis..
    Goto SE16->enter CHDIR or CDPOS->press ENTER->enter u r object id>F8
    U can see the new and old value of a table entry.....

  • Oracle Migration Tool giving Access denied error for Read operation

    Hi;
    Oracle Migration tool is giving access denied error when we are trying to Read a record for Access Profiles.
    We are getting (SBL-ODS-50085) error.This is happening only for few records(Access Profiles).
    Although the user role is administrator having full access and privilege (Manage User and Access checked).
    Pl. help me resolve the issue.
    Thanks!

    Hi,
    Does it happen when you try to read "any" Access Profile?
    If yes, please have a look at the
    "Admin: Users and Access Controls - Manage Users and Access - Manage Users and establish User Quotas. Define Access Profiles, Roles and Groups to manage data access controls." privilege in the role of the user you use for migration.
    In order to avoid any problem, I usually create a "Migration" role temporarily and assign this role ALL the privileges to avoid such failures at the time of export.
    Hope this helps,
    Best regards,
    Charles DUBANT.
    http://www.dubant.com/

  • Audit Log for user

    Hi,
    Is there a way we can trace the activity or the Transaction Codes accessed by a user? We want to trace on a past date (ie June transactions).
    Thank you and best regards.
    Rachelle

    Hi Rachelle,
    You probably posted on a wrong forum.  Are you using SAP Business One ? If not, please close your thread.
    Thanks,
    Gordon

Maybe you are looking for