Auditing DML actions on multiple databases

I am using Oracle 10g Database on Solaris .
I need to audit the complete DML statement issued on a table which exists in multiple schemas(same name with different data from other schemas) in multiple databases ie Consider the table ito be audited is "TAB_A" . This table exists in multiple schemas "USER_A", "USER_B" but as said before only the name remains the same but data is different so they are two different tables. Also there are many databases "DB_A" , "DB_B" which have that table .
There is a master database which collects information from all these databases through database links . Now this database has a table which gets updated with a username, schema name and database name once a new user is created on the databases DB_A and DB_B . So is there any way I can use this info and automate the auditing so that the DBMS_FGA.ADD_POLICY procedure gets fired when a new user say USER_C is created ? This will not involve any manual involvement in running DBMS_FGA.ADD_POLICY procedure for USER_C.TAB_A

auditing will be enabled on a specific table which exists in some schemas eg : TAB_A . So the table name along with schema name would be USER_A.TAB_A and USER_B.TAB_A . think so now it is clear
now the master database contains information about the username , database name . so from this information I should create dbms_fga policy on each database . The table name is constant so it shouldn't be a problem . The point is if a new user is created in any of the databases the policy should be automatically created from the master database without any manual interruption.
This is what i am trying to do ... let me know if this is possible ?

Similar Messages

Can we have multiple database audit specification on a single server audit ?

Hi,
We are having a 2 node Sql Clustered instance of SqlServer 2008 R2 Enterprise running
on windows server 2008 R2. We have about 88 databases in the instance.
Our servers run on Intel Xeon(R) CPU X5670 @2.94 GHz with 6 cores(12 logical processor).
The servers are having 12GB of RAM.
We are planning to introduce database level audit to find if there is any activity on
some of our databases. These databases are not growing in size and there is a request
from the application team to ascertain whether the endusers are accessing the database
over a period of time. In this context I have 2 queries-:
1)Can we have multiple database audit specification on a single server audit ie can we
audit multiple databases to find out the user activity on those databases at a time? Or
should we a separate server audit for each database audit specification?
2)We plan to have the target of the audit on a file on the same shared volume(lun) where
the MDF file and LDF files are located(in EMC storage) and in this context what performance
monitor counters should we watch to ascertain whether there is any performance degradation
due to introduction of server audit.
Thanking you in advance
Binny Mathew.

As Auditn is at the SQL Server instance level. You can have multiple audits per SQL Server instance.
http://msdn.microsoft.com/en-us/library/cc280386.aspx
Database Audit Specification
The Database Audit Specification object also belongs to a SQL Server audit. You can create one database audit specification per SQL Server database per audit.
The database audit specification collects database-level audit actions raised by the Extended Events feature. You can add either audit action groups or audit events to a database audit specification. Audit events are
the atomic actions that can be audited by the SQL Server engine. Audit action groups are predefined groups of actions. Both are at the SQL Server database scope. These actions are sent to the audit, which records
them in the target. Do not include server-scoped objects, such as the system views, in a user database audit specification.
Database-level audit action groups and audit actions are described in the topic SQL Server Audit Action Groups and Actions.
You can also consider using a Profiler trace file to capture the events.
Best Regards,Uri Dimant SQL Server MVP,
http://sqlblog.com/blogs/uri_dimant/
MS SQL optimization: MS SQL Development and Optimization
MS SQL Consulting:
Large scale of database and data cleansing
Remote DBA Services:
Improves MS SQL Database Performance
SQL Server Integration Services:
Business Intelligence

How to monitor DML acticity in a database

Besides logminer and fine grain auditing; is there any other functionality in oracle that can be use to capture DML activities for a given table in a given time? What I am trying to accomplish is to create a matrix on daily basis of all the DML operation that occured in my database (for a given schema).
Thank you.

Hi Nigel,
capture DML activities for a given table in a given time?I use DML triggers:
http://www.dba-oracle.com/art_builder_proper_oracle_design_for_auditing.htm
Enabling auditing options may not always be sufficient to evaluate suspicious activity within your database. When you enable auditing, Oracle places records in the SYS.AUD$ table in accordance with the auditing options that you have specified. One limitation to this type of auditing is that SYS.AUD$ does not provide you with value-based information. You need to write triggers to record the before and after values on a per-row basis.
Auditing with Oracle supports DML and DDL statements on objects and structures. Triggers support DML statements issued against objects, and can be used to record the actual values before and after the statement.
In some facilities, audit commands are considered security audit utilities, while triggers are referred to as financial auditing. This is because triggers can provide a method to track actual changes to values in a table. Although, similar to the AUDIT command, you can use triggers to record information, you should customize your auditing by using triggers only when you need more detailed audit information.
AFTER triggers are normally used to avoid unnecessary statement generation for actions that fail due to integrity constraints. AFTER triggers are executed only after all integrity constraints have been checked. AFTER ROW triggers provide value-based auditing for each row of the tables and support the use of “reason codes.” A reason for the statement or transaction, along with the user, sysdate, and old and new values, can be inserted into another table for auditing purposes.
Oracle auditing can be used for successful and unsuccessful actions, as well as connections, disconnections, and session I/O activities. With auditing, you can decide if the actions should be BY ACCESS or BY SESSION. Triggers can only audit successful actions against the table on which they are created. If auditing is being performed using a trigger, any rollback or unsuccessful action will not be recorded.
Auditing provides an easy, error-free method to tracking, with all the audit records stored in one place. Triggers are more difficult to create and maintain.
You can also use the standard "audit" functionality to audit DML:
http://www.dba-oracle.com/t_audit_table_command.htm
Hope this helps . . .
Donald K. Burleson
Oracle Press author
Author of "Oracle Tuning: The Definitive Reference"
http://www.rampant-books.com/book_2005_1_awr_proactive_tuning.htm

Application that connects to multiple databases.

I am developing an application that performs many task, but one in particular is connecting to multiple databases and creating user accounts in each all with the push of a single button. I have tried putting connect statements in the trigger code but I don't get the desired results.
How would I get my application to switch database connections while in execution?
Please reply to the forum, or email me @ [email protected]
Thank you.
Travis

Hi
The only possible way which I could find for your requirement is that of DB Links. Establish DataBase Links among the multible databases, with which you want to work in one session. Peform all your actions through the DB Links.

Multiple Database Updates

Hi
In development environment I have many branches(copies) of a database.
For every change (ddl, dml) i have to login every database manually to execute statements, Is there a client tool that support multiple database update or if any expert ever make a customized routine for that?
And ideally as i have different named branches i wish i can define the scope of change too i.e. change execute on databases of "abc" & "pqr" branches only.
Wishes

If I understand correctly what you want to do, is the purpose to do some task or run some script in multiple databases on the same server?
If so, this is done easily by listing the database (sids) in a file and reading the file in a loop statement.
In my case, I simply create a file on the server called localsids. I keep this in /var/opt/oracle directory.
Then, in my script, I set:
SIDFILE='/var/opt/oracle/localsids'
NEWPASS=`cat $HOME/.xlh/sys`
# This loop reads through the 'sidlist' and then looks for a password
# stored in a separate directory for each sid, but if individual
# directories do not exist, then it uses the standard system password.
# It then opens a sqlplus session for each sid (as it loops through the
# sidfile and executes some sql statement(s), or executes a sql script.
cat $SIDFILE | while read SID
do
ORACLE_SID=$SID
export ORACLE_SID
echo $SID # this is only for my own verbose purposes
sqlplus -s system/manager@$SID <<EOF > /tmp/chg_passwd_${SID}.sql
alter user system identified by $NEWPASS
alter user sys identified by $NEWPASS
EOF
done
exit
# In the above example, i am changing the sys and system passwords for all databases listed in the localsids file.
Hope this helps...
ji li
Message was edited by: ji li to simplify the example...
I have simplified the above example to hardcode the system password into this script, however, normally I would never do this in real practice. This is just as an example to simplify how to run a loop to run a common script or sql statement in each database.

[ask] Multiple database for a user

Hi,
pardon for my very basic question since i'm new in database world. Currently I've been playing with XE and I cannot find a complete documentation on the subject, therefore I venture myself to ask some basic tasks of XE, such as:
1. Can a user have multiple database (or schema) or only 1?
2. If it can have multiple database, how can them be viewed?
3. How can I delete one of them if no 1 is true?
4. How can I delete a table?
5. Where can I find a thorough documentation on XE besides tutorial?
Best Regards,
Joe

user11357901 wrote:
Hi,
pardon for my very basic question since i'm new in database world. Currently I've been playing with XE and I cannot find a complete documentation on the subject, therefore I venture myself to ask some basic tasks of XE, such as:
1. Can a user have multiple database (or schema) or only 1?User infact IS a schema , and so schema IS user. They don't own the database;they belong to only one database,although they could
perform some actions on other databases
2. If it can have multiple database, how can them be viewed?You can access objects on remote database B with the user from database A by using database links
3. How can I delete one of them if no 1 is true?N/A
4. How can I delete a table?If using SQL, then DROP command is the one you want. DELETE command is used to delete row/s from a table, not to delete table
5. Where can I find a thorough documentation on XE besides tutorial?oracle.tahiti.com would be the best choice
>
Best Regards,cheers

Multiple database members in a single Grid Row

Hi All,
I have created an FR report (9.3x) and getting the below error while trying to run the report via Web Preview.
5217: Error Processing Results;hasPovDims=1;povXML=<?xml version="1.0"?><datasources><datasource name="FIN QA" dsid="-117fcde3_132fd17f2f6_-771b" allowEdit="1"><dim name="Versions" dimIndex="0" dsName="FIN QA" keyDimName="Versions" memberName="Versions" displayName="Versions: Versions"/><dim name="Scenarios" dimIndex="4" dsName="FIN QA" keyDimName="Scenarios" memberName="Scenarios" displayName="Scenarios: Scenarios"/><dim name="Components" dimIndex="5" dsName="FIN QA" keyDimName="Components" memberName="Components" displayName="Components: Components"/><dim name="Customers" dimIndex="6" dsName="FIN QA" keyDimName="Customers" memberName="Customers" displayName="Customers: Customers"/><dim name="Assets" dimIndex="7" dsName="FIN QA" keyDimName="Assets" memberName="Assets" displayName="Assets: Assets"/></datasource><datasource name="FINDEF QA" dsid="-607fb334_128b79d246e_-7d0a" allowEdit="1"><dim name="Time Periods" dimIndex="1" dsName="FINDEF QA" keyDimName="Time Periods" memberName="Time Periods" displayName="Time Periods: Time Periods"/><dim name="Scenario" dimIndex="3" dsName="FINDEF QA" keyDimName="Scenario" memberName="SC_Actual" displayName="Scenario: SC_Actual"/><dim name="Versions" dimIndex="4" dsName="FINDEF QA" keyDimName="Versions" memberName="VR_Input_Version" displayName="Versions: VR_Input_Version"/><dim name="Customers_Region" dimIndex="6" dsName="FINDEF QA" keyDimName="Customers_Region" memberName="CU_NA" displayName="Customers_Region: CU_NA"/><dim name="Assets" dimIndex="7" dsName="FINDEF QA" keyDimName="Assets" memberName="Assets_NA" displayName="Assets: Assets_NA"/></datasource></datasources>
In my report I have selected 2 rows where I have selected @descendants of ccounts from one database which is FIN QA and in the second row I have selected @children of Accounts from another database which is FINDEF QA. I am using only ONE GRID here.
Is it not possibe to run a FR report by select members from multiple databases in a single grid??
Please have your valuable inputs.

Yes it possible to retrive data from multiple database using single grid.
Also there are few limitations namely:
Database connections must be of the same type (for example, both must be Essbase database connections or both must be Financial Management database connections).
Mismatched number of dimensions in the database connections may cause retrieval errors.
For more details refer to this link for details:-
http://www.oracle.com/technetwork/middleware/financial-management/tutorials/obe-multipledbs-086586.html
Cheers
Vikas Naidu

Use 1 listener for multiple database in a server

hi guys,
just want to check whether this is the right way to configure my Listener.ORA . I am using 1 listener.ora to listen for incoming request connection from remote client. There are multiple databases installed in a server.
LISTENER =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = ora03)(PORT = 1521))
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(GLOBAL_DBNAME = O11R2)
(ORACLE_HOME = /oracle/app/oracle/product/11.2.0/db_1)
(SID_NAME = O11R2)
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(GLOBAL_DBNAME = O10G)
(ORACLE_HOME = /oracle/app/oracle/product/10.2.0/db_1)
(SID_NAME = O10G)
)sorry i am reading about it so did not install another database to test out. Just thinking in the line that it mention that the list of SID is refering to the multiple database that is installed in a server and i am using 1 listener.
Please further advice.

Shivananda Rao wrote:
LISTENER =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = ora03)(PORT = 1521))
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(GLOBAL_DBNAME = O11R2)
(ORACLE_HOME = /oracle/app/oracle/product/11.2.0/db_1)
(SID_NAME = O11R2)
(SID_DESC =
(GLOBAL_DBNAME = O10G)
(ORACLE_HOME = /oracle/app/oracle/product/10.2.0/db_1)
(SID_NAME = O10G)
)Please use as above. You can have one listener for multiple databases.right right so it the pattern goes like this:
SID_LIST_LISTENER =
     (SID_LIST =
          (SID_DESC =
          (GLOBAL_DBNAME = AAAA)
          (ORACLE_HOME = /oracle/app/oracle/product/11.2.0/db_1)
          (SID_NAME = AAAA)
          (SID_DESC =
          (GLOBAL_DBNAME = BBBB)
          (ORACLE_HOME = /oracle/app/oracle/product/10.2.0/db_1)
          (SID_NAME = BBBB)
     )thanks !

Multiple databases in one file: a small snafu

Hello everyone,
Opening multiple databases in a single file is an administrative convenience. It is well explained in the manual (see db/docs/ref/am/opensub.html). Normally, there is little difference between databases in their own physical files or grouped together in a single physical file. There is one small sentence in the manual that says the following:
(begin fragment)
However, since multiple databases in a file exist in a single physical file, opening two databases in the same file simultaneously requires locking be enabled unless all of the handles are read-only. As the locks for the two databases can only conflict during page allocation, this additional locking is unlikely to affect performance.
(end fragment).
I didn't pay attention to it, except the "unlikely to affect performance" part which told me that I wasn't to worry about it. The sun was shining. Life was good.
And I was wrong. It was one of those "epic bug quests" I had to embark on, only to realise that it may not be a BDB bug, but my carelessnes. Nevertheless, I'm left with an uneasy feeling which I would like to explain here.
Consider BDB configured as a concurrent data store.
There are 2 threads. The first thread has the following pseudocode:
cursor1 = db1->cursor(...)
while(cursor1->c_get(... DB_NEXT...))
// 1
cursor2 = db2->cursor(...)
while(cursor2->c_get(... DB_NEXT...))
The second thread does only the following:
db3->put(...)
db1, db2 and db3 are all distinct databases. All cursors are read-only (the cursor implicitly used in db3->put is of course a write cursor).
While the first thread is running, the second thread executes db3->put(...) at "//1".
Question: what happens?
Answer 1: if db1, db2 and db3 reside in different physical files, nothing special happens. Everything proceeds as it should.
Answer 2: if db1, db2 and db3 reside in the same physical file, both threads block "sometimes".
The "sometimes" used here means "when the put operation in thread 2 needs to allocate a new page".
Reading the BDB source code is extraordinarily difficult (which says more about my limitations than about the clarity of the code) but here is what happens, as far as I could determine:
(thread 1) cursor1 needs and acquires a read lock on db1
(thread 2) db3->put needs a write lock on db2 to allocate a new page. Since db2 is in the same physical file as db1 and thread 1 already has a read lock, thread 2 waits until the read lock is released. Thread 2 blocks.
(thread 1) cursor 2 needs a read lock on db3. For some reason, BDB detects that the another thread is waiting for a write lock on the physical file, and thread 1 blocks.
Both threads block waiting on each other to complete.
I suppose the system is the way it is to avoid starvation, but there you have it: be careful when you're lumping together multiple databases in one file!
Anyone who can clarify or confirm this is welcome.
Vincent

I had experienced a similar problem. I run multiple process. Each one of them starts a transaction that does db->put and db->pget to its own database (which also has a secondary index). When each database is in a separate physical file there is no problem but when I put all databases in a single file the processes start to dead-lock.
The following combination of options solved the deadlocking problem:
- use serializable isolation level instead of snapshot, i.e. do not pass DB_TXN_SNAPSHOT to txn_begin
- do not pass the DB_NO_WAIT option to txn_begin
- use Btree instead of a Hash
Hope that helps.

Can you have multiple databases on the same LUN in Exchange 2010?

I'm sure you can but is it possible with exchange 2010 to have multiple databases on the same LUN. We currently have 8 DB's all writing to their own DB drive and separate log drive so 16 drives in total. I need to spin a new DB up this week and
wanted to double check this is possible. I've looked online and cant find anything that I've seen before that says this is possible.
Thanks.

Hi,
Yes, multiple databases could be placed on the same LUN, but it's not recommended.
If you have 2 drives fail at the same time (it happens more than you think), then losing 100% of your DBs is a lot worse than losing one of them or some of them depending on where the failures are.
Here is a similar thread for your reference:
Multiple databases on the same LUN in Exchange 2010
Hope this helps!
Thanks.
Niko Cheng
TechNet Community Support

How to access multiple database present in single instance

Hi Team,
In oracle 11.2, can there be multiple databases in an instance??? In one of our environment, I could see multiple databases in an instance. Could you please help me in giving the data dictionary or query to access those databases?
Actually, querying v$database, I could see only one database which is same as instance name. But in inventory, there are multiple database in an instance?
I am still not exactly clear about this. Can someone help me with this?
Thanks!
Vidhya

In Oracle one instance manages one (1) database. A database consists of multiple *schemas*.
Other vendors erroneously call a schema 'database'.
So, no, you didn't see multiple databases.
There is also one datadictionary, consisting of a set of views.
All views beginning with dba_ list the entire database, all schemas.
All views beginning with all_ list the objects you have access to.
All views beginning with user_ list your own objects.
The view DICT show you the contents of the datadictionary.
Oracle also has online documentation at http://docs.oracle.com
From your question it is clear you should read the document called the 'Oracle Concepts Manual'.
You can find all documentation for 11gR2 here Oracle Database Online Documentation 11g Release 2 (11.2)
Too many people here don't make any effort to read it. This is probably the reason why you got no response.
Sybrand Bakker
Senior Oracle DBA

TDE Wallets & Multiple Databases on same Host

The Oracle TDE Best Practices (doc ID 130696) states this:
Multiple databases on the same host
If there are multiple Oracle Databases installed on the same server, they
must access their own individual TDE wallet. Sharing the same wallet between independent instances is not supported
and can potentially lead to the loss of encrypted data.
If the databases share the same ORACLE_HOME, they also share the same
sqlnet.ora file in $TNS_ADMIN . In order to access their individual wallet, the
DIRECTORY entry for the ENCRYPTION_WALLET_LOCATION
needs to point each database to its own wallet location:
DIRECTORY= /etc/ORACLE/WALLETS/$ORACLE_UNQNAME
The names of the subdirectories under /etc/ORACLE/WALLETS/ reflect
the ORACLE_UNQNAME names of the individual databases.
If the databases do not share the same ORACLE_HOME, they will also have their individual sqlnet.ora
files that have to point to the individual subdirectories.
What is the correct sqlnet.ora syntax to do this? I currently have what is below but it doesn't seem to be correct:
ENCRYPTION_WALLET_LOCATION =
(SOURCE = (METHOD = FILE)
(METHOD_DATA =
(DIRECTORY = /local/oracle/admin/wallet/DB#1)
(DIRECTORY = /local/oracle/admin/wallet/DB#2)

Hi,
You can check this :Setting ENCRYPTION_WALLET_LOCATION For Wallets Of Multiple Instances Sharing The Same Oracle Home (Doc ID 1504783.1)
i haven't done this for multiple database, but as per Doc you can use the syntex like
ENCRYPTION_WALLET_LOCATION =
(SOURCE = (METHOD = FILE)
(METHOD_DATA =
(DIRECTORY = /local/oracle/admin/wallet/$ORACLE_UNQNAME)
Whenever you set the Environmnet with
export $ORACLE_UNQNAME=DB#1
it will choose the file from respective directory like /local/oracle/admin/wallet/DB#1
HTH

How do i create multiple databases on the same unix box?

Hello experts.
Please send me some guidelines on how to create multiple databases on the same unix box and how to configure their startups including listeners.
Please also, list me the possible precautions to takes especially if the existing database is a production one!
thanks very much for you reply
Best Regards
Yogeeraj

Hello,
I tried the following:
svrmgrl> startup nomount pfile=I:\d01\oracle\admin\cmttest\pfile\init.ora
then
svrmgrl> CREATE DATABASE cmttest
LOGFILE 'i:\d01\oracle\oradata\cmttest\redo01.log' SIZE
1024K,'i:\d01\oracle\oradata\cmttest\redo02.log' SIZE 1024K
MAXLOGFILES 32
MAXLOGMEMBERS 3
MAXLOGHISTORY 1
DATAFILE 'i:\d01\oracle\oradata\cmttest\system01.dbf' SIZE 50M REUSE
MAXDATAFILES 254
MAXINSTANCES 1
CHARACTER SET WE8ISO8859P1
NATIONAL CHARACTER SET WE8ISO8859P1;
Then when i try to run both databases:
svrmgrl> set instance cmttest
ORA-12500: TNS: Listener failed to start a dedicated process
===================
I am doing something wrong.
please help
Regards
Yogeeraj

Multiple databases in a single query

I need to query multiple databases in a single query.
e.g.
Database d1 contains table t1 with column id
Database d2 contains table t2 with column id
I need a query like
SELECT * FROM t1, t2 WHERE t1.id = t2.id;
is this possible in jdbc? if yes can anyone help with some sample code?
thanks,
Ashish Saraf

It is not possible using the JDBC API to query tables in two or more databases using a single query. The reason is that a JDBC Connection is made to a single data source.
However, some databases support the idea of federations or linked tables. What you do is inside the database manager link or federate a table that is present in another DBMS. Then, pose a single JDBC query to the one DBMS which will have its own table and links to the external tables.
Another approach is to use a special JDBC driver with a built-in integration engine that will perform a query across multiple databases. In effect, the system poses separate queries to the different databases and integrates and joins the data together for you automatically on the client-side. That is much easier than doing it yourself in code, but that is also possible for simple queries.
As part of my research program, we have released a shareware version of the UnityJDBC driver that can query multiple databases using a single SQL query. For more information, see:
http://www.unityjdbc.com
http://www.cs.uiowa.edu/~rlawrenc/research/projects.html
Sincerely,
Dr. Ramon Lawrence
Assistant Professor
Department of Computer Science
University of Iowa
[email protected]

Need to get data from multiple database instances in a single query

Hi,
I need a small favour from you guys. The prob is as follows:
I need to get name, row_id from table A from schema 1 and gbu_name, name from table B from schema 2 where a.name = b.name. I wrote the query in the following manner:
SELECT a.name, a.row_id, b.gbu_name
FROM Schema1.A as a, Schema2.B as b
Where a.name = b.name
But this query is not working and the error is like " The table does not exists".
Please update me how to avoid the error and get the right sort of result.
Thanks & Regards,
Debabrata

Ah, youre actually asking different things.
In your topic title, you say youre running separate instances
In your body text, you say you are under different user/schema
So tell me, do you have more than one database or not? How many entries in your TNS file?
I would say, for "multiple database instances"
SELECT
a.id, b.id
FROM
tableA a
INNER JOIN
tableB@OTHER_DATABASE_LINK_NAME b <--NOTE!
USING(id)And of course you will have to look up CREATE PUBLIC DATABASE LINK sql..
Message was edited by:
charred

Auditing DML actions on multiple databases

Similar Messages

Maybe you are looking for