Can oracle audit logs keep info of Blocking or blacklisting a user ID, terminal or access port, and the reason for the action?

Hello,
I am workin on Oracle 11G STIGs and one STIGs states that audit log should include followings;
- User ID.
- Successful and unsuccessful attempts to access security files
- Date and time of the event.
- Type of event.
- Success or failure of event.
- Successful and unsuccessful logons.
- Denial of access resulting from excessive number of logon attempts.
- Blocking or blacklisting a user ID, terminal or access port, and the reason for the action.
- Activities that might modify, bypass, or negate safeguards controlled by the system.
I know how to enable audit trial with OS or DB, EXTENDED levels. However, I could not find if it is possible that audit logs can contain info of Blocking or blacklisting a user ID, terminal or access port, and the reason for the action.

2687254 wrote:
Hello,
I am workin on Oracle 11G STIGs and one STIGs states that audit log should include followings;
- User ID.
- Successful and unsuccessful attempts to access security files
- Date and time of the event.
- Type of event.
- Success or failure of event.
- Successful and unsuccessful logons.
- Denial of access resulting from excessive number of logon attempts.
- Blocking or blacklisting a user ID, terminal or access port, and the reason for the action.
- Activities that might modify, bypass, or negate safeguards controlled by the system.
I know how to enable audit trial with OS or DB, EXTENDED levels. However, I could not find if it is possible that audit logs can contain info of Blocking or blacklisting a user ID, terminal or access port, and the reason for the action.
Think about that. If the port or terminal (client ip address) is blocked, then the communication never got to the database. So how would the database be able to audit an action that never got there?

Similar Messages

Any software/program that can read audit log files

Hi,
Currently i am searching for a program/tools that can read audit log files and format it into a readable format. Anyone know is there any in the market or any open source program?
Thank You.

Not sure what you mean by "audit log".
Anyway. Pete Finnigan's tools page has only one thing that might be what you're looking for - LMON, which runs on BSD, Solaris, Linux. As he's the go-to guy for Oracle security the chances of there being a good free log analyzer tool that he hasn't heard of is slight.
Cheers, APC

I can no longer log into my ichat linked to my gmail. right after opening up ichat, receive the following message: lost connection with jabber. the server has unexpectedly disconnected.

i can no longer log into my ichat linked to my gmail. right after opening up ichat, receive the following message: lost connection with jabber. the server has unexpectedly disconnected. how to troubleshoot? thanks.

Hi,
There can be many reasons why the Login is "up the creek".
Any break in the network at your end whilst logged in will cause an issue.
A sort of discrepancy between what iChat thinks the state should be and what the server thinks.
If they don't agree the server will refuse to accept.
A Crash at the server end which does not log you out properly will also do it.
Any file at any time can be come corrupted.
Luckily with the iChat .plists they are recreated if removed with an iChat Restart.
If it were AIM you can also get your Account Suspended and this will not log you in.
(It tends to happen from Chat rooms where people notify AIM about bad behaviour (as they see it) and you have to apply to get Un-suspended).
Most of the big IM services use multiple servers.
Sometimes these go out of Sync.
In the case of AIM this happens when they remove Old unused Screen Names from people's Buddy List prior to making them available for re-registration. I am not sure if this happens at Google.
You seem to be talking about an account that has worked at Work and having new computer at home.
As I mentioned the Priority thing you have not said that it has coincided with the new computer logging in (this will kick the work Computer out of Google whether you are logged in on the Web Mail page or in iChat)
IN addition to that iChat stays partially logged in for Off Line IMs
This is done in the background by a support app called iChatAgent
If your Computer is ON but ichat is not started people can still send you Messages.
Instead of saving these on the server until you login iChat will start up.
Depending if the home Mac is effecting the Work Login it may be holding sway over your Login.
Using your girlfriend's login may have booted her Off Line where she normally uses the name/login.
The AIM Side can be specifically set to allow Multiple Logins and therefore NOT allow them. If this happens you get a warning and messages to do something about it.
You do not get these in any Jabber or Google Login as the Priority setting is supposed to take care of it.
If the Login works at the Web Mail Login and on one computer then the .plist on the work computer is the most likely issue.
There is a small chance that a Corrupt Buddy Pic (Home Folder/Library/Caches/com.apple.iChat/Pictures) may be the cause.
Set this folder to icon view and also use the Finder's View Menu > Show View Options and select icon view.
This should show all pics as their icon.
Check that all display properly.
At this point I would try a COMBO version update install of the last Update you did over what you have.
This often corrects hard to trace things
The 10.5.8 COMBO is here
11:28 PM Monday; June 20, 2011
Please, if posting Logs, do not post any Log info after the line "Binary Images for iChat"
 G4/1GhzDual MDD (Leopard 10.5.8)
 MacBookPro 2Gb( 10.6.7)
 Mac OS X (10.6.7),
"Limit the Logs to the Bits above Binary Images."  No, Seriously

I was fooling around with the "reader" feature on my New iPad. I am now stuck with that and can't get out. Even my four digit code is read out in a machine voice and the iPad wont boot. How do I get out of this. Tried the red arrow slider. shut of the iPa

I was fooling around with the "reader" feature on my New iPad. I am now stuck with that and can't get out. Even my four digit code is read out in a machine voice and the iPad wont boot. How do I get out of this. Tried the red arrow slider. shut of the iPa

James,
I cannot get into Settings! It keeps reading out Slide to Unlock when I try to slide teh arrow to open the fpur digit entry boxes.

HT5731 How can I download my TV episodes to my Macbook Pro. I bought them from my iPad2, and I looked for them with the same AppleID on iTunes Store and they wont download to my iTunes.

How can I download my TV episodes to my Macbook Pro. I bought them from my iPad2, and I looked for them with the same AppleID on iTunes Store and they wont download to my iTunes.

What country are you in ? Depending upon what country that you are in then you might be able to redownload them on your Mac's iTunes via the Purchased link under Quicklinks on the iTunes store homepage
If you're not in a country where TV programmes can be redownloaded then connect the iPad to your Mac's iTunes and use the File > Devices > Transfer Purchases to copy them over from your iPad

HT4528 Hi - I keep getting a message on my iphone to back up my iCloud. And - the password that I'm entering isn't working. I know it's the correct password.

Hi - I keep getting a message on my iphone to back up my iCloud. And - the password that I'm entering isn't working. I know it's the correct password.

Hi mhalstengard,
If you are having issues with your iCloud or Apple ID password, you may find the following article helpful:
Apple ID: If you forget your password
http://support.apple.com/kb/ht5787
Regards,
- Brenden

My problem is that one of the USB ports and the device does not detect this and inactive but can not find how to reactivate.Help me please! greetings thanks!

Hello good evening, I have a MacBook Pro and my problem is that one of the USB ports and the device does not detect this and inactive but can not find how to reactivate.
Help me please! greetings thanks!

Do you have the Firefox new tab page but the actual sites are missing, or do you have some other page?
If you have some different page, try the quick fix in Fred McD's reply.
If the sites are missing, did you use the Reset feature? That will clear the storage associated with the new tab page. I'm not sure it's possible to recover from that; you probably need to rebuild your page from scratch as you browse.
For possible future reference, here is how to access the hidden setting for the page to display on new tabs:
(1) In a new tab, type or paste '''about:config''' in the address bar and press Enter. Click the button promising to be careful.
(2) In the search box above the list, type or paste '''newtab''' and pause while the list is filtered
(3) Double-click the '''browser.newtab.url''' preference and enter your preferred page:
* ''Page thumbnails (default)'' => about:newtab
* ''Blank tab'' => about:blank
* ''Built-in Firefox home page'' => about:home
* ''Any other page'' => full URL to the page
Press Ctrl+t to open a new tab and verify that it worked. Fixed?
Some gotchas:
''If Firefox won't let you edit this setting:'' you may have something called SearchProtect on your system.
''If Firefox lets you save your change but ignores it:'' one of your extensions may be overriding it. You can review, disable, and/or remove extensions on the add-ons page:
"3-bar" menu button (or Tools menu) > Add-ons > ''in the left column click'' Extensions
''If the change works during your session, but at the next startup is back to an unwanted page:'' you might have a user.js file in your personal Firefox settings folder (your Firefox profile folder). This article describes how to track down and remove the file: [[How to fix preferences that won't save]].
Any luck?

I can listen to music but my silent switch wont work my phone wont vibrate but will ring, and the volume buttons wont work on my iPhone 4

i can listen to music but my silent switch wont work my phone wont vibrate but will ring, and the volume buttons wont work the speaker will work asweell

Have you done a restore of the phone to see if that fixed the problem with the speaker? If that doesnt help then you probably damaged something inside the phone when you dropped it.
If you're annoyed by the problem, you can always get a replacement phone
Out-of-warranty* cost:
iPhone 5s, iPhone 5c, iPhone 5: $269
iPhone 4s: $199
iPhone 4, iPhone 3GS, iPhone 3G, Original iPhone: $149

Can WS Audit logs be send to a database instead than to a file?

Is it possible to configure OC4J so that the audit logs are sent to a database table instead to the log.xml file? I'm trying to write an admin console through the web where the user can see the failed invocations to the webservice. It would be nice if I'm able to read the messages processed from a database table.
Any suggestions?
Thanks,
Mario
Edited by: user521348 on Nov 3, 2009 3:21 AM

Yes, OAS does.
Please check the documentation about this feature in OAS Administration documentation.

Apple TV keeps accessing ABC and the three Disney Channel and nothing happens

I can access all the channels except ABC and the three Disney. When trying the accessing ABC or Disney channel window with circulation icon in motion remains forever without giving an error message. But all of the rest channel are accessed in seconds. How can this be fixed?
Do appreciate any help. Thank you

Solved...
This worked for me for the ABC app.
Sign out under settings in the Abc App.
restart
when you go back to watch a show it will promt you to re-activate online. (select remain logged-in when enter password.)

My ipod touch 4th keeps turning off with a full charger by its self got white screen and was frozen for hours and the volume rockers wont work some most ??

i have had my ipod touch 4th gen for 6montha i had to take my first one in becuz of the headphone jack broke off now they handed me a brand new ipod so its still under warrentie but it will shut off on its own with a full charge and home button keeps not responding and got a white screen two days ago i was listeningto aome music earlyer today and the volume rockers would not work im wondering if i should bring it in

Try this to get it working
- iOS: Not responding or does not turn on
- Also try DFU mode after try recovery mode
How to put iPod touch / iPhone into DFU mode « Karthik's scribblings
- If not successful and you can't fully turn the iPod fully off, let the battery fully drain. After charging for an least an hour try the above again.
- If still not successful that indicates a hardware problem and an appointment at the Genius Bar of an Apple store is in order.
Apple Retail Store - Genius Bar
If you get it working, then restore to factory settings/new iPod. If you still have the problem then time for the Genius Bar.

Can i use the HDMI port and the Mini displayport to HDMI adapter simultaneously to switch between two displays?

I just bought a new Mac Mini and was hoping that i can connect my TV via the HDMI port and also connect a 19" monitor via the Minidispaly port to HDMI adapter or the Mini DisplayPort to VGA Adapter. This way i can pick between having the screen mirrored to my tv, or having the screen displayed at my desk.
Is this possible?

Yes. Note the resolution via HDM is limited to
This model simultaneously supports 1920x1200 on an HDMI or a DVI display (using the included HDMI-to-DVI adapter) and2560x1600 on a Thunderbolt or Mini DisplayPort display or even a VGA display (with an optional Mini DisplayPort-to-VGA adapter, which is compatible with the Thunderbolt port).
HD 4000 Mini Video

I can't get the AirPort extreme to recognize a MagicJack connection. It's an ethernet cable plugged into one of the lan ports and the led won't even light up.

My wireless network is working fine. I have an AirPort extreme hooked to a cable modem and all other devices around the house can get into the network.
However, I am trying to hook up a MagicJack to the AirPort via an ethernet cable without success. The AirPort has 3 lan ports for this kind of purpose. The MagicJack works fine when plugged into my Mac's USB port, but it seems to slow the Mac down too much.
I have tried a new cable, checked that I have power and have rummaged through AirPort Utility, but cannot get the AirPort port to even light up. I've also restarted and rebooted both the AirPort and the cable modem multiple times.
Any advice would be appreciated.
Thanks

KiltedTim. You nailed it. I tried the MJ directly into the cable modem and still can't get a phone line. I'll see what MJ can do now.
Thanks and thanks to alanoconner for your help.

HT1366 My MacBook OS X version 10.6.8 is not going to sleep, keeps loading, then when turned on a blank screen appears, I shut it and the main menu comes up and then it takes awhile for the cursor to operate. Thanks

My MacBook wouldn't go to sleep, it keeps loading, so I have to turn it off. When I turn it on a blank screen comes on, I shut the lid and open it and the main menu screen comes up but the cursor won't work for awhile. Then, eventually, the cursor will work and everything is fine. Hmmm?

Just in case it still didn't work...I copied and pasted the information below...
Battery Information:
Model Information:
Serial Number: D86052301B8DCMDAG
Manufacturer: SMP
Device Name: bq20z451
Pack Lot Code: 0000
PCB Lot Code: 0000
Firmware Version: 0301
Hardware Revision: 000a
Cell Revision: 0173
Charge Information:
Charge Remaining (mAh): 3638
Fully Charged: No
Charging: No
Full Charge Capacity (mAh): 4196
Health Information:
Cycle Count: 631
Condition: Normal
Battery Installed: Yes
Amperage (mA): 0
Voltage (mV): 8103
System Power Settings:
AC Power:
System Sleep Timer (Minutes): 10
Disk Sleep Timer (Minutes): 10
Display Sleep Timer (Minutes): 10
Wake on AC Change: No
Wake on Clamshell Open: Yes
Wake on LAN: Yes
Current Power Source: Yes
Display Sleep Uses Dim: Yes
Standby Delay: 4200
Standby Enabled: 1
Battery Power:
System Sleep Timer (Minutes): 62
Disk Sleep Timer (Minutes): 10
Display Sleep Timer (Minutes): 62
Wake on AC Change: No
Wake on Clamshell Open: Yes
Display Sleep Uses Dim: Yes
Reduce Brightness: Yes
Standby Delay: 4200
Standby Enabled: 1
Hardware Configuration:
UPS Installed: No
AC Charger Information:
Connected: Yes
ID: 0x0100
Wattage (W): 60
Revision: 0x0000
Family: 0x0085
Serial Number: 0x000979a4
Charging: No

The font for my yahoo log in is very very small anbd my email fonts are far too big and the words overlap, please help to correct this problem

The font for sign into my yahoo mail is so small that I am unable to make out my ID and password and when I do get into my mailbox, the fonts are far too big and the words overlap. Tried going into tools /options to make changes but not successful, please help.thanks

Reset the page zoom on pages that cause problems, make sure that the window is not maximized:
*<b>View > Zoom > Reset</b> (Ctrl+0 (zero); Cmd+0 on Mac)
*http://kb.mozillazine.org/Zoom_text_of_web_pages
If you have increased the minimum font size then try the default setting "none" as a high value can cause such issues.
*Tools > Options > Content : Fonts & Colors > Advanced > Minimum Font Size (none)
Make sure that you allow websites to choose their fonts.
*Tools > Options > Content : Fonts & Colors > Advanced > [X] "Allow pages to choose their own fonts, instead of my selections above"
You can use an extension to set a default font size and page zoom on web pages.
*Default FullZoom Level: https://addons.mozilla.org/firefox/addon/default-fullzoom-level/
*NoSquint: https://addons.mozilla.org/firefox/addon/nosquint/

Can oracle audit logs keep info of Blocking or blacklisting a user ID, terminal or access port, and the reason for the action?

Similar Messages

Maybe you are looking for