Disable audit in oracle 10g R2

can any one help me out how to disable audit in oracle 10g R2 ...
I've executed following commands
SQL> noaudit session by DEBIT;
Noaudit succeeded.
SQL> noaudit session by DEBIT;
Noaudit succeeded.
but audit is still running

What does this have to do with Audit Vault?
Where are you looking and what are you seeing that makes you believe auditing was not stopped?
We can not see you monitor.

Similar Messages

Regarding Auditing in Oracle 10g

Hi all,
i want to enable auditing for particular tables in oracle 10g(linux)..To enable auditing i have put
audit_trail=db
in init.ora files found in "/proc/4310/cwd" and "/proc/self/cwd/app/oracle/product/10.2.0/server/config/scripts"...
but im not getting any values in sys.aud$ table...
please tell me the way to get rid of this problem...
Thanx
in advance..

For Oracle 9 and later:
alter system set audit_trail = DB;
If you want to audit a specific user run the following:
audit alter table, select table, insert table, update table, delete table, grant table, grant
procedure by USERNAME;
To stop audit for that user run:
noaudit alter table, select table, insert table, update table, delete table, grant table,
grant procedure by USERNAME;
To enable auditing for a specific object do:
AUDIT SELECT, INSERT, UPDATE, DELETE ON SCHEMA.TABLE;
To stop auditing:
NOAUDIT SELECT, INSERT, UPDATE, DELETE ON SCHEMA.TABLE;
To see the results:
SQL> select * from dba_audit_trail;

Auditing in oracle 10g database and oracle 10g application server

Dear friends,
We have oracle 10g application server and oracle 10g database server in place.My criteria is to audit users connected using oracle application user credentials to the database.
Can you please tell me how can i do it.
Thanks & regards,

Its the database connection you want to track. The session audit will show where it came from.
Auditing is turned using this command:
alter system set audit_trail = DB scope=spfile;
Note: The use of spfile will require a DB bounce before audit starts
To audit Sessions:
audit create session;
Query by Audit Type:
SELECT A.USERNAME,
OS_USERNAME,
A.TIMESTAMP,
A.RETURNCODE,
TERMINAL,
USERHOST
FROM DBA_AUDIT_SESSION A
WHERE USERHOST = <replace with iAS servername> ;
By User
SELECT USERNAME,OBJ_NAME,ACTION_NAME , TIMESTAMP
FROM DBA_AUDIT_TRAIL WHERE USERNAME = 'SCOTT';
Check for users sharing database accounts
select count(distinct(terminal)),username
from dba_audit_session
having count(distinct(terminal))>1
group by username;
Attempts to access the database at unusual hours
SELECT username, terminal, action_name, returncode,
TO_CHAR (TIMESTAMP, 'DD-MON-YYYY HH24:MI:SS'),
TO_CHAR (logoff_time, 'DD-MON-YYYY HH24:MI:SS')
FROM dba_audit_session
WHERE TO_DATE (TO_CHAR (TIMESTAMP, 'HH24:MI:SS'), 'HH24:MI:SS') <
TO_DATE ('08:00:00', 'HH24:MI:SS')
OR TO_DATE (TO_CHAR (TIMESTAMP, 'HH24:MI:SS'), 'HH24:MI:SS') >
TO_DATE ('19:30:00', 'HH24:MI:SS');
Attempts to access the database with non-existent users
SELECT username, terminal, TO_CHAR (TIMESTAMP, 'DD-MON-YYYY HH24:MI:SS')
FROM dba_audit_session
WHERE returncode <> 0
AND NOT EXISTS (SELECT 'x'
FROM dba_users
WHERE dba_users.username = dba_audit_session.username);
Other audits you might consider:
audit grant any object privilege;
audit alter user;
audit create user;
audit drop user;
audit drop tablespace;
audit grant any role;
audit grant any privilege;
audit alter system;
audit alter session;
audit delete on AUD$ by access;
audit insert on AUD$ by access;
audit update on AUD$ by access;
audit delete table;
audit create tablespace;
audit alter database;
audit create role;
audit create table;
audit alter any procedure;
audit create view;
audit drop any procedure;
audit drop profile;
audit alter profile;
audit alter any table;
audit create public database link;
Best Regards
mseberg

Auditing in Oracle 10g

Hi,
OS = HP Unix
Datbase = 10.2.0.1
My management want me to enable auditing at database level.....It means, once i enabled the auditing at db level...it captures all the uses login,logout, what they are doing at database..everything in sys.aud$ table, dba_audit_trail tables...right...
If i enable it, i heard that there is performance problem...
Friends please share your experience....how are you maintaining auditing at your companies...
Please share your experience

There are so many levels of enabling auditing.
The "audit session" will be hardly noticed and will audit connections but as for auditing as you say "what they are doing" "everything" then you will consume large amounts of space and system resource and may need to move the AUD$ table from the SYSTEM tablespace into an AUDIT tablespace. How long will this audit data be kept; a purge job will be needed.? How much spare CPU capacity do you have. You will need to clear up the specific requirements from your management otherwise you will end up with GIG's of audit data very quickly. You may even want to think of placing it on own separate fast storage.
http://www.stanford.edu/dept/itss/docs/oracle/10g/server.101/b10759/statements_4007.htm
Review the examples in the manual.
N.B. Oracle do support moving AUD$ but refer to metalink for details they have docs showing how to......
Message was edited by:
triggb

Audit in Oracle 10g

Hello,
Just a quick question,
I setup the audit for one oracle user on Oracle 10G :
AUDIT ALL BY myuser BY ACCESS;
AUDIT SELECT TABLE, UPDATE TABLE, INSERT TABLE, DELETE TABLE BY myuser BY ACCESS;
AUDIT EXECUTE PROCEDURE BY myuser BY ACCESS;
now, Where can I found the information about the audit? in which views?
Thanks all,;

SQL> show parameter audit
NAME                                 TYPE        VALUE
audit_file_dest                      string      /u01/app/oracle/admin/TEST/adump
audit_syslog_level                   string
audit_sys_operations                 boolean     FALSE
audit_trail                          string      NONE
SQL>

Disable ocssd for oracle 10g

Hi,
I just installed oracle 10g on a linux box. I do not use any RAC or database grid feature. However, the ocssd is still started up by the init script(/etc/inittab). Unfortunately, it gave a core dump under $ORACLE_HOME/css/init in every trial. Quickly, it filled the disk space left.
Can I safely disable the cssd by commenting out the cssd line from /etc/inittab since I do not use any of the RAC or grid feature? Does this have any impact or other function?
thanks

In a non-RAC environment, the ocssd.bin process is used for communication between a database instance and the ASM (Automatic Storage Management) instance.
If you don't use RAC nor ASM you can deactivate the ocss daemon : I did it by putting an exit as the first line in the /etc/init.d/init.cssd script.

How to implement C2 Audit in Oracle 10g Express Edition?

Hi,
I am developing a database using 10g Express Edition in which I need to implement c2 audit. I am planning to use triggers for this. Does anyone have a better method to implement audit in Express Edition?
Thanks.

I don't know what C2 audit exactly is, but before programming anything read this Security Guide chapters on Database Auditing http://download.oracle.com/docs/cd/B19306_01/network.102/b14266/auditing.htm#i1011984 and http://download.oracle.com/docs/cd/B19306_01/network.102/b14266/cfgaudit.htm#i1014788.
All this should be available in XE also, except for Fine Grained Auditing, which is in Enterprise Edition only.
If you are only interested in knowing when, who, did what command, including failed attempts than you don't have to program anything - you just define what activities you want to audit and set AUDIT_TRAIL initialization parameter to start auditing.
You only need to write triggers if you need to catch column values before/after the change.

Enabling Audit Trail (Oracle 10g Solaris 9)

Hi Guys,
How can I enable the above, not familiar with 10g.
Thank you.

Not familiar with Oracle doc ?
http://download.oracle.com/docs/cd/B19306_01/server.102/b14200/statements_4007.htm#SQLRF01107
Nicolas.

Cannot start Web Cache in Oracle 10g App Server

Hi,
Our Application runs on Oracle10g App Server,
When it tried to start WebCache using the command
opmnctl startproc ias-component=WebCache process-type=WebCache
it shows the error...
opmn id=oracle10g:6200
no enabled components for this request
When i tried to enable WebCache using Enable/Disable Component in Oracle 10g Enterprise manager - I can't see WebCache component it to enabe or disable it.
When i tried opmnctl status., it shows
------------------------------------------------+---------
ias-component | process-type | pid | status
------------------------------------------------+---------
HTTP_Server | HTTP_Server | 7276 | Alive
LogLoader | logloaderd | N/A | Down
dcm-daemon | dcm-daemon | N/A | Down
OC4J | home | 7684 | Alive
OC4J | rhs | N/A | Down
OC4J | instaremit | 5880 | Alive
OC4J | insta_test_apr_02 | 7100 | Alive
WebCache is not running, also as the WebCache is not listed in Oracle 10g Enterprise manager, i can' enable or disable it.
Plz Help me over this.,
Regards.,
Deepak.C

Hi.,
Thanks again !!!
Yes, My Oracle HTTP Server is listening on port 80.
I am not clear, may i know why should the ports be changed for the request to go through Web Cache ???
Can i assign port 80 for Web Cache and 7778 for HTTP Server ?
Also In Oracle Enterprise Manager, Web Cache is not available...
home, HTTP Server, management alll these are there...
Also for HTTP Server, it's not showing any metric info, 'Not Yet Available' is shown even though the HTTP Server is running, how can i get metric info about Oracle HTTP Server, i have also used dmstool -t ohs_server, its not working
It's showing... FLEXMON ERROR : detected invalid table name ohs_server
dmstool -l -t also does'nt lists ohs_server
Hellp me over this.....
Deepak.C

WLS 8.1 - Entity Beans CMP - Oracle 10g Audit Tool

Hi,
We are defining the architecture of a new application on WebLogic Server 8.1 and Oracle 10g.
We are thinking in using CMP Entity Beans and we need to integrate our system with Oracle Audit Tool.
Can anybody give us some information about this issue ?
Thanks,
Javier Cano

I really don't see the point of using CMP with an expensive, fully featured database like Oracle. MySQL or a flat file maybe. Otherwise it is just a waste of purchased resources.

Can I disable logging for session in Oracle 10g?

I use a procedure to delete a lot of row for an application repeatedly. Because the DELETE statement is time consuming and the data don't need to be archived, I decide to use the nologging option.
How to do it?
What is the best choice? Can I disable logging from session in Oracle 10g?
Thank you
Edited by: jetq on Jul 23, 2009 9:46 AM

Hi,
"Delete" without generating redo-log is not possible.
If you are on 10g, one way of making this thing efficiant is partition the table, with range-list partitioning. Partitioning existing table will be an excercise in itself, but that will be one time activity.
In partitioned (or sub-partitioned) tables, you can truncate a partition (or subpartition). That won't generate any redo log (or very very less redo log) and that runs in seconds.
In your case if you range partition INCOMING table by datetime (1 partition per day) and list sub-partition it by STATUS, that would help.
Another approach is, if you are deleteing, say 80% records every day and leaving 20% (or very less) records. What you can do is, partition the table only by range on datetime. Then, every time you want to delete data, copy the rows you want to keep in some other table (or temporary table), truncate partition for that day and insert rows back (which you want to keep).
I have done a similar thing and it works very quickly and generates very less redo log. Redo log generated in case of truncating partition or creating new partitions is just for Oracle internal commands (like data dictionary update etc).
Have fun.

How to disable RECYCLE BIN functionality on Oracle 10g R2

Hi,
I installed Oracle 10g R2 in windows 2003, then log in SQL * plus with sys as sysdba, try to use the following command to disable the RECYCLE BIN functionality which is new feature in Oracle 10g R2.
SQL> alter system set "_RECYCLEBIN"=FALSE SCOPE=BOTH;
I got the error: illegal option for ALTER SYSTEM
What do I miss? any comments are appreciative.
Grace

SQL> alter system set recyclebin=off;
System altered.
SQL> alter system set recyclebin=on;
System altered.
SQL>Best regards
Maxim

ORACLE 10g generate reports for audit trail

HELP ORACLE 10 g
I am a beginner about the oracle 10g
anybody can guide me how to start with
generate reports for audit trail , top ten url
, no of hits in the portlets ......
=(
thank you ....

In a nutshell:
1 - You will have to have the portal database schema as your data source.
2 - You will have to design a target database schema with the target data bjects (tables, dimensions and fact tables - cubes) where the data will be loaded for reporting purposes.
3 - Then you will have to model the loading process by defining mappings (mappings will translate into generated code for the load process) and process flows to run the mappings in the right order etc.
4 - You will deploy the sources, targets and processing entities to the target schema.
5 - You will run the deployed code periodically as needed and maintain the source, target and loading entities which might change with time.
One observetion - OWB does not produce reports. It creates and maintains the data infrastructure for a reporting/analysis system (a data warehouse, data mart or an operational data store). To produce reports (for example, the top-10 report mentioned by you), you will have to run a reporting tool on top of the data structures created and maintained by OWB.
Regards:
Igor

How to enable/disable archive mode from the pfile in oracle 10g?

hi
I am using oracle 10g.
Is there any mechanism to / parameter to enable or disable archive log mode?
can I enable arching directly from pfile without touching the startup process??
pls help.
thnx in advance..

Please is not in pfile that you enable/disable archive log mode.
For ENABLE Archivelog mode:
shutdown immediate
startup mount
alter database archivelog;
alter database open;
For DISABLE Archivelog mode:
shutdown immediate
startup mount
alter database noarchivelog;
alter database open;

Auditing Feature Of Oracle 10g

How do i choose to audit on particular tables or rather objects? i tried with the default settings which enable all actions on all database objects which creates a lot of unwanted audit data.
i tried the code:
alter system set audit_trail=DB scope=SPFILE;
this audits all actions on all objects which i dont want.
i also tried this:
noaudit insert,delete,select by sys2----this is the username that i use
even this does not limit audit data.

I had read the documentation related to auditing completely. Actually the problem was i had previously given the command:
audit all by sys2(username that i use)
so everything was being audited even after i disabled auditing completely and enabled again.
For a complete reset of auditing options,use the commmand:
delete from sys.audit$;
now do the following:
connect sys/manager as sysdba;
alter system set audit_trail=DB scope=SPFILE;
audit +<action>+ on +<tablename>+ by action;
perform audit only on selected objects and selected actions.
shutdown
startup
and you are ready to go.
Finely Grained Auditing not supported in XE i guess. Coz i searched alot and maybe this is what i concluded.
Just shared this in case it could be helpful to some one else.
Thank you.

Disable audit in oracle 10g R2

Similar Messages

Maybe you are looking for