FGA in 8i

Hi,
We are still running oracle 8.1.7 database. The client does not want to upgrade to newer version of database. I know FGA has been implemented starting with 9i.
The request is that when someone logs on through TOAD or sqlplus is there any way to track what select statements they issued against the DB.?
Is there any possible way to do this in 8.1.7? Any help would be appreciated.
Thanks
Munish
Edited by: Munish on Oct 19, 2012 1:37 PM

>
The request is that when someone logs on through TOAD or sqlplus is there any way to track what select statements they issued against the DB.?
Is there any possible way to do this in 8.1.7?
>
Sure - that is exactly the purpose of auditing. See the AUDIT statement in the SQL reference.
http://docs.oracle.com/cd/A87860_01/doc/server.817/a85397/state10b.htm#2059074
See tables 8-2 and 8-3 for lists of what can be audited and see the examples that follow those tables
>
Audit Query and Update SQL Statements Example
To choose auditing for any statement that queries or updates any table, issue the following statement:
AUDIT SELECT TABLE, UPDATE TABLE;
To choose auditing for statements issued by the users scott and blake that query or update a table or view, issue the following statement:
AUDIT SELECT TABLE, UPDATE TABLE
BY scott, blake;

Similar Messages

  • Using FGA in Oracle 9i on tables that store XML data

    Hello,
    Our company wishes to use FGA policies to log transaction data for updates that take place in our software (Web based software using Oracle 9i Enterprise Edition (9.2.0.6.0))
    This is working just great for logging transaction information on all of our tables except for those that hold XML data. It seems that the XML code is causing an error as it attempts to write in to an audit entry. I have requested information on the specific errors that are being generated, and do not have the exact messages to post yet - but I was hoping that someone out here could comment on FGA and XML data logging, if this is even possible in 9i, or if particular add-ons or updates may need to be made to the database before this can be expected to function as desired.
    Thank you in advance,
    Sabrina Goodpaster
    Database / Configuration Management Specialist
    ENVISAGE Technologies, Corp.
    1441 S. Fenbrook Lane
    Bloomington, IN 47401

    Is the intent to audit tables containing XML or to audit changes to the XML? There is a huge difference.
    Also, working in software as older than my car isn't helping you. How about applying a few patches or upgrading to something supported?

  • How to enable FGA in 9i

    Hi,
    Oracle database version : 9.2.0.8
    OS: Linux4
    as per client requirement we need to enable Fine Grain Auditing.
    So please provide the process to enable FGA in 9.20.8 database and also provide procedure how to enable FGA on particular table or particular column on a table.
    Also let me know what are the views to get the Audit info on that column.
    It's too Urgent please update ASAP.
    Thanks,
    Naveen.

    Handle:      user8936206
    Status Level:      Newbie
    Registered:      Dec 29, 2009
    Total Posts:      19
    Total Questions:      15 (15 unresolved)
    so many questions without ANY answers.
    It's too Urgent please update ASAP.I do not understand why it is URGENT for me to provide answer to you.
    when all else fails, Read The Fine Manual
    http://www.oracle.com/pls/db92/search?word=fine+grained+audit

  • Need help on fga audit feature in oracle

    Hi Guys,
    Can any one provide me the steps to implement fga audit feature. About how to add policy and enable it for one column. How and where(which table) to insert these record to audit further.
    Thanks in advance!
    Regards,
    KLR
    Edited by: kolipaka on Jan 10, 2013 4:55 PM
    Edited by: kolipaka on Jan 10, 2013 4:56 PM

    Google
    http://www.oracle-base.com/articles/10g/auditing-10gr2.php
    http://www.oracle.com/technetwork/database/security/index-083815.html
    http://www.toadworld.com/KNOWLEDGE/KnowledgeXpertforOracle/tabid/648/TopicID/FGAEX/Default.aspx

  • Can't see objects from all db schemas in AV when creating a FGA Policy

    Hi all,
    I have installed Audit Vault successfully but when I try to create a FGA policy, in the Object field the objects from certain schemas don't appear in the list. I tried to verify if the user that the Agent uses to connect to the source database can see objects from all the schemas, so I connected to the source database trough SQL*Plus with this user and did a select on the table ALL_OBJECTS and could see all the objects.
    Does anyone know if this could be a product bug? I have installed the version 10.2.3.2.
    Any help will appreciated. Thanks!

    Is there an existing AV protection on any of the objects, perhaps related to IP, program, etc.?

  • FGA performance from 9i to 10g

    Hi,
    is there any difference in terms of performance using FGA in 9i and 10g?
    Kind Regards.

    antreal wrote:
    Performance in terms of system charge, resource utilization (CPU, memory, ...)....any kind of better performance in 10g against 9i, if so...If I am correctly recalling, FGA is Fine Grain Auditing and in doing so, what sort of system charge(whatever it is) , CPU , memory utilization that you are worrying about?
    Aman....

  • Fine Grained Auditing FGA - Which procedure or package caused the DML ?

    Hi All,
    I'm using FGA at column level. I'm trying to figure out all PL/SQL Subprograms like procedures, functions, packages, etc, which issued the SQL_TEXT in the dba_fga_audit_trail view.
    e.g.
    begin
    sys.dbms_fga.add_policy(
    object_schema => 'SCOTT',
    object_name => 'EMP',
    policy_name => 'SCOTT_EMP_POLICY',
    audit_condition => null,
    audit_column => 'SALARY',
    statement_types => 'UPDATE');
    end;
    The dba_fga_audit_trail view successfully displays all Update Statements in the SQL_TEXT column. However, as to which PL/SQL Subprogram it was issued from - this I don't know.
    Is there any way to determine this? Maybe through another system view?
    I tried replacing the SQL_TEXT with a lot of '%' for every space and every bind variable characters, so that I can do a LIKE in the DBA_SOURCE view, . . . but this didn't 100% worked.
    Many Thanks,
    Henry Wu

    Hi,
    Personnally i've never seen an automatic way for doing this...
    What you cando (but it can be very fastidious) is to declare constants (or IDs) for your differents package/procedure/function names and add them to your different DMLs commands.
    procedure TheProc is
    CurrentProc constant varchar2(100):='TheProc';
    begin
    update mytable set .... , proc_name=CurrentProc
    end;this is an old post but it might interrest you:
    Get current procedure

  • Tracking changes to FGA Policies

    Hi All,
    We had a requirement from our client to add some FGA Audit policies onto some key business tables.
    Our client now has a new requirement, in that, any changes to these policies needs to be tracked and audited.
    Is there a way that this can be achieved?
    thanks
    Melvyn

    FGA policies are kept in FGA$. You should be able to audit changes to this table like any other - e.g using Oracle audit, FGA, triggers, Audit Vault etc.
    SQL> audit insert, update, delete on fga$ by access;
    Audit succeeded.

  • How to work on FGA auditing and provide me some steps to work on?

    How to work on FGA auditing and provide me some steps to work on?

    Please do not duplicate your question.
    Your first question has been moved to the Database General forum:
    Need help on fga audit feature in oracle
    as it is not an SQL or PL/SQL specific question.
    You should know that as you should have a watch on your own questions, and I posted a reply on that thread to let you know.
    Locking this duplicate
    (do not post the question again!)

  • Remove a user from FGA # # #

    I have a situation where I have to exclude a user from FGA audit in place for a table. Audit condition in the policy is defined by a common function and the same function is called by all the audits on few hundreds of objects. Any clues as how this can be implemented the best.
    Oracle 10g R2 on Unix, thanks in advance for your time!

    How about an IF statement in the policy function?Cannot change the function as its called in all audit policy which would affect other objects. For the same user need audit on other objects as well.
    But I would really like to hear a rational explanation as to why anyone can be, or should be, excluded from an audit trail. This had "bad idea" written all over it.Its the business requirement, may not be best practice.

  • FGA - How to find the current status of  the policy ?

    Hi,
    Version 10204.
    I am quering the views : dba_common_audit_trail AND dba_fga_audit_trail and try to discover what is status (DISABLE/ENABLE) of specific policy.
    Could someone help to findout which coulmn should i query in order to know what is current status of the POLICY_NAME ?
    Thanks.

    Your point is valid but I am not able to find any view which can supplement this.
    SQL> select table_name from dict where table_name like '%POLICY%';
    TABLE_NAME
    DBA_AUDIT_POLICY_COLUMNS
    DBA_JAVA_POLICY
    DBA_POLICY_CONTEXTS
    DBA_POLICY_GROUPS
    ALL_AUDIT_POLICY_COLUMNS
    ALL_POLICY_CONTEXTS
    ALL_POLICY_GROUPS
    USER_AUDIT_POLICY_COLUMNS
    USER_JAVA_POLICY
    USER_POLICY_CONTEXTS
    USER_POLICY_GROUPS
    TABLE_NAME
    V$VPD_POLICY
    GV$VPD_POLICY
    13 rows selected.
    SQL> select table_name from dict where table_name like '%FGA%';
    TABLE_NAME
    DBA_FGA_AUDIT_TRAILAman....

  • ORA-28137: Invalid FGA audit Handler

    I have an Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - 64bit running on AIX
    I am being hit with the following error when querying a table :
    SELECT * FROM ADM.TABLE_A;
    ORA-28137: Invalid FGA audit Handler
    select * from DBA_AUDIT_POLICIES gives me 9 tables in the ADM schema that we have auditing turned on. Selecting from any of those 9 tables being audited produces the above error. I looked in metalink oracle support but it has no mention of this error in the knowledge base. This forum has no earlier mention of this error too. Documentation wasn't helpful either. Hence just checking if anybody has any information on this error.

    PF_FUNCTION column in the DBA_AUDIT_POLICIES view had a non-existent function causing the statement failure

  • Auditing without FGA

    Hi,
    I have a requirement to monitor database queries on a particular database view involving a data depending condition.
    Example
    COL1 COL2 COL3
    001 XXX ABC
    002 YYY ABC
    003 XXX XYZ
    If someone query for COL3 = XYZ (results set has the row where COL3 = XYZ) then I need to trigger an email notifying that to a user. But if the same user query the same table and did not get the row with COL3 = XYZ in the result set then it should not send out the notification.
    Is this possible to achieve without FGA? I can't use fga since the DB is Oracle 10g standard edition.

    No, you'd need FGA for this sort of thing.
    Database Vault may have something to offer as well but that would also be an additional license so you're probably better served spending your money on an enterprise edition license.
    If all of your data access goes through an API (i.e. your applications cannot query the table directly), you could potentially figure out a way to add this sort of logging to your API layer. Exactly how you would do that, however, is very application-dependent and may be quite difficult.
    Justin

  • FGA, module name and SET_MODULE

    RDBMS: Release 10.1.0.5.0
    I would like to audit a table column using an audit condition on the module name.
    The code to do that is:
    begin
       DBMS_FGA.DROP_POLICY(object_schema=>'XXXX', object_name=>'TAB', policy_name=>'FGA_SELECT_TAB' );
       dbms_fga.add_policy (
          object_schema=>'XXXX',
          object_name=>'TAB',
          policy_name=>'FGA_SELECT_TAB',
          statement_types => 'select',
          ENABLE          => TRUE,
         audit_condition=>        'sys_context(''USERENV'', ''MODULE'') NOT IN (''xxxxWebApp [ROOT]'',''app_name'')',
          audit_column=>        'VIP'
    end;
    /h3. PROBLEM
    I can write this simple sql program:
    connect XXXX@mydb
    exec DBMS_APPLICATION_INFO.SET_MODULE('app_name', '');
    select * from tab;And the SELECT is not audited.
    h3. QUESTION
    Is there a way to resolve the described problem?
    Edited by: AleC on 16-May-2011 02:35

    That is correct. You've specified the audit condition will be true when the module IS NOT IN 'app_name'. You've set it to 'app_name' hence no audit.

  • How do you create a FGA policy

    hello, I am new to Oracle and a student. I want to track user's accessing a table
    in a schema. This is what i found but not sure how to execute it?
    begin
    dbms_fga.add_policy (
    object_schema=>'BANK',
    object_name =>'ACCOUNTS',
    policy_name =>'ACCOUNTS_ACCESS'
    end;
    Should i put this in a procedure?
    Thanks

    You can not do that in XE cause:
    'The specified feature is not enabled.'
    SQL> begin
      2     dbms_fga.add_policy (
      3        object_schema=>'BANK',
      4        object_name=>'ACCOUNTS',
      5        policy_name=>'ACCOUNTS_ACCESS'
      6    );
      7  end;
      8  /
    begin
    ERROR at line 1:
    ORA-00439: feature not enabled: Fine-grained Auditing
    ORA-06512: at "SYS.DBMS_FGA", line 17
    ORA-06512: at line 2

Maybe you are looking for

  • I cannot download .pdf files with 3.6.13, but I can with Internet Explorer

    I just installed 3.6.13, but had problem with 3.6.12. The screen turns black when the download "starts" and Done appears at the bottom of the screen. Running the Windows Task Manager shows only a less than 1 box spike. Sometimes the screen then goes

  • In DTP Detailed fiscal year variant not processed

    Hi All, I installed and activated CUBE 0IC_C03, now while executing the DTP  2LIS_03_UM / LOGSYSDEV -> 0IC_C03 it throws Error 'Detailed fiscal year variant not processed' then in sdn i searched they told that i have to maintain variant in SPRO TC or

  • Pass the flag  in form endform.

    I have decleared 2 flags in a type , how to pass these flag in a form  endform

  • Strange Flex 3 Tree behaviour. A bug?

    Hello Everyone! I use the flex 3 Tree component with a custom data descriptor. The data-structure, which is processed by the data descriptor, allows that one node may have several parent-nodes. In this case the node is being shown in tree several tim

  • 802.11n on MacBook Pro 2.16?

    I've just purchased a Time Capsule for my home network to replace an Airport Extreme base station and have two MacBook Pros (2.16 GHz core duo). Am I understanding correctly that I can't make these laptops work on 802.11n? And that if I had gone for