How to change in sql_text into normal readable format?

Question

hi all
yesterday inour production environment the dev. did wrongly updated one query.
they want to know who and when did the changes?
i found some info from dba_audit_object,
but in that table the column for sql_text is not showing the full query ,it shows the update table_name set column name=new row id where =old row id..
by using this query i dont know how to trace the sql_query in norma readble format.
pls help me to sort out this issue..
Thanks
M.Murali..

Answer 1

Hi
I am little confused with your question...
>
they want to know who and when did the changes?
but in that table the column for sql_text is not showing the full query ,it shows the update table_name set column name=new row id where =old row id..
by using this query i dont know how to trace the sql_query in norma readble format.
>
If you are getting back the update table_name set column name=new row id where =old row id.. statement then you can get back the values you want.so, what does by using this query i dont know how to trace the sql_query in norma readble format mean.The update statement is in readable format only.
The answer for who and when changed it is
select USERNAME,to_char(TIMESTAMP,'DD-MON-YY HH24:MI:SS'),USERHOST,TERMINAL,OWNER,OBJ_NAME,ACTION_NAME,SQL_TEXT from DBA_AUDIT_OBJECT;
The username will be the database username who updated the column.Timestamp will tell you the time when it was done,terminal will give the terminal name of the PC,owner is the object's owner and sql_text is the update command fired by the username on the owner's table.
BANNER
Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Prod
PL/SQL Release 10.2.0.1.0 - Production
CORE    10.2.0.1.0      Production
TNS for 32-bit Windows: Version 10.2.0.1.0 - Production
NLSRTL Version 10.2.0.1.0 - Production
SQL> sho parameter audit
NAME                                 TYPE        VALUE
audit_file_dest                      string      C:\ORACLE\PRODUCT\10.2.0\ADMIN
                                                 \MATRIX\ADUMP
audit_sys_operations                 boolean     FALSE
audit_trail                          string      DB, EXTENDED
DB,EXTENDED -- As db, but the SQL_BIND and SQL_TEXT columns are also populated.
SQL> grant select,insert,update on scott.emp to lap;
Grant succeeded.
*FROM THE LAP SESSION DID*
SQL> update scott.emp set MGR=7777 where MGR=7698;
5 rows updated.
SQL> commit;
Commit complete.
FROM THE OTHER SYS AS SYSDBA SESSION
SQL> select count(1) from sys.aud$;
  COUNT(1)
         1
SQL> select USERNAME,to_char(TIMESTAMP,'DD-MON-YY HH24:MI:SS'),OWNER,OBJ_NAME,ACTION_NAME,SQL_TEXT from DBA_AUDIT_OBJECT;
USERNAME                       TO_CHAR(TIMESTAMP, OWNER
OBJ_NAME
ACTION_NAME
SQL_TEXT
LAP                            15-NOV-08 17:31:45 SCOTT
EMP
UPDATE
update scott.emp set MGR=7777 where MGR=7698
So i am getting the sql_text of the update done by LAP user on the SCOTT's  EMP table.HTH
Anand