How to collect sysdba opertaion record to av server alert ?

OS: Linux as 4
DB: 10g
AV: 10.2.3
I'v create an statement audit policy "table" and the alert to report "create table" opertaions , then loggon as sysdba to 'create user ...'. The 'create user..' operations were recorded to the /adump/*.aud ,but these recores can not be collect and report by av server console . At the same time ,other user's create table oprerations can be audited and alerted on av server console.
how to collect and alert the operation records of SYSDBA that meet the policy and alert requirement ?
thanks.

thanks for your reply.
the status as follow:
1.the db parameter has been set :
audit_sysoperatins= TRUE
audit_trail= OS
2. the sysdba operations audit record can be find in /adump/*.aud
3. On av server, statement auidt policy 'table' and alert ' create table' are configured .
the problem is : any user who 'creat table' can be audited ,and we can find one alert generated on av console except sysdba . In other words ,sysdba create a table, the opertion meet the audit policy and alert ,but can not find the alert on av console .

Similar Messages

  • How do I add augmented records in Mavericks Server 3?

    This article: Mavericks Server Admin: Integrate with existing directory domains clearly indicates that you can "Integrate with augmented records."  I have found instructions on how to import augmented users from Active Directory into 10.6 Server, but I'm using a 10.9 Server and can't figure out how this is done.  Advice please?

    You can do that easily from workgroup manager by going to server > new augmented user records,
    if you want to add all users choose the group option and search for "domain users" this way you can add all users from specific AD group.
    here is a screen shot

  • How to handle the bad record while using bulk collect with limit.

    Hi
    How to handle the Bad record as part of the insertion/updation to avoid the transaction.
    Example:
    I am inserting into table with LIMIT of 1000 records and i've got error at 588th record.
    i want to commit the transaction with 588 inserted record in table and log the error into
    error logging table then i've to continue with transaction with 560th record.
    Can anyone suggest me in this case.
    Regards,
    yuva

    >
    How to handle the Bad record as part of the insertion/updation to avoid the transaction.
    >
    Use the SAVE EXCEPTIONS clause of the FORALL if you are doing bulk inserts.
    See SAVE EXCEPTIONS in the PL/SQL Language doc
    http://docs.oracle.com/cd/B28359_01/appdev.111/b28370/tuning.htm
    And then see Example 12-9 Bulk Operation that continues despite exceptions
    >
    Example 12-9 Bulk Operation that Continues Despite Exceptions
    -- Temporary table for this example:
    CREATE TABLE emp_temp AS SELECT * FROM employees;
    DECLARE
    TYPE empid_tab IS TABLE OF employees.employee_id%TYPE;
    emp_sr empid_tab;
    -- Exception handler for ORA-24381:
    errors NUMBER;
    dml_errors EXCEPTION;
    PRAGMA EXCEPTION_INIT(dml_errors, -24381);
    BEGIN
    SELECT employee_id
    BULK COLLECT INTO emp_sr FROM emp_temp
    WHERE hire_date < '30-DEC-94';
    -- Add '_SR' to job_id of most senior employees:
    FORALL i IN emp_sr.FIRST..emp_sr.LAST SAVE EXCEPTIONS
    UPDATE emp_temp SET job_id = job_id || '_SR'
    WHERE emp_sr(i) = emp_temp.employee_id;
    -- If errors occurred during FORALL SAVE EXCEPTIONS,
    -- a single exception is raised when the statement completes.
    EXCEPTION
    -- Figure out what failed and why
    WHEN dml_errors THEN
    errors := SQL%BULK_EXCEPTIONS.COUNT;
    DBMS_OUTPUT.PUT_LINE
    ('Number of statements that failed: ' || errors);
    FOR i IN 1..errors LOOP
    DBMS_OUTPUT.PUT_LINE('Error #' || i || ' occurred during '||
    'iteration #' || SQL%BULK_EXCEPTIONS(i).ERROR_INDEX);
    DBMS_OUTPUT.PUT_LINE('Error message is ' ||
    SQLERRM(-SQL%BULK_EXCEPTIONS(i).ERROR_CODE));
    END LOOP;
    END;
    DROP TABLE emp_temp;

  • How to collect similar record from the internal table

    I need to collect exact matched records from 1 internal table to another internal table by searching 5 fields. I need to have records which are exactly matched for 5 fields. i have written a code wich is mention below it gave me only similar records but not 100% matched record.. would you like to help me. any correction, suggetion,. Will be great help to me.

    To get exact match of 5 records, do as follows.
    Check whether internal table gives only one record or not after READ statement.If internal table gives more than one entry for READ then the results will be improper.
    I think there is no need of READ statement on same internal table within LOOP. I commented the same in code.
    sort i_bp_p by title initials name_last idnumber idtype f50code rbcode. "acc_num.
    loop at i_bp_p into wa_i_bp_p.
    *lv_tabix = sy-tabix.
    *read table i_bp_p index lv_tabix into wa_i_bp_p.read table i_but0id into wa_but0id with key idnumber = wa_i_bp_p-idnumber
    idtype = wa_i_bp_p-idtype binary search.
    if sy-subrc = 0.
    read table i_but000 into wa_but000 with key title = wa_i_bp_p-title
    initials = wa_i_bp_p-initials
    name_last = wa_i_bp_p-name_last binary search.
    if sy-subrc = 0.
    read table i_but0is into wa_but0is with key f50code = wa_i_bp_p-f50code
    rbcode = wa_i_bp_p-rbcode binary search.
    if sy-subrc = 0.
    move-corresponding wa_i_bp_p to i_bp_p100.
    append i_bp_p100.
    endif.
    endif.
    endif.
    endloop.
    sort i_bp_p100 by partner.
    loop at i_bp_p100.
    write : /10 i_bp_p100-partner,
    20 i_bp_p100-title,
    30 i_bp_p100-initials,
    40 i_bp_p100-name_last,
    53 i_bp_p100-idnumber,
    70 i_bp_p100-idtype,
    85 i_bp_p100-rbcode,
    95 i_bp_p100-f50code.
    endloop.
    sort i_bp_p by title initials name_last idnumber idtype f50code rbcode. "acc_num.
    loop at i_bp_p into wa_i_bp_p.
    lv_tabix = sy-tabix.
    read table i_bp_p index lv_tabix into wa_i_bp_p.
    if sy-subrc = 0.
    read table i_but0id into wa_but0id with key idnumber = wa_i_bp_p-idnumber
    idtype = wa_i_bp_p-idtype binary search.
    if sy-subrc = 0.
    read table i_but000 into wa_but000 with key title = wa_i_bp_p-title
    initials = wa_i_bp_p-initials
    name_last = wa_i_bp_p-name_last binary search.
    if sy-subrc = 0.
    read table i_but0is into wa_but0is with key f50code = wa_i_bp_p-f50code
    rbcode = wa_i_bp_p-rbcode binary search.
    if sy-subrc = 0.
    move-corresponding wa_i_bp_p to i_bp_p100.
    append i_bp_p100.
    endif.
    endif.
    endif.
    endif.
    endloop.

  • How to collect to different files into one message

    Hi,
    I have the following scenario:
    Two (5Mb) Files with different file structures each ->
    XI (transform and generate a single structure record) ->
    Insert a record in a DB for each new record generated
    Let suppose file1 has order headers - one order per line -and file2 has the corresponding order items - one item per line, e.g;
    File 1
    OrderNr  Description
    1        A
    2        B
    3        C
    File 2
    OrderNr   ItemNr   MaterialCode ....
    1         1        111
    1         2        222
    1         3        555
    2         1        888
    2         2        777
    3         1        111
    Imagine I want to insert a record in the database for
    each order/item like this
    OrderNr  ItemNr Description MaterialCode .....
    1        1      A           111
    1        2      A           222
    1        3      A           555
    My real scenario is a little more complicated but never mind for now.
    I need to collect the two different files with two different file structures into the same message. Although I have read about the subject I am not sure about how to do it using BPM because there isn't any field I could use to correlate file1 with file2 - I can only correlate a record of file1 with several records of file2. I simply know that the two files will be available in a specific directory once a day at 06:00AM.
    First question is:
    How can I collect the two messages originating each from a different file into only one message with two different subtypes one for each file structure?
    Because my background is ABAP I could do it with a workaround for temporarily storing the info from each file into database tables in XI and then correlate the info from the two files to generate a single message.
    Like this
    File1 -> XI -> INSERT DATA XI ZDB1 (via ABAP Proxy or RFC)
    File2 -> XI -> INSERT DATA XI ZDB2 (via ABAP Proxy or RFC)
    Them I could use an event to check when the two tables have all the data from both files. I could then combine the data from the two tables and start another integration process like this
    XI SERVER (ABAP Proxy) -> XI Integration Server -> Third-party (JDBC)
    But this way I would have to code the hole data conversion which is not a good idea from the perspective of XI (EAI/Broker).
    Maybe I sould use BPM. But how?
    Futhermore:
    Is BPM performant enough (we are talking about files with thousand of records)?
    Thanks in advance
    Diz

    Hi,
    for N:1 Multimapping you have to use BPM.
    After going through this weblog you will be quite familiar with how to collect 2 messages into one message.
    /people/pooja.pandey/blog/2005/07/27/idocs-multiple-types-collection-in-bpm
    Steps:
    1. Create a abstract/ inbound / outbound interfaces. (in your case 3 /1/2).
    2. Perform 2:1 Multimapping.
    You can specify more than one message in either side.
    Just go to message tab in MM.
    3. Now follow the blog and you will get a output in the form of abstract interface.
    4. Define JDBC reciever Channel as usual.
    Your database will be updated.
    Just try this out.
    Regards
    Piyush

  • How to delete the Initialization records in  2LIS_03_BX

    BW3.5 - R/3 4.6c - LO-Cockpit - SCM Implementation - Inventory Management 0IC_C04 InfoCube.
    I wanted to use 2LIS_03_BX and RSA3 was showing zero records. I ran MCNB to collect records for this extract and it collected 815000 stock records. When I checked the extractor, I realized that the zero quantity records were not exactly what I was expecting for. I was looking for zero quantity records for valid/active bins. But it seems that we are receiving 100's of zero quantity record for every material that we don't really care for anylonger. I definitely want to see the zero quantities in case the bin is active but we've just run out of material.
    I turned off the zero quantity collection in MCNB but at the end of run, it only over writen the 815000 records rather than deleting them all and collecting about 70,000 entries as expected.
    My question is how can we delete the results of a previous initialization of open stock transfer structure (trans# MCNB)so I can run it again?
    I'll appreciate any hints or comments.
    Thanks a lot.
    Bilal

    Hi,
    I assume using OLIX, we will be able to delete the data from either 2LIS_03_BX or 2LIS_03_BF. As opposed to using LBWG, where if we select '03' the data is cleared off from the set up tables of both datasources.
    If that is true, could you please mention the 'Info structure' to be used in OLIX for 2LIS_03_BX and 2LIS_03_BF?
    Thanks a lot.
    Regards,
    Sri.

  • How to get different sum value by different types of record in sql server

    Hi,I have my query result like below
    AppID       LabType      DiaType      LabPrice    DiaPrice
      1                
    a               
    b               100          1000
      1                 a               
    cc              100          1000
      1                
    aa              b               100          1000
      1                 aa              cc             
    100          1000
      1                
    aaa            b               100          1000
      1                 aaa            cc              100         
    1000
    from this query
    select
    app.AppointmentId,
    lr.LabPrice,
    lt.LabCategoryType,
    drt.DiagnosisReportType,
        dr.DiaPrice as diaprice,
         from Appointment app
        left join DiagnosisReport dr on app.AppointmentId=dr.AppointmentId
        left join DiagnosisReportType drt on dr.DiagnosisReportTypeId=drt.DiagnosisReportTypeId
        left join LabCategoryReport lr on lr.AppointmentId=app.AppointmentId
        left join LabCategoryType lt on lt.LabCategoryTypeId=lr.LabCategoryTypeId
        where app.DeleteStatus='N'
        and app.AppointmentId='MLM-Appointment-60314748311012015'
        and dr.DeleteStatus='N'
        and lr.DeleteStatus='N'
    But I want following one line result by getting two sum result for 3 different types of Lab and 2 different
    type of Dia.
    AppID       LabPrice    DiaPrice
      1               300          2000
    Please, can anyone give me any idea or help how to get only one record query result.
    Thanks in advanced.
    Superman

    Please follow basic Netiquette and post the DDL we need to answer this. Follow industry and ANSI/ISO standards in your data. You should follow ISO-11179 rules for naming data elements. You failed. You should follow ISO-8601 rules for displaying temporal
    data. We need to know the data types, keys and constraints on the table. Avoid dialect in favor of ANSI/ISO Standard SQL. And you need to read and download the PDF for: 
    https://www.simple-talk.com/books/sql-books/119-sql-code-smells/
    >> I have my query result like below <<
    So you show us a result and expect that we can guess! Wow! We are magical! Did you ever read Douglas Adams? The answer is 42! Now find 
    the question. 
    Also, you have things like “lab_category_type” in this code. Is it a category or a type? In a valid data model that follow ISO-11179 rules you could have a “lab_category” or “lab_type” but never a mixed hybrid. In one of my books, I had something like “lab_category_type_id”
    as a joke; it was so stinking awful that I never dreamed any programmer would really do this! 
    Also OUTER JOINs a rare in a valid schema. A good design will have DRI so you know you have matches. Since a table is a set, their names are plural or collective; but you have only one appointment according to your unseen DDL. And only one “Diagnosis_Report”,
    etc. 
    Now think about “Lab_Category_Types” as a table. Regardless of how this ambiguous mess is resolved, it will be an attribute. An attribute is in a column, not an entity like you are modeling it. If it has a few static values then use a CHECK( x IN (..)) constraint.
    If it is dynamic or large, then use a REFERENCES. Never use a join like this. 
    That silly, magical “delete_status” looks like an assembly language flag. This is what we did with tape files in the 1950's. We would have a bit in the front of records and flip it. Later a program would  move the active records to a new tape. Ask yourself
    why everything in the universe would share a common attribute. Such an attribute would be so generic as to be useless or (your case) it would be meta data and not part of the entity at all. Oh, rows are not records; you got that wrong too. 
    Why do you keep prices in integers? Currency is decimal. Sure wish we had DDL. My guess is that this should look more like this simpler, faster query. 
    SELECT APP.appointment_id,
           LT.lab_type, LR.lab_price,
           DRT.diagnosis_type, DR.diagnosis_price
     FROM Appointments AS APP
          LEFT OUTER JOIN
          (SELECT appointment_id, diagnosis_type,
                  SUM(diagnosis_price) AS diagnosis_price_tot
             FROM Diagnosis_Reports AS DR 
            GROUP BY appointment_id, diagnosis_type)
           AS DR 
          ON APP.appointment_id = DR.appointment_id   
           LEFT OUTER JOIN       
           (SELECT appointment_id, lab_type, SUM(lab_price)lab_price_tot
              FROM Lab_Reports
             GROUP BY appointment_id, lab_type)
           AS LR 
           ON APP.appointment_id = LR.appointment_id 
     WHERE APP.appointment_id = 'MLM-APPOINTMENT-60314748311012015';
    --CELKO-- Books in Celko Series for Morgan-Kaufmann Publishing: Analytics and OLAP in SQL / Data and Databases: Concepts in Practice Data / Measurements and Standards in SQL SQL for Smarties / SQL Programming Style / SQL Puzzles and Answers / Thinking
    in Sets / Trees and Hierarchies in SQL

  • Mapping one site collection to one record center

    hi,
    i would like to map one site collection to one record center
    is it possible 
    assume , am having  10 site collections, and if i create 10 record center site collections , how can i map these 10  site collections to 10 record centers.
    help is appreciated!

    Hi  Benjamin,
    Yes, you can map one site collection to one record center. Here is the steps you can refer to:
    Configure Send to locations for your Records Centers.
    Allow for sending outside the site.
    Create Content Organizer Rule to send to a record center for your Site  Collections.
    For more information, you can refer to the blog:
    http://blogs.msdn.com/b/mcsnoiwb/archive/2010/03/04/route-records-to-other-site-collections.aspx
    Best Regards,
    Eric
    Eric Tao
    TechNet Community Support

  • HOW TO COLLECT INCORRECT ITEM

    Hi Everyone,
    I have used Lsmw for PO uploading around 200 records in that 150 are uploaded successful remaining 50 are incorrect as follow's
    The Material XXXXXX is activated or doesn't exist.
    I know why was the above error because i haven't maintained material.
    How to collect the incorrect 50 records back.
    BR
    govind

    hi,
    well! i don't think there is any such table....you can create your own Ztable with the help of ABAP consultant....
    regards
    Priyanka.P

  • How to Delete the condition record in CRM

    HI,
    Can you please help me how to delete the condition record from condition table in CRM.
    Please explain the usage of FM CRMXIF_CONDITION_SEL_DELETE with examples.
    I have also read the documention of the function module. How to use this FM for custom defined condition table.
    (this is the code given in Documentation)
    DATA-OBJECT_REPRESENTATION         = 'E'
    DATA-SEL_OPT-CT_APPLICATION              = 'CRM'
    DATA-SEL_OPT-OBJECT_TASK                    = 'D'
    DATA-SEL_OPT-RANGE-FIELDNAME        = 'PRODUCT_ID'
    DATA-SEL_OPT-RANGE-R_SIGN                  = 'I'    (Including)
    DATA-SEL_OPT-RANGE-R_OPTION           = 'EQ'
    DATA-SEL_OPT-RANGE-R_VALUE_LOW  = 'PROD_1'
    Thanks
    Shankar

    Hi Shankar,
    I am using the same CRMXIF_CONDITION_SEL_DELETE function module to delete condition record present in CRM.
    But it is giving me below error in the return table of the FM after i run the program. Can you please correct me if I am doing any thing wrong?
    Error in  lt_return: SMW3     CND_MAST_SEL_DEL_EXT_VALIDATE     CND_M_SD
    code:
    ls_range-fieldname = 'PRODUCT_ID''.
    ls_range-R_SIGN = 'I'.
    ls_range-R_OPTION = 'EQ'.
    ls_range-R_VALUE_LOW = '123456'.
    APPEND ls_range TO lt_range.
    MOVE lt_range TO ls_entry-SEL_OPT-range.
    ls_data-SEL_OPT-object_task = 'D'.
    ls_data-SEL_OPT-ct_application = 'CRM'.
    ls_data-object_representation = 'E'.
    CALL FUNCTION 'CRMXIF_CONDITION_SEL_DELETE'
      EXPORTING
        DATA          = ls_date
    IMPORTING
       RETURN        = lt_return
    CALL FUNCTION 'BAPI_TRANSACTION_COMMIT'
      IMPORTING
        return = lt_ret.
    Edited by: Saravanaprasad Nadar on Jul 7, 2010 1:27 AM

  • Portal Master-detail form how to auto assign detail record sequence number

    Portal Master-detail form how to auto assign detail record sequence number.Please help me?

    You can just read the following section
    Can I specify a sequence number generator as the default value for a form column?
    Yes. Enter the following in the "default value" field for the column:
    #<schema name>.<sequence name>.nextval
    where <schema name> is the name of the schema containing the sequence, and <sequence name> is the name of the sequence. The entry is preceded by a "#".
    For example, if the schema name is "SCOTT", and the sequence name is "CUSTOMER_SEQ", the default value entry is:
    #SCOTT.CUSTOMER_SEQ.NEXTVAL
    same way you can do for master - detail form.
    for more information on forms please refer the following URL.
    http://otn.oracle.com/products/iportal/htdocs/portal_faq.htm#BuildingApplications
    hope it helps.

  • How to find the particular record in 1000's of workflow jobs are running

    Hi,
    In a data manager -> in workflow tab>IF a record is in CHECK-OUT MODE there are 1000's of jobs are running in that workflow tab. Can anyone tell me how to find that particular record in that workflow jobs.
    Can anyone show me the difference in getting a record in 5.5 and 7.1

    Hello COTI
    Unfortunatly, SAP MDM doesn't have good ability for  WF search.
    All WF clarify by it's status (unlaunched, avialable, Received, complited, error  etc.)
    For each WF SAP MDM assing unique Job ID and this id will be shown in Job ID field in Data Manager WF Tab.
    You can change WF list order by all WF fields like as Job ID, Step, User, Start etc. and try to find your's WF.
    You can use Java API - this is one of the best solution for WF management and WF mass upload  (for example)
    Regards
    Kanstantsin Chernichenka

  • How many Collections can you have in iBooks?

    How many Collections can you have in iBooks?  I have many and now I'm unable to add more collections.  Is there a way to add more collections/shelves?

    Hi Joe,
    There is no "upper limit" on the number of tasks that you can have in a plan. Having said that, the complexity of a plan -- including conditions and the use of external tasks -- can certainly be a factor in response times.
    Having said this, 30 seconds seems like a long time and I strongly suggest that you open a case with customer care on this item.
    We have alerted them to be looking for a case from you.

  • How to count number  of records for a field based on condition?

    Hi guys,
    I want to know how to find count of records coming from the database for a particular field based on some condition.
    I need to use this count to suppress some headers. Because of this i am not able to use running totals. Is there any other way?
    Ex scenario:
    I have account number and currency fields, those are coming from database. And i need to count the number of accounts whose currency is not Euro.
    Thanks in advance,
    Vijay.

    A simple formula can do that:
    //Formula begin
    if {your account field}<>"Euro" then 1
    //Formula end
    This formula can be summarized. (by group or report)
    Bryan Tsou@Taiwan

  • How to create A record on DNS server

    How do i create an A record on the DNS server (windows server 2008) that would resolve into two ip addresses: PUB & SUB ip addresses respectivly, to enable EM redundancy in Cisco Unified Communications Manager 6.1.
    Right now when the PUB failover to the SUB the EM does not work. the Phone services as well as the global directory does not work. the CUCM is fully integrated to LDAP.
    Cisco recomends using an SLB but right now i am trying to use the DNS option. what i need now is how to create the A record on the DNS that would resolve into the two ip address of the PUB and SUB.

    You can do this but your results won't be quite as expected.  I've played around with this and you'll see that the request for when you press the services button will go to server A, then when you click on the EM service your request will go to server B, then the login back to server A even though you started the login session with server B and back and forth, then with the authentication information, etc.  Also DNS doesn't know about the state of your servers.  If a server is down you'll still have issues if the name resolves to the down IP address.  As far as I've seen DNS will always round robin with multiple records for the same name (unless you use an SRV record).

Maybe you are looking for