Log a user activity

Hi. I want, for certain users, to log all activity within my database. I want to know every object they've accessed, every query issued, etc. Anyone know how to do this? I'm running 9i.
Thanks
KH

Check the Adminstrators Guide on how to use Auditing.
http://download-west.oracle.com/docs/cd/A87860_01/doc/server.817/a76956/audit.htm#1108

Similar Messages

How to log the user activity in JSF?

How to log the user activity in JSF?
e.g. the pages the user accessed
searching criteria the user inputted...

user080701 wrote:
I need to write the info to database so that we can analyse which product most people seach for , etc.
Can I write a filter to capture the request info and write the info to database?Of course. Although I would still advocate using logs. You can always parse them and put the data in a database after the fact.

Audit Current logged in User activity

Dear Legends,
As I am trying out to find who are all logged in to our Database and what are queries executed by the users. So while trying out the below query
QUERY
SELECT DISTINCT
USERNAME,
STATUS,
SCHEMANAME,
OSUSER,
MACHINE,
TO_CHAR(AR.LAST_LOAD_TIME, 'DD-Mon-YYYY HH24:MM:SS') LOAD_TIME,
ss.WAIT_CLASS,
ss.SECONDS_IN_WAIT,
ss.STATE,
ar.sql_text SQLTEXT
FROM
v$session ss,
v$sqlarea ar
WHERE
ss.MACHINE NOT LIKE 'ip%'
AND ss.STATUS = 'ACTIVE'
AND ss.SQL_ADDRESS = ar.ADDRESS;
The Issue is when I execute the above query it returns a valid output that I'm logged in from a machine and it's client as SQL DEVELOPER. But I'm not able to view the same queries output in SQLPLUS.... I have scheduled this into a cron so I need SQLPLUS to work this query.
Do you know why? Let me know your suggestions.
Note: I need this condition "ss.MACHINE NOT LIKE 'ip%'" if not it will fetch the hosted servers machine and user.
Thanks,
Karthik

I'm able to view output without the "ss.MACHINE NOT LIKE 'ip%'" which is fetching the INTERNAL ORACLE USER also. But I need only the USERS WHO are logged in from a REMOTE MACHINE using any tools except SQLPLUS, because We have restricted SQLPLUS access.
BELOW is the output from SQLPLUS
SQL> SELECT DISTINCT
USERNAME,
2    3    STATUS,
4    SCHEMANAME,
5    OSUSER,
6    MACHINE,
7    TO_CHAR(AR.LAST_LOAD_TIME, 'DD-Mon-YYYY HH24:MM:SS') LOAD_TIME,
8    ss.WAIT_CLASS,
9    ss.SECONDS_IN_WAIT,
ss.STATE,
10   11    ar.sql_text SQLTEXT
12 FROM
13    v$session ss,
14    v$sqlarea ar
15 WHERE ss.STATUS = 'ACTIVE'
16 AND ss.SQL_ADDRESS = ar.ADDRESS;
USERNAME                       STATUS   SCHEMANAME
OSUSER
MACHINE
LOAD_TIME
WAIT_CLASS                                                       SECONDS_IN_WAIT
STATE
SQLTEXT
APPS                           ACTIVE   APPS
oracle
ip-10-20-30-40
27-Jan-2014 15:01:17
Idle                                                                           5
WAITING
begin fndcp_tmsrv.read_message(:ec, :to, :typ, :enddt, :rid, :retid, :nl, :nc, :
dl, :secgrp, :usr, :rspap, :rsp, :log, :app, :prg, :argc, :orgt, :orgid, :a1, :
a2, :a3, :a4, :a5, :a6, :a7, :a8, :a9, :a10, :a11, :a12, :a13, :a14, :a1
5, :a16, :a17, :a18, :a19, :a20); end;
APPS                           ACTIVE   APPS
oracle
ip-10-20-30-40
28-Jan-2014 22:01:48
Network                                                                        0
WAITED SHORT TIME
SELECT DISTINCT   USERNAME,   STATUS,   SCHEMANAME,   OSUSER,   MACHINE,   TO_CH
AR(AR.LAST_LOAD_TIME, 'DD-Mon-YYYY HH24:MM:SS') LOAD_TIME,   ss.WAIT_CLASS,   ss
.SECONDS_IN_WAIT,   ss.STATE,   ar.sql_text SQLTEXT FROM   v$session ss,   v$sql
area ar WHERE ss.STATUS = 'ACTIVE' AND ss.SQL_ADDRESS = ar.ADDRESS
                               ACTIVE   SYS
oracle
ip-10-20-30-40
27-Jan-2014 15:01:16
Idle                                                                           0
WAITING
update seg$ set type#=:4,blocks=:5,extents=:6,minexts=:7,maxexts=:8,extsize=:9,e
xtpct=:10,user#=:11,iniexts=:12,lists=decode(:13, 65535, NULL, :13),groups=decod
e(:14, 65535, NULL, :14), cachehint=:15, hwmincr=:16, spare1=DECODE(:17,0,NULL,:
17),scanhint=:18, bitmapranges=:19 where ts#=:1 and file#=:2 and block#=:3
APPS                           ACTIVE   APPS
oracle
ip-10-20-30-40
27-Jan-2014 15:01:17
Idle                                                                           4
WAITING
begin fndcp_tmsrv.read_message(:ec, :to, :typ, :enddt, :rid, :retid, :nl, :nc, :
dl, :secgrp, :usr, :rspap, :rsp, :log, :app, :prg, :argc, :orgt, :orgid, :a1, :
a2, :a3, :a4, :a5, :a6, :a7, :a8, :a9, :a10, :a11, :a12, :a13, :a14, :a1
5, :a16, :a17, :a18, :a19, :a20); end;
APPS                           ACTIVE   APPS
oracle
ip-10-20-30-40
27-Jan-2014 15:01:17
Idle                                                                           3
WAITING
begin fndcp_tmsrv.read_message(:ec, :to, :typ, :enddt, :rid, :retid, :nl, :nc, :
dl, :secgrp, :usr, :rspap, :rsp, :log, :app, :prg, :argc, :orgt, :orgid, :a1, :
a2, :a3, :a4, :a5, :a6, :a7, :a8, :a9, :a10, :a11, :a12, :a13, :a14, :a1
5, :a16, :a17, :a18, :a19, :a20); end;
SQL>
Message was edited by: karthiksingh_dba

Logging File Management Activity

We are trying to figure out if Dreamweaver keeps a text file that logs the history of renaming and moving files within a site. We want a list of both the old and new file name and path for each file moved and/or renamed within Dreamweaver. We tried the "Log..." button below the Files pane in Dreamweaver 8, but after making some test changes we found that it lists "File activity complete" for each change made instead of the specific changes applied. Is there a way to get this list? Or do we need to use subversion software in order to do this?
Thank you!

The log feature is meant for syncing local vs. server. If you must track local changes, indeed you will need to use other tools. I'm not sure how you fall for Subversion, though. Since it uses explicit check-in/check-out it doesn't really track anything automatically and its primary purpose is documenting changes inside specific files, anyways, not their location. It would also many times duplicate files rather than just move them, as it uses its own versioning. What you want could be achieved using tools like GridIron Flow or, most simply, by configuring your intranet file server software to use shadow copies and log all user activity.
Mylenium

Path of logs of user in CMC

Hi
Does CMC has log where user activity gets tracked down on various parameters such as creating new user,assigning user groups, providing him the access groups,etc ?
Also, If some one can provide me path on the same would help.
I believe that for Audit purposes, these activities might get monitored, but what would be significance to it is what I'm wondering.
Any pointers would help.
Thanks in advance,~S

Hi Sachin,
Please go through following article by Manikandan. Its very detailed and well described. It should solve all your doubts:
http://scn.sap.com/community/bi-platform/blog/2013/01/07/sap-businessobjects-40-auditor-configuration-deployment-end-to-end

What is a "logged in user" on the "Active Sessions" report in CF8 Server Monitor?

I was looking at the Active Sessions Report (The Chart View) and saw I have more "logged in users" than "active sessions".
I had expected them to be nearly the same.    It's on our Intranet where I log users in (using cflogin and cfloginuser) at the begining of their session and users should be logged when the session ends.
I couldn't find a detailed explaination of what a "logged in user" means.   There is a chance that the same user is logged into a nested application as well as the Intranet, but I don't think that is what I'm seeing.
I also don't see a way to get a list of what CF is counting as a logged in user. I can only see a way to get the total count.
Any help is appreciated.
Thanks,
Jeff

Thank you Michael for the reply, but I don't think that is the issue.
When a user opens their browser on the intranet, a session begins and they are logged in (using the cflogin and cfloginuser).    If they close their browser, the session should hang around for 20 min. (per the server setting).   I am assuming this is still considered an "Active Session" since I can see this behavior in the report.
At first, the Active Sessions and Logged In Users are exactly the same.   When the sessions start to time out, the active sessions are reduced, but the Logged In Users remain the same.    Then, after a while, they start to move together. So I have more Logged In Users than Active Sessions.
I left the Server Monitor open last night and for most of the night, I had 0 sessions, but 57 "logged in users".   This morning, as people opened their browsers, the Active Sessions and Logged In Users moved together.   The gap of 57 looks consistent.
It looks like people are remaining logged in after their session ended.
I am really looking for a detailed explaination of "active session" and/or "logged in user" as used in the server monitor. It would be really nice to find a way to list the details about each item counted in the "logged in user" and not just the total count.
Thanks Again for your reply.
jsm

SCCM report to show last logged on user and the Active Directory department attribute of that user.

I need to create an SCCM report to show last logged on user on all machines and the Active Directory department attribute of that last logged on user.

You problem is here.
right
join v_R_User USR on USR.ResourceID
= CS.ResourceID
USR.ResourceID != CS.ResourceID, you need to map the username to the user logon to the PC. By using the user’s department information you will
end up with unreliable results.
Anyways you need to make these changes to your query.
left
join v_R_User USR on USR.Unique_User_Name0
= CS.UserName0
http://www.enhansoft.com/

Urjent:Partition error:Logging out user [Admin], active for 0 minutes

Hi all,
Iam using 11
Wen iam creating Transaparent partition its validating successfully , but wen iam saving it its giving error , partition creation failed
Error: 1051037: Logging out user [Admin], active for 0 minutes
and it s giving error reading ddb file
i tried with maxl also but it continiously running for 30 mints , its horrible , actually it takes 2 mints
how can i resolve this issue, any help would be appriciated
thanks
Edited by: user8815661 on 26 avr. 2010 05:18
Edited by: user8815661 on 27 avr. 2010 04:00
Edited by: user8815661 on 3 mai 2010 04:18

Sounds like there is some sort of ddb file corruption. There are many causes, but the quickest fix I have found is usually a file-based deletion of the ddb file on both the source and target side of this partition. The attempt to create a partition on this database will cause a new ddb file to be created. Of course, this is dangerous. You can't have any other partitions on either the source or target side...or they will be deleted by this step. But the only purpose of the ddb file is for partition definitions, and it exists on both source and target.
I've found this happens if one side of a partition (one of the ddbs from source or target) gets the file deleted, or communication is down between the source database server and target database server.

Tracking User Activity with Standard Web Logs and Tools Like WebTrends

We are running EP 6 SP14 on UNIX and I'm looking to track user activity. Not just how many people have logged in, but who is accessing what documents in KM. For example, what documents are the most popular and how much use the system is getting.
I was hoping that EP 6 (Unix platform) ran off us some standard web engine (like Apache) and we could just turn web logs on, but from the lack of discussion on SDN, I'm not encouraged.
All I've seen is unofficial link to a Portal Activity Report, which would get us part of the way, but is not full web reporting.
Portal Activity Report:
https://www.sdn.sap.com/irj/sdn?id=/library/uuid/0101b690-0201-0010-6584-a02730ad5edd
Does anyone have any insight on this?

HI llise
Did you get any answers? We are in the same quandry as the exisitng tracking reports are not sufficient for our needs as our users are used to using more sophisticated tools like livestat.

How to trace user activity like logs in pl/sql ?

Hi,
i would like to know is there an a way to trace the user activity like log can be done through any procedure ?
If you can tell me the related tables is enough . i can proceed further ?
Thanks
Rangan S

If you want to trace SQL statements, you can use SQL trace and TKPROF: http://download.oracle.com/docs/cd/B19306_01/server.102/b14211/sqltrace.htm#i4170
Edited by: P. Forstmann on Jul 31, 2009 10:05 AM

Oracle 9i and user activity logging

Hi,
i am new on the matter but i have to trace the user activity and build a small application.
those are the specifications :
i'm using oracle 9i database version on 64 bit
the O.S. used is Unix Aix 5.2
for each data base we using i have to trace the user activity all of them, about 3 DB + application
i have create some some triggers to get some information, but still the work is there :
create trigger ... after logoff on database .. begin insert into table xx_tab ( ,,,,) end ;
create trigger ... after ddl on database .. begin insert into table xx_tab ( ,,,,) end ;
create trigger ... after logon on database .. begin insert into table xx_tab ( ,,,,) end ;
create trigger ... after servererror on schema .. begin insert into table xx_tab ( ,,,,) end ;
Here is the issue i am faced to /
how could we simulate a create trigger ... after DML on database or schema ? as far as i know we trigger a DML only on a specific table. Is there any possibility to trigger a DML on any database object or schema?
for the moment i don't know if it 's the good think to do but, but it's a try, if you have any idea or other methods to trace the user activities on DB, please don't hesitate to get me informed.
Rgds,
Paul

This is the forum for the SQL Developer tool. You'll get more answers in the General or SQL And PL/SQL forums.
Regards,
K.

APEX... USER ACTIVITY LOG

Hi,
Is there a way I can track user activity... need to know who loged into the application and how many times and which pages were reviewed...
I believe this is something that already exists within APEX, as a new Bee need some directions...
Thanks

Hello 'user12863454',
This is an old thread but wasn't sure if you had got the answer for it. Just in case, if you haven't, here's something you could try.
1) Login to APEX as an apex administrator
2) On top right region --> Monitor Activity (you'll see this only if you are an administrator)
3) This should take you bunch of existing links (apex built-in reports) that also shows what you need
- Page views by User, by Application, etc
Hope this helps.
Of course, all this information is stored in 'apex_activity_log' (built-in view). Remember, as the previous Forums user posted, this data is stored only for '4 weeks' and if you need historical information then you'd have to build a custom table and custom code to store the data.
Regards,
Taj

Sharepoint 2013 delivers documents through IIS too good! Need to restrict by logged in user

I have a Sharepoint 2013 app that lets external users (https://) pull data from SQL to create links on the page that the user can click on to get documents to pop-up in the browser so they can view/save them. The page sends the user's ID as a parameter
and the stored proc uses that to return only the documents that user is allowed to see. Took forever to figure out... looks great... my employer is going to be impressed and save money... yada, yada yada! Problem is: If you knew the name
of a directory on the mapped location and knew the filename (somehow), and you had a login that got you to the site, you could successfully put that address in your address bar and the document would come up! That's a bad thing! I need to only
let users see documents they have access to.
I have been playing with the app pool settings and advanced settings for the sub-site, but it still lets me pull items that the logged-in user doesn't have permissions on the server to get to. I haven't been able to prove it, but I suspect that IIS
is sending another login credential to the directory to retrieve the file... something like "admin" or something that can have wider access.
Here is my setup: I have a directory on another server that is mapped to the Sharepoint Server box. I have a Virtual Directory that points to that mapped drive. My Sharepoint Page is on a site of its own and is called with the URL "https://reportcenter.<company
name>.com". There is only one page on the site. When the page opens it provides links to documents on the Virtual Directory. When you click on any of them the files appear in the browser just fine. Sharepoint is running on a
Windows 2012 R2 Standard OS. The test user I am using is "Client1" and they are a member of the "SP_Clients" group which is not a member of anything else in Active Directory. In the file directory I went to the Share list and
made sure my test user and the SP_Clients group is not in the list... if the system tried to use Client1 there is no way they should get access.
Any thoughts on what I can do to stop Clients from getting to files they shouldn't be?

Thank you for your question and reply.
No, the identity is not passed as a URL property. The way it works is that SP verifies the user and sends them to the default page after they sign-in. Once there, the page evaluates the UserID value and that values is passed to a stored procedure
as a parameter. The user can't get to the page unless they are verified by SP, they can't somehow go around this.
Now, once the page loads they click on one of files they wish to see (a link on the page that was created from the results of the stored procedure call). The link points to a virtual directory setup in IIS that points to a mapped drive where the files
are located. The security on the files is set on the directories in their actual location. I just need SP to pass the user's ID to the file directory and check the sharing rights on the file to see if this user has rights to get it. It seems
like SP is passing some other credential (probably SP_Admin, or Admin or something) which has the ability to read the file and therefore pass it back to the screen.
I can't put the documents in SharePoint... they have to be in a file directory. The reason is that we have an elaborate program that runs every month to create these files and places them in the correct directories. Somehow changing that application
to create the files and place them programmatically in a SharePoint directory is beyond the scope of the project. Under the circumstances, it would be much simpler to just provide the user a list of the documents they have access to and have them click
on a link on a page and have the document appear in their browser. Everything actually works, but I just have this last piece where SP is not 'telling' the file directory the UserID of the logged in user and therefore all the documents are available.
All that needs to be done, is to make sure the userID is passed to the file directory so it can be checked against the security there to see if the user can have the file or not.
I hope that makes sense. I look forward to hearing back from you with your thoughts on this and how this can be accomplished.
Thanks,
Scott

What happens to a logged in user?

Sorry for the newbie question, but I'm a recent "switcher". I need to access my new iMac from work pc and plan on using VNC or something similar. (I could use my Mac laptop and Apple Remote Desktop, too). I was just wondering what will happen if my wife is logged into the iMAc at home when I log in? Under Windows, she would be booted off, but I was reading about 'fast user switching' and it made me think there might be a way for me to log into the machine under my account, and allow her to continue working on the machine under her account? Pipe dreams?
Thanks
20" iMac intel & 15" powerbook & Windows XP Mac OS X (10.4.6)

only one account can be logged in and actively using the Finder and GUI at a time. thus, you can't login and control the computer at the same time your wife is. nothing exist for Macs that allows this.

Connected to Domain but can't log in using Actived Directory Credentials

Hey everyone. I've been working on this issue for two weeks now, and I don't know what else to try. I'm connected to my domain but cannot get my Macbooks to log in using Active Directory credenitals both through our wireless network, and hard wired with an ethernet cable. The weird part about it is that it is not uniform all across our network. This only happens to certain Macbooks and as of right now there doesn't seem to be a pattern. I can say that it has happened to all new Macbook Pros that we have ordered lately though.
We use Jamf to manage our Macs on our network, and ever since upgrading to a new version (9.01 and now 9.1) we have had this issue. However I can't connect after manually adding the domain either, so for now it makes me think it is not a Jamf issue. Has anyone dealt with this issue before, that might know of a fix? Thanks!

Hi Burnettb1,
I have come across a similar issue as yours. I have included the instructions that I use to bind the Mac at my institution. In regards to wifi, I have not tried binding the Mac over wifi. Should you need to log in to a Mac with domain user credentials I would suggest to bind the Mac over ethernet. Once you get to the:
*Click on triangle to the left of Show Advanced Options to expand"
portion of the instructions click on the Mappings tab and select the checkbox for creating a mobile account at login. This will create a domain user profile on the machine that you can log into when not connected to the domain.
Hope this helps.
BIND iMac:
          Login into iMac using administrative credentials
          Open System Preferences
                    *Goto Users & Groups
                    *Click on lock in lower left-hand corner
                    *Use same password used to log into iMac
                    *Click on Login Options
*Click on ‘Join...’ button right of "Network Account Server: "
                    *Click on ‘Open Directory Utility…’ button
                    *Click on lock in lower left-hand corner
                    *use same password used to log into iMac and click on Modify Configuration
                    *Double-click on Active Directory
Active Directory Domain = domain
                              Computer ID = name of Mac
                    *Click on triangle to the left of Show Advanced Options to expand
                              *Click on Administrative tab
                              *Check Prefer this domain server
Type domainserver_ipaddr -or- servername.domain in this field
                              *Click on ‘Bind…’ button
                              *When prompted for network administrator login
                                        username = [domain admin user]
                                        pwd = [domain user password]
                              *Click OK (Note: search path will be updating. Until completed the ‘OK’
button will be greyed out
*Click OK
*Click lock to lock and close window
                    *Click lock to lock and close window
BIND CHECK:
          *Search AD for added mac host - it should be there.
          Open Terminal app by either:
                    1)
                              *Press command+spacebar
                              *Type Terminal and select app
                    2)
                              *Click on desktop
                              *Press shift+command+A
                              *Goto Utilities folder located within Application folder (which you should
be in) and open Terminal
          *Once Terminal is opened type in id [domain username] and press return key. The output should be
some some network account information
          *Close app by pressing command+Q and any other opened windows
          *Restart iMac
          *Log in

Log a user activity

Similar Messages

Maybe you are looking for