Send audit information to  mail acount using fined-grained auditing

hi.
i like to send audit information to particular mail account. but i have failed.
is any one can help me. i have writtten step by step what i have done for my work. my mail server work properly.
SQL> CONNECT SYS/PAS AS SYSDBA
after that i have created a procedure called "FGA_NOTIFY" to send mail WHEN user used SELECT command on sal column in emp table other than SCOTT. Then i have added a policy that is given belllow.
But The problem is now when sys user or any other user give command like
sql> select sal from scott.emp;
oracle server didnot send audit information mail to mail server. but
if i execute procedure "FGA_NOTIFY" independently , procedure send mail.
please help me. i have given procedure and
policy code down.
This is my policy
BEGIN
DBMS_FGA.add_policy(
object_schema => 'SCOTT',
object_name =>'EMP',
policy_name => 'Example',
audit_condition => 'ENAME != USER',
audit_column => 'SAL',
handler_schema => 'SYS',
handler_module => 'FGA_NOTIFY');
END;
THIS IS MY PROCEDURE
CREATE OR REPLACE PROCEDURE fga_notify (
     object_schema VARCHAR2,
     object_name VARCHAR2,
     policy_name VARCHAR2)
AS
     l_messege VARCHAR2 (32767);
     l_mailhost VARCHAR2 (30) :='rmail';
     l_mail_conn UTL_SMTP.connection;
     l_from VARCHAR2 (30):= 'admin@rmail';
     l_to VARCHAR2 (30):= 'admin@rmail';
BEGIN
l_messege :=
     'User'||USER
     ||'successfully accessed'||Object_schema||'.'
     ||object_name||'at'
     ||TO_CHAR (SYSDATE, 'Month DD HH24 :MI:SS')
     ||'with this statement :"'
     ||SYS_CONTEXT ('userenv','currrent_sql')
     ||'"';
l_mail_conn :=UTL_SMTP.open_connection (l_mailhost,
25);
UTL_SMTP.helo (l_mail_conn, l_mailhost);
UTL_SMTP.mail (l_mail_conn, l_from);
UTL_SMTP.rcpt (l_mail_conn,l_to);
UTL_SMTP.DATA (l_mail_conn,
          UTL_TCP.crlf||'subject: FGA Alert'
          ||UTL_TCP.crlf
          ||'To:'
          ||l_to
          ||UTL_TCP.crlf
          ||l_messege);
UTL_SMTP.quit (l_mail_conn);
EXCEPTION
WHEN OTHERS THEN
     UTL_SMTP.quit (l_mail_conn);
     raise_application_error     (-2000,'Failed due to the
following                          error'||SQLERRM) ;
END;
Message was edited by:
Md Ruhul Amin

Alok brother, thank you for advice. About FGA concept i got from book. this PL/SQL code i got from that book. The book name is "Effective Oracle Database 10g Security by Design" and the writter name is "David Knox". if you send your e-mail address , i could send scan copy of this topic from this book.
my e-mail address is <[email protected]>. i am waing for you reply

Similar Messages

  • Error in using fibne grained auditing

    Hello,
    I am trying to implement fine grained auditing on SAL column of my Employees table as I suspect that someone is updating values.
    I am using the system user to implement this. But when I try to use the following syntax I am getting an error "ORA-00900: invalid SQL statement"
    EXEC DBMS_FGA.ADD_POLICY(object_schema =>'hr',object_name =>'employees',policy_name =>'chk_pol',audit_condition =>'1=1',audit_column=>'salary');
    Can anyone help me out in correcting this error.
    Regards,
    Faiz Qureshi
    Email : [email protected]

    begin
    dbms_fga.add_policy
    (object_schema => 'scott',
    object_name => 'emp',
    policy_name => 'chk_pol',
    audit_condition => '1=1',
    audit_column => 'sal');
    end;
    SQL> /
    PL/SQL procedure successfully completed.
    *I used sal column and emp as a table name.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       

  • Fine-grained auditing

    Is there any way to audit more than one table using fine-grained auditing in oracle 10.2.0.
    Thnks in advance.

    sonidba wrote:
    Is there any way to audit more than one table using fine-grained auditing in oracle 10.2.0.
    Thnks in advance.Read this
    Re: use multiple tables in FGA Add_policy?

  • How to stop the information broadcasting mail if the output of the query is

    Hi everyone, We have a requirement to not to send the information broadcasting mail in case if the query output is blank (ie no applicable data). However as per the schedule the mail should go in case if there is applicable data. In other words, users are not interested in opening the broadcasted mail to see if there is any applicable data or not. Inputs will be certainly rewarded
    Kathir

    Hello,
    Create an exception or condition for this report then use the "broadcast according to exceptions" option.
    Regards,
    Michael

  • AIS (Audit Information Systems) and Process controls

    Dear Experts
    Have you seen any customer using AIS (Audit Information Systems) and Process controls, simultaneously for Audit purposes? Can we use the GRC Process Controls for Scheduling regular Audits, inaddition to the Internal Control Assessments?
    Thanks & Regards
    Swarna

    Hi Swarna,
    Have you seen any customer using AIS (Audit Information Systems) and Process controls, simultaneously for Audit purposes?
    Yes. AIS is purely in SAP users and authorizations,  and PC can be used at different levels.
    Can we use the GRC Process Controls for Scheduling regular Audits, inaddition to the Internal Control Assessments?
    The data from the PC is used in the ICAs. So PC itself can't/may not provide all the information that is required by the auditors.
    Regards,
    Raghu

  • Cannot send email in mail app. using POP account with Wi-Fi

    I recently moved to an apartment that only has wireless internet access. Since moving I cannot send email using my POP account, although I can receive email. I was also not able to receive email using my .mac account, but I learned through this forum to change server port to 587 in .mac account and now I can send via .mac account in mail app. But I still cannot sent email with mail app. using my POP account. I changed no settings when I moved, and have never had this problem with cable. Any suggestions?

    It all depends on the policy of whoever is the ISP at your new location and the method used by the outgoing (SMTP) server to determine whether you’re a legitimate user.
    In an attempt to fight spam, many ISPs restrict the ability to send using an outgoing (SMTP) server not owned by them, usually by blocking port 25 for all traffic outside their own network, which means you cannot send with an SMTP server not owned by them if configured to use that port number. And it may happen the other way around as well, i.e. the outgoing server itself may look at the IP address you’re connecting from and refuse the connection if you’re outside its own network.
    Something that often works is changing the outgoing server port to 587 (or whatever alternate port number the outgoing server listens to) instead of 25 and using some form of authentication in Preferences > Accounts > Account Information > Outgoing Mail Server > Server Settings, but two conditions must be satisfied for this change to work: (1) the ISP must not block that port as well AND (2) the outgoing server in question must listen to that port and accept a form of authentication not based on the IP address you’re connecting from.
    Independent mail service providers not tied to a particular ISP, such as .Mac and Gmail, do allow authenticated SMTP access on port 587, which is the reason changing the outgoing server port number solves the problem for them if the ISP doesn’t block that port as well.
    The following article, for example, describes several ways to address this issue in the case of .Mac, but can be useful for other mail accounts as well (not just .Mac), and applies to all versions of Mac OS X (not just Mac OS X 10.4.2 and earlier as the article states):
    .Mac: Server timeout alert message when sending email

  • Mail Merge using HTML Office 2010 Service Pack 2 doesn't send

    I have a user who sends out mailings several times a week using a Microsoft Word Mailmerge.
    He recently had his physical PC upgraded and we gave him a computer with a fresh install of the same programs he had before.
    When the mail merge is accessed everything seems to work fine (selecting the excel list of addresses to send to, specifying the recipient list, and going to send the mail merge we select the e-mail address column as the To list and the format as HTML and
    select Send)
    Once the send button is pressed it shows the working mouse pointer icon temporarily and then nothing.
    I check outlook to see if the E-mails sent and there are none listed.
    This same process works on another user's computer just fine and will send out the e-mails.
    I have attempted the below troubleshooting steps:
    I verified that all updates/service packs are installed.
    I verified that the AV is listed as "Valid".
    I disabled the AV during a test send and it still did not work.
    I verified all the settings on both workstations to see if there are any differences and I was unable to find any.
    I rebuilt the Outlook Profile.
    I uninstalled and re-installed MS Outlook.
    I checked to ensure Outlook was the default e-mail program in Default Programs.
    I checked to see  that Word is the default HTML program in internet option settings.
    I checked to see if there was a 64 bit registry key in place that could cause problems and there has never been any 64 bit MS Office applications installed and so I did not find any.
    Plain Text mailmerge works with one caveat.
    I get an Outlook pop-up stating "A program is tryign to access e-mail address information stored in outlook. If this is unexpected, click Deny and verify your antivirus software is up-to-date. For more information about e-mail safety and how you might
    be able to avoid getting this warning click Help" (this pop-up happens for each message that is being sent so a 50 person mailmerge asks 50 times)
    And it shows a box where I can select Allow access for a specific time frame (10 minutes or less) and then 3 buttins "Allow" "Deny" and "Help"
    Clicking help bring me to MS Office help menu that didn't explain anything close to the problem I was having and did not "HELP"
    This is beginning to frustrate the user and I am running out of ideas to fix the problem. My next step was going to be attempt to re-install the OS at this point.
    Anyone have any ideas?
    Thanks,
    Whyitsme84

    The Mail Merge was created using a different computer/user.
    I have not attempted to create another mail merge from his account; I will try this and get back.
    I have compared the options/settings from that and another user as I stated above.
    Which registry keys would I import? I don't want to go importing keys and have it break something else.
    They are not any add-ins on either PC that are different from each other; and as I stated above I have tried starting it in safe mode.
    Anti-Virus is up to date; Also I even disabled the Anti-Virus to see if that changed anything, and it did not.
    I will try creating a new mail-merge to see if somehow it creates a settings somewhere that will allow it.

  • Security information send to an old mail address

    Wanted to change my password through manage apple ID.
    However, an old (and non accessible) mail address is being used for sending security information.
    I've changed my primary mailaddress (and a second mail address) months ago: boths are apparently not being used.
    How to resolve?
    Thea

    Alternatives for Help Resetting Security Questions and Rescue Mail
         1. Apple ID- All about Apple ID security questions.
         2. Rescue email address and how to reset Apple ID security questions
         3. Apple ID- Contacting Apple for help with Apple ID account security.
         4. Fill out and submit this form. Select the topic, Account Security.
         5.  Call Apple Customer Service: Contacting Apple for support in your
              country and ask to speak to Account Security.
    How to Manage your Apple ID: Manage My Apple ID

  • Mavericks Mail won't send login information to IMAP server

    I am having a problem with Mavericks Mail not connecting to the Dovecot IMAP server.  There appears to be many posts about similar problems, but none have the exact symptom I’m seeing.
    Mail appears to not provide login information to any of my IMAP accounts.  The iPad, iPhone, and Thunderbird on the same Mac all work with the same credentials.  Just Apple Mail on the Mac fails.  It fails for all user accounts on the same Mac.  This has been a problem for a long time.
    Connection doctor seems to indicate Mail is not sending login information.  In fact, connection doctor shows the only thing working is the smtp server that doesn’t require a login.  Everything else fails.
    I’ve rebooted the Mac and the mail server.
    I’ve repaired disk permissions.
    I’ve recreated the account.
    I’ve create a brand new account.
    I’ve removed cache files.
    I’ve re-indexed mail files.
    Nothing works. 
    Here is the relevant connection doctor log:
    INITIATING CONNECTION Jul 24 19:59:13.847 host:**********.*****.*** -- port:993 -- socket:0x0 -- thread:0x608000868640
    CONNECTED Jul 24 19:59:13.939 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:**********.*****.*** -- port:993 -- socket:0x6000002d97c0 -- thread:0x608000868640
    READ Jul 24 19:59:13.939 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:**********.*****.*** -- port:993 -- socket:0x6000002d97c0 -- thread:0x608000868640
    * OK Dovecot ready.
    WROTE Jul 24 19:59:13.939 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:**********.*****.*** -- port:993 -- socket:0x6000002d97c0 -- thread:0x6080002687c0
    1.20 CAPABILITY
    READ Jul 24 19:59:13.940 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:**********.*****.*** -- port:993 -- socket:0x6000002d97c0 -- thread:0x6080002687c0
    * CAPABILITY IMAP4rev1 SASL-IR SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS UIDPLUS LIST-EXTENDED I18NLEVEL=1 AUTH=PLAIN
    1.20 OK Capability completed.
    WROTE Jul 24 19:59:13.944 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:**********.*****.*** -- port:993 -- socket:0x6000002d97c0 -- thread:0x60800046e080
    2.20 AUTHENTICATE PLAIN
    And the relevant Dovecot log entries:
    dovecot: Jul 24 19:59:13 Info: auth(default): client in: AUTH 1 PLAIN service=imap secured lip=***.***.***.*** rip=***.***.***.*** lport=993 rport=60869
    dovecot: Jul 24 19:59:13 Info: auth(default): client out: CONT 1
    dovecot: Jul 24 19:59:13 Info: imap-login: Disconnected (auth failed, 1 attempts): method=PLAIN, rip=***.***.***.***, lip=***.***.***.***, TLS
    I believe the “WROTE” log line in Mail cooresponds to the “client in” line in Dovecot.  The next line is a continuation going back to Mail.  But, Mail never seems to read or process it.  When Dovecot gets a successful login from Thunderbird, the login credentials were displayed in the log with another “client in” line.
    Here is what I am using:
    OS X 10.9.4
    Mail version Version 7.3 (1878.6)
    Dovecot version 1.1.7
    Where do I go from here?  Has anyone seen this symptom before?  How do I get Mail to send credentials to an IMAP server?
    Thanks from a first time poster !

    Try MD5 as the authentication method.

  • After updating my iPhone 4 to 5IOS my letters from my mail(i use google) does not send

    After updating my iPhone 4 to 5IOS my letters from my mail(i use google) does not send

    I tried that but I still got the message "Unable to verify account information."  I saved it anyway and when I go to the Exchange email account it says "Cannot Get Mail" "The connection to the server failed."  We are running Microsoft Exchange 2010 and I was always able to sync my calendar and email before I upgraded to IOS 6.

  • Issues with sending mail when using 2 email accounts - possible bug?

    Hi all,
    Having issues with trying to send email from the 3g iPhone. I have 2 IMAP acounts set up on the phone, one
    which works fine but when I try to create mail from the primary account as soon as I hit send it exits the mail program and goes back to the home screen.
    Both IMAP accounts have identical settings apart from the username and email address. On the primary account there is no sent messages folder on the iPhone whilst there is on the account that works. I've had a look in the advanced settings and it is programmed to store sent messages in the local sent folder which doesn't exist. I've tried selecting it to store in a IMAP folder as I thought maybe it was crashing as the local folder wasn't there but it has the same result.
    Have deleted the account and entered the settings back in again to try to coax it to create the local sent folder but cake up with the same problem.
    Suggestions are welcome.

    You have their SMTP servers mixed up, go to Mail>Preferences>Accounts>Outgoing Mail Server (SMTP), click on the server then choose Edit SMTP Servers and select the correct one for each account. Then check the Use Only This Server box

  • Sending mail while using AOL

    I log on via AOL through the modem. When I open my Mail application to check my .mac account it receives email no problem. I cannot send email for some reason using the Apple Mail application. (message i get)
    "Use the pop-up menu below to try a different outgoing mail server. All messages will use this server until you quit Mail or change your network settings."
    The Mail Connection Doctor message is "Trying to log into this SMTP account failed. Please make sure the username and password are correct"
    My username and password are correct.
    Any help?

    You're welcome.
    Although your Mac experience is only a month old, how often did you use your Windows laptop to send messages with these accounts when at this airport or when on the train - or I should ask, when was the last time you did so with your Windows laptop?
    If you can send messages with all 3 accounts using the authenticated SMTP server for each when connected to the internet via your ISP at home, this is not a Mac or Mail.app problem.
    Either the SMTP server settings are not 100% identical as the settings with Outlook or the internet service providers associated with the WiFi network at this airport and on the train have made a change.
    Next time when connected to the WiFi network at this airport and/or on the train, try using your .Mac account and authenticated SMTP server to send but disable the authentication for the .Mac SMTP server first. Go to Mail > Preferences > Accounts and under the Account Information tab for your .Mac account preferences at the SMTP server selection, select the Server Settings button below for the .Mac SMTP server.
    Select None instead of Password for the Authentication and when finished, select OK to save the changed setting.
    For the problem when connected to the internet via your parent's ISP at their home, try entering 587 in place of 25 in the Server Port field - for the .Mac SMTP server and also for the other two SMTP servers used with these IMAP accounts not provided by your ISP.

  • How many mails i can send at a time per day using APEX mail system?

    HI,
    I am working on application, when i have written a process to send mail, i have a project where i have to send mail at a time for all the email id's
    given list there are upto 5000 email id's where text body also include certain set of data from a report. thinking at a time 3000 its difficult i divided
    it region wise, but still each region have 2000 odd email id's. during testing when i run the process just 950 mails i could send then i got a error
    saying "ORA-20001: You have exceeded the maximum number of email messages per workspace. Please contact your administrator." so please
    can any one help me to know How many mails i can send at a time per day using APEX mail system?
    Thanks in advance
    Gowthami

    Hi jfosteroracle,
    You are getting the error may be the following reason,
    Check the following,
    Login as ADMIN and Goto -->Manage Instance-->Instance Settings--> Mail-->Maximum Emails per workspace
    Actually this number denotes the Number of mails can be sent per 24 hour for the workspace,It may exceeded.
    It may be the reason.
    Thank you.     
    Regards,
    Gurujothi
    Edited by: Gurujothi on Jun 27, 2012 5:54 AM

  • How do I designate an e-mail to use to "send a link" from the File menu?

    When I have a web page open that I want to send to someone through my e-mail, I try to use "Send Link" in the File menu. When I click on it, nothing seems to happen. How do I link that command with my e-mail account?

    http://support.mozilla.com/en-US/kb/Changing+the+e-mail+program+used+by+Firefox

  • The Java plugin has created a time unfriendly issue with my e-mail account, I can not open or send any e-mail without using this plugin, how can I eliminate this problem without dropping m. firefox?

    A few days ago I tried to e-mail a friend, when I started A box came up and it required me to add a plugin..Java. I contacted my e-mail courier and microsoft, they told me that is was a plugin from Mozilla Firefox. Since then I must go through Java to send or open an e-mail... this is NOT to my satisfaction, it takes too long for all of this to open and if it is not cleared , I am dropping Mozilla and going elsewhere. Why has this occurred? Is this a result of the last update? If so can I delete the last update and continue on the other version?
    == This happened ==
    Every time Firefox opened
    == last week

    Sorry, I have no idea what you mean by '''"The Java plugin has created a time unfriendly issue with my e-mail account, I can not open or send any e-mail without using this plugin,"'''.
    If you think your problem is caused by the Java plugin, you should visit the Java support forum for assistance.
    http://forum.java.sun.com/index.jspa
    If you could explain what you mean by '''"time unfriendly''' issue with my e-mail account", maybe we'll be able to help you solve that issue.
    It might be helpful for us if we knew exactly which web-mail provider you are using. It seems strange to me that viewing or sending web-mail would actually "need" Java for operation, its more likely that some other item on the web page needs Java to run some advertising or other garbage that isn't a necessary part of the web-mail functionality you want to use.

Maybe you are looking for

  • Can I connect to two wireless networks at a time?

    I am using an iMac currently connected wirelessly to a Verizon Mifi mobile broadband on one network. I also have a Linsys router connected to the same iMac via an ethernet cable so that I may stream my itunes content to my Apple TV third gen. Lets ca

  • Ipod *ipod* could not be restoredunknown error occurred (1418)

    My pod had been acting funny for 2wks now. 1st it could not be recognized by my computer, then when it froze it wouldnt reset, then it had to be restored twice in a few days. All of a sudden it said connect to ituned and sync when I did that it recog

  • Same Purchasing group assigment to multiple Purchasing Org

    Dear all, I am facing an issue in SRM 5.0 in Classic Scenario. In R/3 the freedom exist to assign independently the Purchasing Organization and the Purchasing Group to a PREQ or PO. Then the following lists have been created: <u>PurchORG</u>: - PORG1

  • Deploying MDM  content in PI 7.1..

    Hello, I have a requirement to deploy MDM content in PI 7.1 server through ESR. But when I try to login into ESR with j2ee_admin or PISUPER user I get the below pasted error. The j2ee_admin and PISUPER users are also not able to login into RWB which

  • X100e monitor not recognized by computer anymore

    Hello folks, I am using X100e and recently after I applied some Windows Update, the computer's monitor stops displaying at all. I can still use an external monitor, but the computer seems to fail its own built-in monitor. Situations are the same even