Pete Finnigan's Oracle Security Forum


    
      
        Pete Finnigan's Oracle Security Forum
        (http://www.petefinnigan.com/forum/yabb/YaBB.cgi)
      

        Oracle Security >> Oracle Auditing >> Auditing while audit trail = NONE
        
(Message started by: Pete Finnigan on Jul 1^st, 2008, 12:45pm)

Title: Auditing while audit trail = NONE
Post by Pete Finnigan on Jul 1^st, 2008, 12:45pm

Hi,

I have a question. Is it possible to audit while audit trail = NONE?
I've heard that it should be possible to enable audit with SQL commands. Is this correct?

Thanks

Title: Re: Auditing while audit trail = NONE
Post by Pete Finnigan on Jul 12^th, 2008, 7:50pm

I think you probably mean Fine Grained Audit that allows audit of SQL statements amongst other things. Also you can use triggers, system triggers, redo logs, commercial products such as Sentrigo Hedgehog....

Have a look at Fine Grained Audit

cheers

Pete

Title: Re: Auditing while audit trail = NONE
Post by Pete Finnigan on Jul 14^th, 2008, 7:29am

Hi Pete

I spend a few hours reading about auditing and I came to the same conclusion.
My problem is that it is not possible to view the audit parameter if it has been set with a SQL statement.

Cheers

Thomas

Title: Re: Auditing while audit trail = NONE
Post by Pete Finnigan on Jul 14^th, 2008, 3:32pm

Hi Thomas,

Thanks for your reply. Now I have re-read your question and this answer I am not now convinced I answered your question.

Are you:

1) suggesting its possible to turn on audit (i.e. set audit_trail) without setting it in the spfile/init.ora file?

2) or are you confusing the setting of audit with the parameter that turns it on. i.e. if i want to audit session I issue, "AUDIT SESSION" but it doesnt work until audit is turned on in the init/spfile.

3) I would guess that these audit (in 2 above) can be set via SQL easily by updating the dictionary.

please clarify what you mean.

cheers

Pete

Title: Re: Auditing while audit trail = NONE
Post by Pete Finnigan on Mar 10^th, 2009, 8:26am

Hi Pete,

Sorry, I actually forgot I posted an issue here.

The issue was that I was wondering if it was possible to turn on auditing without changing the parameter i.e. using a SQL statement (and thereby changing the setting in the ini.ora file).

Cheers

Thomas

Title: Re: Auditing while audit trail = NONE
Post by Pete Finnigan on Mar 10^th, 2009, 2:53pm

Hi Thomas,

Thanks for your post. No you must enable the audit_trail parameter either in the init.ora or spfile.ora depending on what you are running.

cheers

Pete