Thank you for visiting Spatial DBA - Oracle and ArcSDE.
Please visit Oracle DBA Tips (http://www.oracledbatips.com) for more Oracle DBA Tips.
==================================================================
Oracle 11gR1
DBA_AUDIT_OBJECT
displays audit trail records for all objects in the database.
USER_AUDIT_OBJECT
displays audit trail records for all objects accessible to the current user.
Column
|
Datatype
|
NULL
|
Description
|
OS_USERNAME | VARCHAR2(255) |
Operating system login username of the user whose actions were audited
| |
USERNAME | VARCHAR2(30) |
Name (not ID number) of the user whose actions were audited
| |
USERHOST | VARCHAR2(128) |
Client host machine name
| |
TERMINAL | VARCHAR2(255) |
Identifier of the user's terminal
| |
TIMESTAMP | DATE |
Date and time of the creation of the audit trail entry (date and time of user login for entries created by
AUDIT SESSION ) in the local database session time zone | |
OWNER | VARCHAR2(30) |
Creator of the object affected by the action
| |
OBJ_NAME | VARCHAR2(128) |
Name of the object affected by the action
| |
ACTION_NAME | VARCHAR2(28) |
Name of the action type corresponding to the numeric code in the
ACTION column in DBA_AUDIT_TRAIL | |
NEW_OWNER | VARCHAR2(30) |
Owner of the object named in the
NEW_NAME column | |
NEW_NAME | VARCHAR2(128) |
New name of an object after a
RENAME or the name of the underlying object | |
SES_ACTIONS | VARCHAR2(19) |
Session summary (a string of 16 characters, one for each action type in the order
ALTER, AUDIT, COMMENT, DELETE, GRANT, INDEX, INSERT, LOCK, RENAME, SELECT, UPDATE, REFERENCES , and EXECUTE . Positions 14, 15, and 16 are reserved for future use. The characters are: - for none, S for success, F for failure, and B for both). | |
COMMENT_TEXT | VARCHAR2(4000) |
Text comment on the audit trail
| |
SESSIONID | NUMBER | NOT NULL |
Numeric ID for each Oracle session
|
ENTRYID | NUMBER | NOT NULL |
Numeric ID for each audit trail entry in the session
|
STATEMENTID | NUMBER | NOT NULL |
Numeric ID for each statement run
|
RETURNCODE | NUMBER | NOT NULL |
Oracle error code generated by the action. Some useful values:
·
0 - Action succeeded
·
2004 - Security violation |
PRIV_USED | VARCHAR2(40) |
System privilege used to execute the action
| |
CLIENT_ID | VARCHAR2(64) |
Client identifier in each Oracle session
| |
ECONTEXT_ID | VARCHAR2(64) |
Application execution context identifier
| |
SESSION_CPU | NUMBER |
Amount of CPU time used by each Oracle session
| |
EXTENDED_TIMESTAMP | TIMESTAMP(6) WITH TIME ZONE |
Timestamp of the creation of the audit trail entry (timestamp of user login for entries created by
AUDIT SESSION ) in UTC (Coordinated Universal Time) time zone | |
PROXY_SESSIONID | NUMBER |
Proxy session serial number, if an enterprise user has logged in through the proxy mechanism
| |
GLOBAL_UID | VARCHAR2(32) |
Global user identifier for the user, if the user has logged in as an enterprise user
| |
INSTANCE_NUMBER | NUMBER |
Instance number as specified by the
INSTANCE_NUMBER initialization parameter | |
OS_PROCESS | VARCHAR2(16) |
Operating System process identifier of the Oracle process
| |
TRANSACTIONID | RAW(8) |
Transaction identifier of the transaction in which the object is accessed or modified
| |
SCN | NUMBER |
System change number (SCN) of the query
| |
SQL_BIND | NVARCHAR2(2000) |
Bind variable data of the query
| |
SQL_TEXT | NVARCHAR2(2000) |
SQL text of the query
| |
OBJ_EDITION | VARCHAR2(30) |
???
|
Note:
The
SQL_BIND
and SQL_TEXT
columns are only populated if the AUDIT_TRAIL
initialization parameter is set to db_extended
.
Some queries:
--check which objects are being audited
select * from DBA_OBJ_AUDIT_OPTS
--audit detail
select * from dba_audit_object
order by owner,obj_name, username
--distinct user
select distinct ora_database_name, username
from dba_audit_object
order by username ;
--access type
select distinct ora_database_name, decode(ses_actions,'---------S------','select',ses_actions) ses_actions
from dba_audit_object
order by ses_actions ;
--where did the acesses come from
select distinct ora_database_name, os_username, userhost
from dba_audit_object
--audit detail
select ora_database_name, username username,owner, obj_name, action_name,
decode(ses_actions,'---------S------','select',ses_actions) ses_actions,
decode(returncode, '0','Success',returncode) returncode,
to_char(timestamp,'DD-MON-YYYY HH24:MI')
from dba_audit_object
order by owner,obj_name, username ;
select * from DBA_OBJ_AUDIT_OPTS
--audit detail
select * from dba_audit_object
order by owner,obj_name, username
--distinct user
select distinct ora_database_name, username
from dba_audit_object
order by username ;
--access type
select distinct ora_database_name, decode(ses_actions,'---------S------','select',ses_actions) ses_actions
from dba_audit_object
order by ses_actions ;
--where did the acesses come from
select distinct ora_database_name, os_username, userhost
from dba_audit_object
--audit detail
select ora_database_name, username username,owner, obj_name, action_name,
decode(ses_actions,'---------S------','select',ses_actions) ses_actions,
decode(returncode, '0','Success',returncode) returncode,
to_char(timestamp,'DD-MON-YYYY HH24:MI')
from dba_audit_object
order by owner,obj_name, username ;