Which program executed to update DBA_Audit_Trail table.
DBAsupport.com Forums - Powered by vBulletin
Results 1 to 5 of 5

Thread: Which program executed to update DBA_Audit_Trail table.

Hybrid View

  1. #1
    Join Date
    Feb 2001
    Location
    Atlanta, USA
    Posts
    131

    Which program executed to update DBA_Audit_Trail table.

    Hi

    I have a question regarding the Audit trail.

    i used to gather audit data from dba_audit_trail table.

    i would like to know "which program / sql stmt" is caused/triggered to update the dba_audit_trail table ?

    Can you please clarify that how can i match this table and get which program/sqlcode is executed on that time.


    my program code is below:
    SELECT username,
    os_username,
    TO_CHAR(timestamp,'DD-MON-YY HH24:MI:SS') login,
    action_name,
    obj_name,
    owner,
    action,
    statementid,
    ses_actions,
    decode(returncode,01017,'Logon Error','Acnt Locked')
    FROM dba_audit_trail
    WHERE timestamp > sysdate - 1/48 -- check every 30 min.
    AND (returncode = 01017 OR returncode = 28000)
    AND username='SYSTEM' AND os_username='oracle'
    /

    regards
    anandharaj
    Anandharaj
    a_anandharaj@yahoo.com

  2. #2
    Join Date
    Sep 2002
    Location
    England
    Posts
    7,331
    the oracle kernel does it

  3. #3
    Join Date
    Feb 2001
    Location
    Atlanta, USA
    Posts
    131
    Hi
    Thanks for your reply.

    But actually what i wanted is , which sql stmt is exected?

    I was thinking that is there any way to correlate the
    STATEMENTID.DBA_AUDIT_TRAIL coln to trace down the SQL stmt executed, but metalink stats that there is no oracle data dictionary to trace this stmt id.

    Thanks a lot

    regards
    Anandharaj.A
    Anandharaj
    a_anandharaj@yahoo.com

  4. #4
    Join Date
    Sep 2002
    Location
    England
    Posts
    7,331
    why do you want to know what sql gets run?

    Also its a view, which is built upon a number of tables, so you never actually insert into this table (cos it isnt one)

  5. #5
    Join Date
    Feb 2001
    Location
    Atlanta, USA
    Posts
    131
    Hi
    Since i have scheduled the UserLogin job, I am getting a user login error.

    But there is "System user - Login Error" prompts in a purticular time, that time i never connect into the db using "system" user...

    i am exactly don't know from where it is coming...i checked with dba_jobs.. no schedule..! cheched with crontab entry... nothing is scheduled...so i want to know which program is causing or who try to... , in that purticular time...i can able to see the user name from dba-audit_trail, that is system user and osuser is oracle. so to findout which program is running that moment, i thought statmentid, may give me to answer, unfortunately it doesn't.

    regards
    Anandharaj
    a_anandharaj@yahoo.com

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  



Click Here to Expand Forum to Full Width