audit set

AUDIT CREATE TABLE BY apps;

　

　

AUDIT SELECT TABLE, UPDATE TABLE, INSERT TABLE, DELETE TABLE BY apps;

audit insert, update, delete by apps;

SQL> audit session;

　

Audit succeeded.

SQL>

SQL> AUDIT SESSION WHENEVER SUCCESSFUL;

Audit succeeded.

SQL> AUDIT SESSION WHENEVER NOT SUCCESSFUL;

Audit succeeded.

SQL> AUDIT CREATE TABLE BY apps;

Audit succeeded.

SQL> AUDIT SELECT TABLE, UPDATE TABLE, INSERT TABLE, DELETE TABLE BY apps;

Audit succeeded.

SQL> audit insert, update, delete by apps;

audit insert, update, delete by apps

*

ERROR at line 1:

ORA-00969: missing ON keyword

　

audit insert, update, delete on apps by sys;

ERROR at line 1:

ORA-01708: ACCESS or SESSION expected

　

audit insert, update, delete on apps by access;

*

ERROR at line 1:

ORA-00942: table or view does not exist

　

AUDIT ALL ON hr.emp_seq;

　

AUDIT ALL ON apps.*;

　

TABLES WHERE WE NEED TO ENABLE AUDIT REPORT.

============================

　

SQL> NOAUDIT;

SQL> NOAUDIT session;

SQL> NOAUDIT session BY scott, hr;

SQL> NOAUDIT DELETE ON emp;

SQL> NOAUDIT SELECT TABLE, INSERT TABLE, DELETE TABLE, EXECUTE PROCEDURE;

SQL> NOAUDIT ALL;

SQL> NOAUDIT ALL PRIVILEGES;

SQL> NOAUDIT ALL ON DEFAULT;

　

select

USERNAME,

TERMINAL,

to_char(TIMESTAMP,'DD-MON-YYYY HH24:MI:SS') Login_Time,

to_char(LOGOFF_TIME,'DD-MON-YYYY HH24:MI:SS') Logoff_Time,

ACTION_NAME,

SQL_TEXT

from dba_audit_trail

where SQL_TEXT is not null

and to_char(TIMESTAMP,'DD-MON-YYYY')>='27-MAR-2017';