How do I get the value of a selected column when using user-defined auditing to audit 'SELECT' event (NETIQKB33456)

  • 7733456
  • 02-Feb-2007
  • 08-Sep-2008

Resolution

goal
How do I get the value of a selected column when using user-defined auditing to audit 'SELECT' events?

fact
VigilEnt Security Agent for Oracle 1.X

fix
User-defined audits can be configured to capture the value of specific columns selected from a target table. To set up this type of auditing, follow the steps below:

  1. Select User Defined from the Audit Options menu.

  2. Select Create New User Defined Audit/Alerts (red plus sign).

  3. Enter a unique audit name and click the Verify Name button.

  4. Choose which target schema and object you wish to audit.

  5. Save the configuration.

  6. Once saved the General Configuration and Key Identification columns must be selected. Key Identification columns are used to differentiate those rows affected by the audited event.

  7. Select the Audit Configuration tab and choose Select as the operation to audit.

  8. Choose the Select tab and pick the columns to be audited. Add an appropriate filter condition, if necessary.

  9. Select OK to finish the process and create the User Defined Audit.

    Note: The status report will indicate successful and/or failed operations encountered in the audit creation.



note
Oracle's 'Fine Grained Auditing' option must be available for user-defined SELECT auditing to work. Some editions of Oracle do not provide this feature.

note
The Oracle COMPATIBLE initialization parameter must be set to 8.1.6 or higher for 'SELECT' auditing to work.

Additional Information

Formerly known as NETIQKB33456