<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Andrew Fraser DBA &#187; Audit</title>
	<atom:link href="http://andrewfraserdba.com/category/audit/feed/" rel="self" type="application/rss+xml" />
	<link>http://andrewfraserdba.com</link>
	<description>Oracle DBA (plus SQL Server)</description>
	<lastBuildDate>Wed, 18 Jan 2012 15:25:23 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<item>
		<title>Identify what auditing is on</title>
		<link>http://andrewfraserdba.com/2007/01/17/identify-what-auditing-is-on/</link>
		<comments>http://andrewfraserdba.com/2007/01/17/identify-what-auditing-is-on/#comments</comments>
		<pubDate>Wed, 17 Jan 2007 14:34:52 +0000</pubDate>
		<dc:creator>Andrew Fraser</dc:creator>
				<category><![CDATA[Audit]]></category>
		<category><![CDATA[Scripts]]></category>

		<guid isPermaLink="false">http://andrewfraser.wordpress.com/2007/01/17/identify-what-auditing-is-on/</guid>
		<description><![CDATA[Suspect too much auditing is on on a database? This script will show you what auditing is on: set pages 9999 select * from DBA_STMT_AUDIT_OPTS ; select * from DBA_PRIV_AUDIT_OPTS ; set termout off lines 192 spool 1.tmp select * &#8230; <a href="http://andrewfraserdba.com/2007/01/17/identify-what-auditing-is-on/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>Suspect too much auditing is on on a database? This script will show you what auditing is on:</p>
<pre class="brush:sql">set pages 9999
select * from DBA_STMT_AUDIT_OPTS ;
select * from DBA_PRIV_AUDIT_OPTS ;
set termout off lines 192
spool 1.tmp
select * from DBA_OBJ_AUDIT_OPTS ;
spool off
set termout on lines 80
host egrep '(S/|A/|/S|/A)' 1.tmp</pre>
<p>Note that the unix command <em>egrep</em> is used to filter the dba_obj_audit_opts rows of interest.</p>
<p>Ref: <a href="http://download-uk.oracle.com/docs/cd/B19306_01/network.102/b14266/cfgaudit.htm#BABCFIHB">Oracle Database Security Guide, Chapter 12</a></p>
]]></content:encoded>
			<wfw:commentRss>http://andrewfraserdba.com/2007/01/17/identify-what-auditing-is-on/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

