Audit database information is recorded on all aspects of operations, events, etc., it is an important means of data security management.
Open the audit, although different levels of audit will be different, but the performance of the database is influential, and take up storage space.
- 1, create a dedicated space for audit data table
create tablespace tbs_audit datafile '/u01/app/oracle/oradata/audit/df_audit01.dbf' size 2g autoextend on next 128m maxsize 30g;
alter tablespace tbs_audit add datafile '/u01/app/oracle/oradata/audit/df_audit02.dbf' size 2g autoextend on next 128m maxsize 30g;
- 2, to view the audit table, where the index table space
select table_name,tablespace_name from dba_tables where table_name='AUD$';
select COLUMN_NAME,SEGMENT_NAME,tablespace_name from dba_lobs where table_name ='AUD$';
select index_name,tablespace_name from dba_indexes where table_name ='AUD$';
--3, move to a new table space online
alter table aud$ move tablespace tbs_audit;
alter table AUD$ move lob(SQLBIND) store as SYS_LOB0000000407C00040$$ (tablespace tbs_audit);
alter table AUD$ move lob(SQLTEXT) store as SYS_LOB0000000407C00041$$(tablespace tbs_audit);
--4, open audit
alter system set audit_sys_operations=true scope=spfile;
alter system set audit_trail=db,extended scope=spfile;
--5, restart the library into force
--6, data dictionary
AUD$
DBA_AUDIT_TRAIL
DBA_COMMON_AUDIT_TRAIL
DBA_FGA_AUDIT_TRAIL
Oracle uses a number of different audit methods to monitor what kind permission to use, and which object access. Auditing does not prevent the use of these permissions, but can provide useful information for permission to reveal the abuse and misuse.
The following table summarizes the different types of Oracle Database audit.
--7, for example schema object audit
audit select,update,delete on tab_1 by access whenever successful;
---------------------