This discussion is archived
3 Replies Latest reply: Aug 9, 2012 11:19 AM by EdStevens RSS

Kind of audit

954894 Newbie
Currently Being Moderated
Hi Folks,

I have several tables in huge db, each one has 1M+ transactions per hour from Application.

Tables located under schema APPTABLEOWN, application connected to schema APPTABLECONN which has synonyms to tables.

As well, some employees can connect and run DML there, using personal accounts like XNNNNNNN where X - letter and N - numbers

Idea is to capture (trace) any DML ran by these users, but somehow without performance impact.

DB is 10G (10.2.0.4), ASM.

What do you recommend to use for such task? FGA? Logminer? Something else? FGA looks reasonable here, but will it impact performance? There are several millions app dml's to 1 employee's one....

Thank you in advance.

Bormo
  • 1. Re: Kind of audit
    EdStevens Guru
    Currently Being Moderated
    user12191348 wrote:
    Hi Folks,

    I have several tables in huge db, each one has 1M+ transactions per hour from Application.

    Tables located under schema APPTABLEOWN, application connected to schema APPTABLECONN which has synonyms to tables.

    As well, some employees can connect and run DML there, using personal accounts like XNNNNNNN where X - letter and N - numbers

    Idea is to capture (trace) any DML ran by these users, but somehow without performance impact.

    DB is 10G (10.2.0.4), ASM.

    What do you recommend to use for such task? FGA? Logminer? Something else? FGA looks reasonable here, but will it impact performance? There are several millions app dml's to 1 employee's one....

    Thank you in advance.

    Bormo
    Depends on what you want to do ... simply audit what these 'xnnnn' users do, or put limits on what they do?
  • 2. Re: Kind of audit
    954894 Newbie
    Currently Being Moderated
    No, just log it.
  • 3. Re: Kind of audit
    EdStevens Guru
    Currently Being Moderated
    user12191348 wrote:
    No, just log it.
    Audit by user

    http://docs.oracle.com/cd/E11882_01/server.112/e26088/statements_4007.htm#SQLRF01107

Legend

  • Correct Answers - 10 points
  • Helpful Answers - 5 points