审计信息查询
当前的审计参数值
1设置对象数据操作
audit select,insert,delete on scott.dept by access;
2为了方面查看,先将sys.aud$表的数据进行删除(开发中不建议)
delete sys.aud$
3scott用户登录,如下操作
insert into scott.dept values(11,’a’,’a’);
select * from scott.dept;
update scott.dept set loc=’addr’ where deptno=11 ;
delete scott.dept where deptno=11 ;
4查看审计信息(sys用户)
column object_name format a10;
column username format a10;
column timestamp format a12;
column owner format a10;
column obj_name format a10;
select username,timestamp,owner,action_name,obj_name from dba_audit_object;
username:操作的用户
owner:被操作的用户
action_name:操作内容
obj_name :对象
查看登录用户退出信息
set pagesize 100
set line 100
column “DB用户” format a10;
column “操作系统” format a30;
column “连接状态” format a10;
column “登录时间” format a20;
column “退出时间” format a20;
select username “DB用户”,os_username “操作系统”,
decode(returncode,’0’,’connected’,’1005’,’failed null’,’1007’,’failed’,returncode) “连接状态”,
to_char(timestamp,’yyyy mm dd hh24:mi:ss’) “登录时间”,
to_char(logoff_time,’yyyy mm dd hh24:mi:ss’) “退出时间”
from dba_audit_session
where to_char(timestamp,’yyyy mm dd’) > ‘2017 05 26’;