OceanBase AUDIT

描述

該語(yǔ)句用于配置或刪除對(duì) SQL 語(yǔ)句的審計(jì)規(guī)則。

說明 

• 配置對(duì) SQL 語(yǔ)句的審計(jì)規(guī)則時(shí)，您必須擁有 ?AUDIT SYSTEM? 系統(tǒng)權(quán)限，且需要登錄 ORAAUDITOR 用戶，密碼固定為 ORAAUDITOR。

• 配置對(duì) SQL 語(yǔ)句的審計(jì)規(guī)則后，對(duì)所有會(huì)話立即生效。

• 需要通過系統(tǒng)配置項(xiàng) audit_trail 開啟審計(jì)功能，該語(yǔ)句配置的審計(jì)規(guī)則才能生效。

格式

/*語(yǔ)句審計(jì)*/
{AUDIT | NOAUDIT} statement_operation_clause [auditing_by_user_clause] [whenever_option]

/*對(duì)象審計(jì)*/
{AUDIT | NOAUDIT} object_operation_clause auditing_on_clause [whenever_option]

statement_operation_clause:
    statement_operation_list
    | ALL
    | ALL STATEMENTS

statement_operation_list:
    statement_operation [statement_operation...]

object_operation_clause:
    object_operation_list
    | ALL

object_operation_list:
    object_operation [object_operation...]

auditing_on_clause:
    ON obj_name
    | ON DEFAULT

auditing_by_user_clause:
    BY user_name [user_name...]

whenever_option:
WHENEVER NOT SUCCESSFUL
| WHENEVER SUCCESSFUL

statement_operation:
    ALTER SYSTEM
    | CLUSTER
    | CONTEXT
    | DATABASE LINK
    | MATERIALIZED VIEW
    | NOT EXISTS
    | OUTLINE
    | PROCEDURE
    | PROFILE
    | PUBLIC DATABASE LINK
    | PUBLIC SYNONYM
    | ROLE
    | SEQUENCE
    | SESSION
    | SYNONYM
    | SYSTEM AUDIT
    | SYSTEM GRANT
    | TABLE
    | TABLESPACE
    | TRIGGER
    | TYPE
    | USER
    | VIEW
    | ALTER SEQUENCE
    | ALTER TABLE
    | COMMENT TABLE
    | DELETE TABLE
    | EXECUTE PROCEDURE
    | GRANT PROCEDURE
    | GRANT SEQUENCE
    | GRANT TABLE
    | GRANT TYPE
    | INSERT TABLE
    | SELECT SEQUENCE
    | SELECT TABLE
    | UPDATE TABLE

object_operation:
    ALTER
    | AUDIT
    | COMMENT
    | DELETE
    | EXECUTE
    | FLASHBACK
    | GRANT
    | INDEX
    | INSERT
    | RENAME
    | SELECT
    | UPDATE

參數(shù)解釋

可以審計(jì)的 SQL 語(yǔ)句類型如下表所示。

審計(jì)語(yǔ)句說明表 1

審計(jì)語(yǔ)句說明表 2

示例

• 對(duì) test 用戶的 table 相關(guān)操作語(yǔ)句在執(zhí)行成功的情況下進(jìn)行審計(jì)。

//將 ORAAUDITOR 用戶解鎖。
obclient> alter user ORAAUDITOR account unlock;
Query OK, 0 rows affected (5.76 sec)

//登錄 ORAAUDITOR 用戶。
obclient> exit;
Bye
[admin@k08j13249.eu95sqa /home/admin]
$obclient -h10.10.10.10 -P2883 -uORAAUDITOR@Oracle#test -pORAAUDITOR

obclient> AUDIT TABLE BY test WHENEVER SUCCESSFUL;
Query OK, 0 rows affected (21.14 sec)

• 對(duì)表 t1 的所有 INSERT、UPDATE 和 DELETE 操作進(jìn)行審計(jì)。

obclient> AUDIT INSERT, UPDATE, DELETE on t1;
Query OK, 0 rows affected (31.62 sec)