DBA Data[Home] [Help]

VIEW: SYS.DBA_COMMON_AUDIT_TRAIL

Source

View Text - Preformatted

select 'Standard Audit', SESSIONID,
    PROXY_SESSIONID, STATEMENTID, ENTRYID, EXTENDED_TIMESTAMP, GLOBAL_UID,
    USERNAME, CLIENT_ID, ECONTEXT_ID, Null, OS_USERNAME,
    USERHOST, OS_PROCESS, TERMINAL,
    INSTANCE_NUMBER, OWNER, OBJ_NAME, Null, NEW_OWNER,
    NEW_NAME, ACTION, ACTION_NAME, AUDIT_OPTION, TRANSACTIONID, RETURNCODE,
    SCN, COMMENT_TEXT, SQL_BIND, SQL_TEXT,
    OBJ_PRIVILEGE, SYS_PRIVILEGE, ADMIN_OPTION, 'NONE', GRANTEE, PRIV_USED,
    SES_ACTIONS, LOGOFF_TIME, LOGOFF_LREAD, LOGOFF_PREAD, LOGOFF_LWRITE,
    LOGOFF_DLOCK, SESSION_CPU, OBJ_EDITION_NAME, DBID
  from DBA_AUDIT_TRAIL
UNION ALL
select DECODE(BITAND(audit_type, 15), 1, 'Standard XML Audit',
                                      2, 'Fine Grained XML Audit',
                                      4, 'SYS XML Audit',
                                      8, 'Mandatory XML Audit'),
    SESSION_ID,
    PROXY_SESSIONID, STATEMENTID, ENTRYID, EXTENDED_TIMESTAMP, GLOBAL_UID,
    DB_USER, CLIENTIDENTIFIER, ECONTEXT_ID, EXT_NAME, OS_USER,
    OS_HOST, OS_PROCESS, TERMINAL,
    INSTANCE_NUMBER, OBJECT_SCHEMA, OBJECT_NAME, POLICY_NAME, NEW_OWNER,
    NEW_NAME, xad.ACTION,
    DECODE(BITAND(audit_type, 15),
        1,                              /* Standard Audit actions */
        act.name,
        2,                              /* Fine Grained Audit actions */
        DECODE(statement_type, 1, 'SELECT',  2, 'INSERT',
                               4, 'UPDATE',  8, 'DELETE',  'INVALID'),
        Null),                                      /* STATEMENT_TYPE */
    DECODE(xad.action,
        104  /* audit */,    aom.name,
        105  /* noaudit */,  aom.name,
        Null),                                        /* AUDIT_OPTION */
    TRANSACTIONID, RETURNCODE,
    SCN, COMMENT_TEXT, TO_NCHAR(substr(sql_bind,1,2000)),
    TO_NCHAR(substr(sql_text,1,2000)),
    DECODE(xad.action,
        108 /* grant  sys_priv */, Null,
        109 /* revoke sys_priv */, Null,
        114 /* grant  role */,     Null,
        115 /* revoke role */,     Null,
        auth_privileges),                            /* OBJ_PRIVILEGE */
    DECODE(xad.action,
        108 /* grant  sys_priv */, spm.name,
        109 /* revoke sys_priv */, spm.name,
        Null),                                       /* SYS_PRIVILEGE */
    DECODE(xad.action,
        108 /* grant  sys_priv */, SUBSTR(auth_privileges,1,1),
        109 /* revoke sys_priv */, SUBSTR(auth_privileges,1,1),
        114 /* grant  role */,     SUBSTR(auth_privileges,1,1),
        115 /* revoke role */,     SUBSTR(auth_privileges,1,1),
        Null),                                        /* ADMIN_OPTION */
    OS_PRIVILEGE, GRANTEE, spx.name, SES_ACTIONS,
    Null, Null, Null, Null, Null, Null, OBJ_EDITION_NAME, DBID
  from GV$XML_AUDIT_TRAIL xad, SYSTEM_PRIVILEGE_MAP spm,
       SYSTEM_PRIVILEGE_MAP spx, STMT_AUDIT_OPTION_MAP aom, AUDIT_ACTIONS act
  where xad.action          = act.action    (+)
  and - xad.statement_type  = spm.privilege (+)
  and   xad.statement_type  = aom.option#   (+)
  and - xad.priv_used       = spx.privilege (+)
UNION ALL
select 'Fine Grained Audit', SESSION_ID,
    PROXY_SESSIONID, STATEMENTID, ENTRYID, EXTENDED_TIMESTAMP, GLOBAL_UID,
    DB_USER, CLIENT_ID, ECONTEXT_ID, EXT_NAME, OS_USER,
    USERHOST, OS_PROCESS, Null,
    INSTANCE_NUMBER, OBJECT_SCHEMA, OBJECT_NAME, POLICY_NAME, Null,
    Null, Null, STATEMENT_TYPE, Null, TRANSACTIONID, Null,
    SCN, COMMENT$TEXT, SQL_BIND, SQL_TEXT,
    Null, Null, Null, 'NONE', Null,
    Null, Null, Null, Null, Null,
    Null, Null, Null, OBJ_EDITION_NAME, DBID
  from DBA_FGA_AUDIT_TRAIL
View Text - HTML Formatted

SELECT 'STANDARD AUDIT'
, SESSIONID
, PROXY_SESSIONID
, STATEMENTID
, ENTRYID
, EXTENDED_TIMESTAMP
, GLOBAL_UID
, USERNAME
, CLIENT_ID
, ECONTEXT_ID
, NULL
, OS_USERNAME
, USERHOST
, OS_PROCESS
, TERMINAL
, INSTANCE_NUMBER
, OWNER
, OBJ_NAME
, NULL
, NEW_OWNER
, NEW_NAME
, ACTION
, ACTION_NAME
, AUDIT_OPTION
, TRANSACTIONID
, RETURNCODE
, SCN
, COMMENT_TEXT
, SQL_BIND
, SQL_TEXT
, OBJ_PRIVILEGE
, SYS_PRIVILEGE
, ADMIN_OPTION
, 'NONE'
, GRANTEE
, PRIV_USED
, SES_ACTIONS
, LOGOFF_TIME
, LOGOFF_LREAD
, LOGOFF_PREAD
, LOGOFF_LWRITE
, LOGOFF_DLOCK
, SESSION_CPU
, OBJ_EDITION_NAME
, DBID
FROM DBA_AUDIT_TRAIL UNION ALL SELECT DECODE(BITAND(AUDIT_TYPE
, 15)
, 1
, 'STANDARD XML AUDIT'
, 2
, 'FINE GRAINED XML AUDIT'
, 4
, 'SYS XML AUDIT'
, 8
, 'MANDATORY XML AUDIT')
, SESSION_ID
, PROXY_SESSIONID
, STATEMENTID
, ENTRYID
, EXTENDED_TIMESTAMP
, GLOBAL_UID
, DB_USER
, CLIENTIDENTIFIER
, ECONTEXT_ID
, EXT_NAME
, OS_USER
, OS_HOST
, OS_PROCESS
, TERMINAL
, INSTANCE_NUMBER
, OBJECT_SCHEMA
, OBJECT_NAME
, POLICY_NAME
, NEW_OWNER
, NEW_NAME
, XAD.ACTION
, DECODE(BITAND(AUDIT_TYPE
, 15)
, 1
, /* STANDARD AUDIT ACTIONS */ ACT.NAME
, 2
, /* FINE GRAINED AUDIT ACTIONS */ DECODE(STATEMENT_TYPE
, 1
, 'SELECT'
, 2
, 'INSERT'
, 4
, 'UPDATE'
, 8
, 'DELETE'
, 'INVALID')
, NULL)
, /* STATEMENT_TYPE */ DECODE(XAD.ACTION
, 104 /* AUDIT */
, AOM.NAME
, 105 /* NOAUDIT */
, AOM.NAME
, NULL)
, /* AUDIT_OPTION */ TRANSACTIONID
, RETURNCODE
, SCN
, COMMENT_TEXT
, TO_NCHAR(SUBSTR(SQL_BIND
, 1
, 2000))
, TO_NCHAR(SUBSTR(SQL_TEXT
, 1
, 2000))
, DECODE(XAD.ACTION
, 108 /* GRANT SYS_PRIV */
, NULL
, 109 /* REVOKE SYS_PRIV */
, NULL
, 114 /* GRANT ROLE */
, NULL
, 115 /* REVOKE ROLE */
, NULL
, AUTH_PRIVILEGES)
, /* OBJ_PRIVILEGE */ DECODE(XAD.ACTION
, 108 /* GRANT SYS_PRIV */
, SPM.NAME
, 109 /* REVOKE SYS_PRIV */
, SPM.NAME
, NULL)
, /* SYS_PRIVILEGE */ DECODE(XAD.ACTION
, 108 /* GRANT SYS_PRIV */
, SUBSTR(AUTH_PRIVILEGES
, 1
, 1)
, 109 /* REVOKE SYS_PRIV */
, SUBSTR(AUTH_PRIVILEGES
, 1
, 1)
, 114 /* GRANT ROLE */
, SUBSTR(AUTH_PRIVILEGES
, 1
, 1)
, 115 /* REVOKE ROLE */
, SUBSTR(AUTH_PRIVILEGES
, 1
, 1)
, NULL)
, /* ADMIN_OPTION */ OS_PRIVILEGE
, GRANTEE
, SPX.NAME
, SES_ACTIONS
, NULL
, NULL
, NULL
, NULL
, NULL
, NULL
, OBJ_EDITION_NAME
, DBID
FROM GV$XML_AUDIT_TRAIL XAD
, SYSTEM_PRIVILEGE_MAP SPM
, SYSTEM_PRIVILEGE_MAP SPX
, STMT_AUDIT_OPTION_MAP AOM
, AUDIT_ACTIONS ACT
WHERE XAD.ACTION = ACT.ACTION (+)
AND - XAD.STATEMENT_TYPE = SPM.PRIVILEGE (+)
AND XAD.STATEMENT_TYPE = AOM.OPTION# (+)
AND - XAD.PRIV_USED = SPX.PRIVILEGE (+) UNION ALL SELECT 'FINE GRAINED AUDIT'
, SESSION_ID
, PROXY_SESSIONID
, STATEMENTID
, ENTRYID
, EXTENDED_TIMESTAMP
, GLOBAL_UID
, DB_USER
, CLIENT_ID
, ECONTEXT_ID
, EXT_NAME
, OS_USER
, USERHOST
, OS_PROCESS
, NULL
, INSTANCE_NUMBER
, OBJECT_SCHEMA
, OBJECT_NAME
, POLICY_NAME
, NULL
, NULL
, NULL
, STATEMENT_TYPE
, NULL
, TRANSACTIONID
, NULL
, SCN
, COMMENT$TEXT
, SQL_BIND
, SQL_TEXT
, NULL
, NULL
, NULL
, 'NONE'
, NULL
, NULL
, NULL
, NULL
, NULL
, NULL
, NULL
, NULL
, NULL
, OBJ_EDITION_NAME
, DBID
FROM DBA_FGA_AUDIT_TRAIL