select 'Standard Audit', SESSIONID,
PROXY_SESSIONID, STATEMENTID, ENTRYID, EXTENDED_TIMESTAMP, GLOBAL_UID,
USERNAME, CLIENT_ID, ECONTEXT_ID, Null, OS_USERNAME,
USERHOST, OS_PROCESS, TERMINAL,
INSTANCE_NUMBER, OWNER, OBJ_NAME, Null, NEW_OWNER,
NEW_NAME, ACTION, ACTION_NAME, AUDIT_OPTION, TRANSACTIONID, RETURNCODE,
SCN, COMMENT_TEXT, SQL_BIND, SQL_TEXT,
OBJ_PRIVILEGE, SYS_PRIVILEGE, ADMIN_OPTION, 'NONE', GRANTEE, PRIV_USED,
SES_ACTIONS, LOGOFF_TIME, LOGOFF_LREAD, LOGOFF_PREAD, LOGOFF_LWRITE,
LOGOFF_DLOCK, SESSION_CPU, OBJ_EDITION_NAME, DBID
from DBA_AUDIT_TRAIL
UNION ALL
select DECODE(BITAND(audit_type, 15), 1, 'Standard XML Audit',
2, 'Fine Grained XML Audit',
4, 'SYS XML Audit',
8, 'Mandatory XML Audit'),
SESSION_ID,
PROXY_SESSIONID, STATEMENTID, ENTRYID, EXTENDED_TIMESTAMP, GLOBAL_UID,
DB_USER, CLIENTIDENTIFIER, ECONTEXT_ID, EXT_NAME, OS_USER,
OS_HOST, OS_PROCESS, TERMINAL,
INSTANCE_NUMBER, OBJECT_SCHEMA, OBJECT_NAME, POLICY_NAME, NEW_OWNER,
NEW_NAME, xad.ACTION,
DECODE(BITAND(audit_type, 15),
1, /* Standard Audit actions */
act.name,
2, /* Fine Grained Audit actions */
DECODE(statement_type, 1, 'SELECT', 2, 'INSERT',
4, 'UPDATE', 8, 'DELETE', 'INVALID'),
Null), /* STATEMENT_TYPE */
DECODE(xad.action,
104 /* audit */, aom.name,
105 /* noaudit */, aom.name,
Null), /* AUDIT_OPTION */
TRANSACTIONID, RETURNCODE,
SCN, COMMENT_TEXT, TO_NCHAR(substr(sql_bind,1,2000)),
TO_NCHAR(substr(sql_text,1,2000)),
DECODE(xad.action,
108 /* grant sys_priv */, Null,
109 /* revoke sys_priv */, Null,
114 /* grant role */, Null,
115 /* revoke role */, Null,
auth_privileges), /* OBJ_PRIVILEGE */
DECODE(xad.action,
108 /* grant sys_priv */, spm.name,
109 /* revoke sys_priv */, spm.name,
Null), /* SYS_PRIVILEGE */
DECODE(xad.action,
108 /* grant sys_priv */, SUBSTR(auth_privileges,1,1),
109 /* revoke sys_priv */, SUBSTR(auth_privileges,1,1),
114 /* grant role */, SUBSTR(auth_privileges,1,1),
115 /* revoke role */, SUBSTR(auth_privileges,1,1),
Null), /* ADMIN_OPTION */
OS_PRIVILEGE, GRANTEE, spx.name, SES_ACTIONS,
Null, Null, Null, Null, Null, Null, OBJ_EDITION_NAME, DBID
from GV$XML_AUDIT_TRAIL xad, SYSTEM_PRIVILEGE_MAP spm,
SYSTEM_PRIVILEGE_MAP spx, STMT_AUDIT_OPTION_MAP aom, AUDIT_ACTIONS act
where xad.action = act.action (+)
and - xad.statement_type = spm.privilege (+)
and xad.statement_type = aom.option# (+)
and - xad.priv_used = spx.privilege (+)
UNION ALL
select 'Fine Grained Audit', SESSION_ID,
PROXY_SESSIONID, STATEMENTID, ENTRYID, EXTENDED_TIMESTAMP, GLOBAL_UID,
DB_USER, CLIENT_ID, ECONTEXT_ID, EXT_NAME, OS_USER,
USERHOST, OS_PROCESS, Null,
INSTANCE_NUMBER, OBJECT_SCHEMA, OBJECT_NAME, POLICY_NAME, Null,
Null, Null, STATEMENT_TYPE, Null, TRANSACTIONID, Null,
SCN, COMMENT$TEXT, SQL_BIND, SQL_TEXT,
Null, Null, Null, 'NONE', Null,
Null, Null, Null, Null, Null,
Null, Null, Null, OBJ_EDITION_NAME, DBID
from DBA_FGA_AUDIT_TRAIL
SELECT 'STANDARD AUDIT'
, SESSIONID
,
PROXY_SESSIONID
, STATEMENTID
, ENTRYID
, EXTENDED_TIMESTAMP
, GLOBAL_UID
,
USERNAME
, CLIENT_ID
, ECONTEXT_ID
, NULL
, OS_USERNAME
,
USERHOST
, OS_PROCESS
, TERMINAL
,
INSTANCE_NUMBER
, OWNER
, OBJ_NAME
, NULL
, NEW_OWNER
,
NEW_NAME
, ACTION
, ACTION_NAME
, AUDIT_OPTION
, TRANSACTIONID
, RETURNCODE
,
SCN
, COMMENT_TEXT
, SQL_BIND
, SQL_TEXT
,
OBJ_PRIVILEGE
, SYS_PRIVILEGE
, ADMIN_OPTION
, 'NONE'
, GRANTEE
, PRIV_USED
,
SES_ACTIONS
, LOGOFF_TIME
, LOGOFF_LREAD
, LOGOFF_PREAD
, LOGOFF_LWRITE
,
LOGOFF_DLOCK
, SESSION_CPU
, OBJ_EDITION_NAME
, DBID
FROM DBA_AUDIT_TRAIL
UNION ALL
SELECT DECODE(BITAND(AUDIT_TYPE
, 15)
, 1
, 'STANDARD XML AUDIT'
,
2
, 'FINE GRAINED XML AUDIT'
,
4
, 'SYS XML AUDIT'
,
8
, 'MANDATORY XML AUDIT')
,
SESSION_ID
,
PROXY_SESSIONID
, STATEMENTID
, ENTRYID
, EXTENDED_TIMESTAMP
, GLOBAL_UID
,
DB_USER
, CLIENTIDENTIFIER
, ECONTEXT_ID
, EXT_NAME
, OS_USER
,
OS_HOST
, OS_PROCESS
, TERMINAL
,
INSTANCE_NUMBER
, OBJECT_SCHEMA
, OBJECT_NAME
, POLICY_NAME
, NEW_OWNER
,
NEW_NAME
, XAD.ACTION
,
DECODE(BITAND(AUDIT_TYPE
, 15)
,
1
, /* STANDARD AUDIT ACTIONS */
ACT.NAME
,
2
, /* FINE GRAINED AUDIT ACTIONS */
DECODE(STATEMENT_TYPE
, 1
, 'SELECT'
, 2
, 'INSERT'
,
4
, 'UPDATE'
, 8
, 'DELETE'
, 'INVALID')
,
NULL)
, /* STATEMENT_TYPE */
DECODE(XAD.ACTION
,
104 /* AUDIT */
, AOM.NAME
,
105 /* NOAUDIT */
, AOM.NAME
,
NULL)
, /* AUDIT_OPTION */
TRANSACTIONID
, RETURNCODE
,
SCN
, COMMENT_TEXT
, TO_NCHAR(SUBSTR(SQL_BIND
, 1
, 2000))
,
TO_NCHAR(SUBSTR(SQL_TEXT
, 1
, 2000))
,
DECODE(XAD.ACTION
,
108 /* GRANT SYS_PRIV */
, NULL
,
109 /* REVOKE SYS_PRIV */
, NULL
,
114 /* GRANT ROLE */
, NULL
,
115 /* REVOKE ROLE */
, NULL
,
AUTH_PRIVILEGES)
, /* OBJ_PRIVILEGE */
DECODE(XAD.ACTION
,
108 /* GRANT SYS_PRIV */
, SPM.NAME
,
109 /* REVOKE SYS_PRIV */
, SPM.NAME
,
NULL)
, /* SYS_PRIVILEGE */
DECODE(XAD.ACTION
,
108 /* GRANT SYS_PRIV */
, SUBSTR(AUTH_PRIVILEGES
, 1
, 1)
,
109 /* REVOKE SYS_PRIV */
, SUBSTR(AUTH_PRIVILEGES
, 1
, 1)
,
114 /* GRANT ROLE */
, SUBSTR(AUTH_PRIVILEGES
, 1
, 1)
,
115 /* REVOKE ROLE */
, SUBSTR(AUTH_PRIVILEGES
, 1
, 1)
,
NULL)
, /* ADMIN_OPTION */
OS_PRIVILEGE
, GRANTEE
, SPX.NAME
, SES_ACTIONS
,
NULL
, NULL
, NULL
, NULL
, NULL
, NULL
, OBJ_EDITION_NAME
, DBID
FROM GV$XML_AUDIT_TRAIL XAD
, SYSTEM_PRIVILEGE_MAP SPM
,
SYSTEM_PRIVILEGE_MAP SPX
, STMT_AUDIT_OPTION_MAP AOM
, AUDIT_ACTIONS ACT
WHERE XAD.ACTION = ACT.ACTION (+)
AND - XAD.STATEMENT_TYPE = SPM.PRIVILEGE (+)
AND XAD.STATEMENT_TYPE = AOM.OPTION# (+)
AND - XAD.PRIV_USED = SPX.PRIVILEGE (+)
UNION ALL
SELECT 'FINE GRAINED AUDIT'
, SESSION_ID
,
PROXY_SESSIONID
, STATEMENTID
, ENTRYID
, EXTENDED_TIMESTAMP
, GLOBAL_UID
,
DB_USER
, CLIENT_ID
, ECONTEXT_ID
, EXT_NAME
, OS_USER
,
USERHOST
, OS_PROCESS
, NULL
,
INSTANCE_NUMBER
, OBJECT_SCHEMA
, OBJECT_NAME
, POLICY_NAME
, NULL
,
NULL
, NULL
, STATEMENT_TYPE
, NULL
, TRANSACTIONID
, NULL
,
SCN
, COMMENT$TEXT
, SQL_BIND
, SQL_TEXT
,
NULL
, NULL
, NULL
, 'NONE'
, NULL
,
NULL
, NULL
, NULL
, NULL
, NULL
,
NULL
, NULL
, NULL
, OBJ_EDITION_NAME
, DBID
FROM DBA_FGA_AUDIT_TRAIL
|
|
|