Re: How can you log number of rows returned by all queries?

  • From: Chris Dunscombe <cdunscombe@xxxxxxxxx>
  • To: "jonathan@xxxxxxxxxxxxxxxxxx" <jonathan@xxxxxxxxxxxxxxxxxx>, "jkstill@xxxxxxxxx" <jkstill@xxxxxxxxx>
  • Date: Wed, 6 Nov 2013 09:32:12 +0000 (GMT)

Hi,

I've looked at Fine-Grained Audit and in terms of recording the number of rows 
returned it doesn't look like an option as the Condition parameter in 
DBMS_FGA.Add_Policy does support the use of rownum. I'm guessing this is 
because auditing takes place before the query actually starts executing and 
returning rows therefore it can't know the number of rows returned.

In the case I'm looking at the auditors are interested in the number of rows 
returned as the volume of data returned is an indicator of "dodgy" behaviour. 
They don't tell me all the use cases their looking at, just ask me specific 
technical questions about what's possible.

Thanks,

Chris



On Friday, 1 November 2013, 16:35, Jonathan Lewis <jonathan@xxxxxxxxxxxxxxxxxx> 
wrote:
 

Look at Fine-grained Audit.
The overhead is significant, but it might be exactly what the auditors want.

Regards
Jonathan Lewis


________________________________________

From: oracle-l-bounce@xxxxxxxxxxxxx [oracle-l-bounce@xxxxxxxxxxxxx] on behalf 
of Chris Dunscombe [cdunscombe@xxxxxxxxx]
Sent: 29 October 2013 15:32
To: jkstill@xxxxxxxxx
Cc: Oracle-L Freelists
Subject: Re: How can you log number of rows returned by all queries?

Hi,

The reason is to do with audit and alerting based on thresholds of numbers of 
rows returned by queries. (Audit are asking).

Chris



On Monday, 28 October 2013, 20:31, Jared Still <jkstill@xxxxxxxxx> wrote:
On Mon, Oct 28, 2013 at 1:41 AM, Chris Dunscombe <cdunscombe@xxxxxxxxx>wrote:
> Looking for a way of "logging" the number of rows returned by all queries
> run by a specific user, running 11.2.0.3?
>

Why?

Or in other words, what is the underlying reason behind the request?

Jared Still
Certifiable Oracle DBA and Part Time Perl Evangelist
Oracle Blog: http://jkstill.blogspot.com
Home Page: http://jaredstill.com



--
//www.freelists.org/webpage/oracle-l
--
//www.freelists.org/webpage/oracle-l--
//www.freelists.org/webpage/oracle-l

Other related posts: