IDS Forum

Re: Detailed Audit

Posted By: Richard Snoke
Date: Thursday, 4 March 2010, at 5:40 p.m.

In Response To: Detailed Audit (CHANDAN PAI)

Hi,

You can capture detailed (in one of three configurable levels of detail)
data on SQL by using the SQL tracing facility of IDS 11.50. Look up the
SQLTRACE configuration parameter and associated commands within the task
and admin functions. You can choose when and how much to capture, and the
results are available in tables in the sysmaster database. Do note,
however, that the trace data is only stored in memory. You will have to
take it from there and store it if you want to persist the collected
traces. You can trace based on the database, userid, session or
combinations thereof.

Cheers,
Dick Snoke
Executive IT Specialist
IBM Software Group - ChannelWorks

Tel: (404) 487-1595
Email: dsnoke@us.ibm.com

From:
"CHANDAN PAI" <chandanpai@yahoo.com>
To:
ids@iiug.org
Date:
03/04/10 05:15 PM
Subject:
Detailed Audit [19230]
Sent by:
ids-bounces@iiug.org

I have an application which I would like to audit at a detailed level. I
have
Informix 11.5 FC5 auditing turned on. The application can make more than
1000
events in a 60 second period. I can sequentially see all the audit events
that
happened on different tables. I was wondering if I can capture the actual
SQL
that was issued by the application user corresponding to the audit
event...
like for ACTB.

For now all I can see for such an event is
0:ACTB:csp_db:dmuser:env_code:160

Thanks
Chandan

*******************************************************************************

Forum Note: Use "Reply" to post a response in the discussion forum.

Messages In This Thread

• Detailed Audit
  CHANDAN PAI -- Thursday, 4 March 2010, at 5:14 p.m.
  • Re: Detailed Audit
    Obnoxio The Clown -- Thursday, 4 March 2010, at 5:19 p.m.
  • Re: Detailed Audit
    Richard Snoke -- Thursday, 4 March 2010, at 5:40 p.m.
  • Re: Detailed Audit
    Art Kagel -- Thursday, 4 March 2010, at 5:56 p.m.
  • Re: Detailed Audit
    Fernando Nunes -- Sunday, 7 March 2010, at 6:08 p.m.

IDS Forum is maintained by Administrator with WebBBS 5.12.