Audit user logon operations

This topic describes how to use the security audit feature to audit the logon operations of users.

Limitations

OceanBase Database supports security audit only in Oracle mode.

Audit the logon operations of a specified user

Log on to the database as the ORAAUDITOR user and specify to audit logon operations of the aud user.

obclient> AUDIT SESSION BY user1;

Audit the logon operations of all users

Log on to the database as the ORAAUDITOR user and specify to audit logon operations of all users.

obclient> AUDIT SESSION;

View audit records

View the audit records in the DBA_AUDIT_TRAIL table.

obclient> SELECT USERNAME,USERHOST,TIMESTAMP,SQL_TEXT FROM SYS.DBA_AUDIT_TRAIL;
+----------+----------------+-----------+----------+
| USERNAME | USERHOST       | TIMESTAMP | SQL_TEXT |
+----------+----------------+-----------+----------+
| USER1    | 10.10.10.10    | 22-DEC-21 | CONNECT  |
+----------+----------------+-----------+----------+
1 row in set

References

For more information about audit operations, see the following topics:

• Enable security audit
• Set and view audit rules
• View audit records
• Audit user operations
• Audit specified database objects