Set and view auditing rules

After you enable security auditing, you must set specific auditing rules to audit user operations.

Set auditing rules

Log in to the Oracle-compatible tenant as the ORAAUDITOR user. You can configure auditing rules by using the built-in auditing management user ORAAUDITOR. Auditing rules can be of the following types:

• Statement auditing: Audits operations performed by specific users or by all users, without specifying particular objects.
• Object auditing: Audits operations performed on specific objects by specific users or by all users.

Auditing rules are configured using the DDL statements AUDIT and NOAUDIT. Each auditing rule is a schema object.

For more information about setting auditing rules, see AUDIT.

For example, to audit all INSERT, UPDATE, and DELETE operations on the tbl1 table owned by user user1:

obclient> AUDIT INSERT,UPDATE,DELETE ON user1.tbl1;

View auditing rules

After you set auditing rules, you can view information about them using a series of Oracle-compatible data dictionary views.

The following example shows how to view auditing rules in the ALL_DEF_AUDIT_OPTS view:

obclient> SELECT * FROM SYS.ALL_DEF_AUDIT_OPTS;

References

For more information about security auditing, see:

• Enable security auditing
• View auditing records