|
Auditing
See also:
Auditing ASE
The term auditing in
IQ
describes monitoring of activities on a
database.
If auditing is switched on, activities are recorded in the
transaction log
of IQ. Monitoring can be divided into four areas:
Successful and failed login attempts.
Event based time stamps in the range of milliseconds.
Successful and failed checks for privileges.
Actions done with DBA privileges.
Auditing: activating
To activate auditing, the server option
PUBLIC.AUDITING
must be set to 'ON'.
The option
AUDITING Option
can then be used to switches database auditing 'ON' or 'OFF'.
Auditing: Configuration
The
system procedures
sa_enable_auditing_type
and
sa_disable_auditing_type
can be used to configure or switch on or off checks on audit permissions, connection attempts,
DDL statements, public options and triggers.
Comments for audit monitoring can be written using the system procedure
sa_audit_string.
Auditing: retrieving audit data
To retrieve the audit trail from the transaction log the executable
dbtran
is used.
A complete and legible report can be obtained using the option -g .
This is a placeholder for the parameters -d , -t and -a
and orders the audit trail chronologically and adds trigger based events and
rolled back transactions to the output.
The parameter -n redirects the output into a file.
To redirect the ouput of currently executing processes on a running server into the file auditlogfile.txt, use
dbtran -g -c "uid=DBA;pwd=SQL;eng=IQ_server_name" -n auditlogfile.txt
The transaction log of IQ server can be read using
dbtran -g IQ_server_name.log
|
