ORACLE AUDIT命令

刺骨的言语ヽ痛彻心扉 2023-10-19 07:56 121阅读 0赞

## AUDIT ##

Purpose

Use the `AUDIT` statement to:

*  Track the occurrence of SQL statements in subsequent user sessions. You can track the occurrence of a specific SQL statement or of all SQL statements authorized by a particular system privilege. Auditing operations on SQL statements apply only to subsequent sessions, not to current sessions.
 *  Track operations on a specific schema object. Auditing operations on schema objects apply to current sessions as well as to subsequent sessions.
    
    See Also:
    
     *  [Oracle Database Security Guide][] for general information about auditing
     *  [PL/SQL Packages and Types Reference][PL_SQL Packages and Types Reference] for information on the `DBMS_FGA` package, which lets you create and administer value-based auditing policies
     *  [NOAUDIT][] for information on disabling auditing

Prerequisites

To audit occurrences of a SQL statement, you must have `AUDIT` `SYSTEM` system privilege.

To audit operations on a schema object, the object you choose for auditing must be in your own schema or you must have `AUDIT` `ANY` system privilege. In addition, if the object you choose for auditing is a directory object, even if you created it, then you must have `AUDIT` `ANY` system privilege.

To collect auditing results, you must set the initialization parameter `AUDIT_TRAIL` to `DB`. You can specify auditing options regardless of whether auditing is enabled. However, Oracle Database does not generate audit records until you enable auditing.

See Also:

[Oracle Database Reference][] for information on the `AUDIT_TRAIL` parameter

Syntax

audit::=

![Description of audit.gif follows][]  
[Description of the illustration audit.gif][]

[sql\_statement\_clause][sql_statement_clause]::=

![Description of sql\_statement\_clause.gif follows][Description of sql_statement_clause.gif follows]  
[Description of the illustration sql\_statement\_clause.gif][Description of the illustration sql_statement_clause.gif]

[auditing\_by\_clause][auditing_by_clause]::=

![Description of auditing\_by\_clause.gif follows][Description of auditing_by_clause.gif follows]  
[Description of the illustration auditing\_by\_clause.gif][Description of the illustration auditing_by_clause.gif]

[schema\_object\_clause][schema_object_clause]::=

![Description of schema\_object\_clause.gif follows][Description of schema_object_clause.gif follows]  
[Description of the illustration schema\_object\_clause.gif][Description of the illustration schema_object_clause.gif]

[auditing\_on\_clause][auditing_on_clause]::=

![Description of auditing\_on\_clause.gif follows][Description of auditing_on_clause.gif follows]  
[Description of the illustration auditing\_on\_clause.gif][Description of the illustration auditing_on_clause.gif]

Semantics

sql\_statement\_clause

Use the `sql_statement_clause` to audit SQL statements.

statement\_option

Specify a statement option to audit specific SQL statements.

For each audited operation, Oracle Database produces an audit record containing this information:

*  The user performing the operation
 *  The type of operation
 *  The object involved in the operation
 *  The date and time of the operation

Oracle Database writes audit records to the audit trail, which is a database table containing audit records. You can review database activity by examining the audit trail through data dictionary views.

See Also:

*  [Table 13-1][] and [Table 13-2][] for a list of statement options and the SQL statements they audit
 *  [Oracle Database Security Guide][Oracle Database Security Guide 1] for a listing of the audit trail data dictionary views
 *  [Oracle Database Reference][] for detailed descriptions of the data dictionary views
 *  ["Auditing SQL Statements Relating to Roles: Example"][Auditing SQL Statements Relating to Roles_ Example]

system\_privilege

Specify a system privilege to audit SQL statements that are authorized by the specified system privilege.

Rather than specifying many individual system privileges, you can specify the roles `CONNECT`, `RESOURCE`, and `DBA`. Doing so is equivalent to auditing all of the system privileges granted to those roles.

Oracle Database also provides two shortcuts for specifying groups of system privileges and statement options at once:

ALL Specify `ALL` to audit all statements options shown in [Table 13-1][] but not the additional statement options shown in [Table 13-2][].

ALL PRIVILEGES Specify `ALL` `PRIVILEGES` to audit system privileges.

Note:

Oracle recommends that you specify individual system privileges and statement options for auditing rather than roles or shortcuts. The specific system privileges and statement options encompassed by roles and shortcuts change from one release to the next and may not be supported in future versions of Oracle Database.

See Also:

*  [Table 18-1, "System Privileges"][Table 18-1_ _System Privileges] for a list of all system privileges and the SQL statements that they authorize
 *  [GRANT][] for more information on the `CONNECT`, `RESOURCE`, and `DBA` roles
 *  ["Auditing Query and Update SQL Statements: Example"][Auditing Query and Update SQL Statements_ Example], ["Auditing Deletions: Example"][Auditing Deletions_ Example], and ["Auditing Statements Relating to Directories: Examples"][Auditing Statements Relating to Directories_ Examples]

auditing\_by\_clause

Specify the `auditing_by_clause` to audit only those SQL statements issued by particular users. If you omit this clause, then Oracle Database audits all users' statements.

BY user  Use this clause to restrict auditing to only SQL statements issued by the specified users.

BY proxy  Use this clause to restrict auditing to only SQL statements issued by the specified proxies.

See Also:

[Oracle Database Concepts][] for more information on proxies and their use of the database

schema\_object\_clause

Use the `schema_object_clause` to audit operations on schema objects.

object\_option

Specify the particular operation for auditing. [Table 13-3][] shows each object option and the types of objects to which it applies. The name of each object option specifies a SQL statement to be audited. For example, if you choose to audit a table with the `ALTER` option, then Oracle Database audits all `ALTER``TABLE` statements issued against the table. If you choose to audit a sequence with the `SELECT` option, then the database audits all statements that use any values of the sequence.

ALL

Specify `ALL` as a shortcut equivalent to specifying all object options applicable for the type of object.

auditing\_on\_clause

The `auditing_on_clause` lets you specify the particular schema object to be audited.

See Also:

["Auditing Queries on a Table: Example"][Auditing Queries on a Table_ Example], ["Auditing Inserts and Updates on a Table: Example"][Auditing Inserts and Updates on a Table_ Example], and ["Auditing Operations on a Sequence: Example"][Auditing Operations on a Sequence_ Example]

schema Specify the schema containing the object chosen for auditing. If you omit `schema`, then Oracle Database assumes the object is in your own schema.

object Specify the name of the object to be audited. The object must be a table, view, sequence, stored procedure, function, package, materialized view, or library.

You can also specify a synonym for a table, view, sequence, procedure, stored function, package, materialized view, or user-defined type.

ON DEFAULT  Specify `ON` `DEFAULT` to establish the specified object options as default object options for subsequently created objects. After you have established these default auditing options, any subsequently created object is automatically audited with those options. The default auditing options for a view are always the union of the auditing options for the base tables of the view. You can see the current default auditing options by querying the `ALL_DEF_AUDIT_OPTS`data dictionary view.

When you change the default auditing options, the auditing options for previously created objects remain the same. You can change the auditing options for an existing object only by specifying the object in the `ON` clause of the `AUDIT` statement.

See Also:

["Setting Default Auditing Options: Example"][Setting Default Auditing Options_ Example]

ON DIRECTORY directory\_name  The `ON` `DIRECTORY` clause lets you specify the name of a directory chosen for auditing.

NETWORK Use this clause to detect internal failures in the network layer.

See Also:

[Oracle Database Security Guide][Oracle Database Security Guide 2] for information on network auditing

BY SESSION

Specify `BY` `SESSION` if you want Oracle Database to write a single record for all SQL statements of the same type issued and operations of the same type executed on the same schema objects in the same session.

Oracle Database can write to an operating system audit file but cannot read it to detect whether an entry has already been written for a particular operation. Therefore, if you are using an operating system file for the audit trail (that is, the `AUDIT_FILE_DEST` initialization parameter is set to `OS`), then the database may write multiple records to the audit trail file even if you specify `BY` `SESSION`.

BY ACCESS

Specify `BY` `ACCESS` if you want Oracle Database to write one record for each audited statement and operation.

If you specify statement options or system privileges that audit data definition language (DDL) statements, then the database automatically audits by access regardless of whether you specify the `BY` `SESSION` clause or `BY` `ACCESS` clause.

For statement options and system privileges that audit SQL statements other than DDL, you can specify either `BY` `SESSION` or `BY` `ACCESS`. `BY` `SESSION` is the default.

WHENEVER \[NOT\] SUCCESSFUL

Specify `WHENEVER` `SUCCESSFUL` to audit only SQL statements and operations that succeed.

Specify `WHENEVER` `NOT` `SUCCESSFUL` to audit only statements and operations that fail or result in errors.

If you omit this clause, then Oracle Database performs the audit regardless of success or failure.

Tables of Auditing Options

Table 13-1 Statement Auditing Options for Database Objects

<table> 
 <thead> 
 <tr> 
 <th>Statement Option</th> 
 <th>SQL Statements and Operations</th> 
 </tr> 
 </thead> 
 <tbody> 
 <tr> 
 <td> <code>ALTER SYSTEM</code> </td> 
 <td> <code>ALTER SYSTEM</code> </td> 
 </tr> 
 <tr> 
 <td> <code>CLUSTER</code> </td> 
 <td> <code>CREATE</code>&nbsp;<code>CLUSTER</code> <code>ALTER</code>&nbsp;<code>CLUSTER</code> <code>DROP</code>&nbsp;<code>CLUSTER</code> <code>TRUNCATE</code>&nbsp;<code>CLUSTER</code> </td> 
 </tr> 
 <tr> 
 <td> <code>CONTEXT</code> </td> 
 <td> <code>CREATE</code>&nbsp;<code>CONTEXT</code> <code>DROP</code>&nbsp;<code>CONTEXT</code> </td> 
 </tr> 
 <tr> 
 <td> <code>DATABASE</code>&nbsp;<code>LINK</code> </td> 
 <td> <code>CREATE</code>&nbsp;<code>DATABASE</code>&nbsp;<code>LINK</code> <code>DROP</code>&nbsp;<code>DATABASE</code>&nbsp;<code>LINK</code> </td> 
 </tr> 
 <tr> 
 <td> <code>DIMENSION</code> </td> 
 <td> <code>CREATE</code>&nbsp;<code>DIMENSION</code> <code>ALTER</code>&nbsp;<code>DIMENSION</code> <code>DROP</code>&nbsp;<code>DIMENSION</code> </td> 
 </tr> 
 <tr> 
 <td> <code>DIRECTORY</code> </td> 
 <td> <code>CREATE</code>&nbsp;<code>DIRECTORY</code> <code>DROP</code>&nbsp;<code>DIRECTORY</code> </td> 
 </tr> 
 <tr> 
 <td> <code>INDEX</code> </td> 
 <td> <code>CREATE</code>&nbsp;<code>INDEX</code> <code>ALTER</code>&nbsp;<code>INDEX</code> <code>ANALYZE INDEX</code> <code>DROP</code>&nbsp;<code>INDEX</code> </td> 
 </tr> 
 <tr> 
 <td> <code>MATERIALIZED</code>&nbsp;<code>VIEW</code> </td> 
 <td> <code>CREATE</code>&nbsp;<code>MATERIALIZED</code>&nbsp;<code>VIEW</code> <code>ALTER</code>&nbsp;<code>MATERIALIZED</code>&nbsp;<code>VIEW</code> <code>DROP</code>&nbsp;<code>MATERIALIZED</code>&nbsp;<code>VIEW</code> </td> 
 </tr> 
 <tr> 
 <td> <code>NOT</code>&nbsp;<code>EXISTS</code> </td> 
 <td> All SQL statements that fail because a specified object does not exist. </td> 
 </tr> 
 <tr> 
 <td> <code>PROCEDURE</code>&nbsp;(See note at end of table) </td> 
 <td> <code>CREATE</code>&nbsp;<code>FUNCTION</code> <code>CREATE</code>&nbsp;<code>LIBRARY</code> <code>CREATE</code>&nbsp;<code>PACKAGE</code> <code>CREATE</code>&nbsp;<code>PACKAGE</code>&nbsp;<code>BODY</code> <code>CREATE</code>&nbsp;<code>PROCEDURE</code> <code>DROP</code>&nbsp;<code>FUNCTION</code> <code>DROP</code>&nbsp;<code>LIBRARY</code> <code>DROP</code>&nbsp;<code>PACKAGE</code> <code>DROP</code>&nbsp;<code>PROCEDURE</code> </td> 
 </tr> 
 <tr> 
 <td> <code>PROFILE</code> </td> 
 <td> <code>CREATE</code>&nbsp;<code>PROFILE</code> <code>ALTER PROFILE</code> <code>DROP PROFILE</code> </td> 
 </tr> 
 <tr> 
 <td> <code>PUBLIC</code>&nbsp;<code>DATABASE</code>&nbsp;<code>LINK</code> </td> 
 <td> <code>CREATE</code>&nbsp;<code>PUBLIC</code>&nbsp;<code>DATABASE</code>&nbsp;<code>LINK</code> <code>DROP</code>&nbsp;<code>PUBLIC DATABASE</code>&nbsp;<code>LINK</code> </td> 
 </tr> 
 <tr> 
 <td> <code>PUBLIC</code>&nbsp;<code>SYNONYM</code> </td> 
 <td> <code>CREATE</code>&nbsp;<code>PUBLIC</code>&nbsp;<code>SYNONYM</code> <code>DROP</code>&nbsp;<code>PUBLIC</code>&nbsp;<code>SYNONYM</code> </td> 
 </tr> 
 <tr> 
 <td> <code>ROLE</code> </td> 
 <td> <code>CREATE</code>&nbsp;<code>ROLE</code> <code>ALTER</code>&nbsp;<code>ROLE</code> <code>DROP</code>&nbsp;<code>ROLE</code> <code>SET</code>&nbsp;<code>ROLE</code> </td> 
 </tr> 
 <tr> 
 <td> <code>ROLLBACK SEGMENT</code> </td> 
 <td> <code>CREATE ROLLBACK SEGMENT</code> <code>ALTER ROLLBACK SEGMENT</code> <code>DROP</code>&nbsp;<code>ROLLBACK</code>&nbsp;<code>SEGMENT</code> </td> 
 </tr> 
 <tr> 
 <td> <code>SEQUENCE</code> </td> 
 <td> <code>CREATE</code>&nbsp;<code>SEQUENCE</code> <code>DROP</code>&nbsp;<code>SEQUENCE</code> </td> 
 </tr> 
 <tr> 
 <td> <code>SESSION</code> </td> 
 <td> Logons </td> 
 </tr> 
 <tr> 
 <td> <code>SYNONYM</code> </td> 
 <td> <code>CREATE</code>&nbsp;<code>SYNONYM</code> <code>DROP</code>&nbsp;<code>SYNONYM</code> </td> 
 </tr> 
 <tr> 
 <td> <code>SYSTEM AUDIT</code> </td> 
 <td> <code>AUDIT</code>&nbsp;<code>sql_statements</code> <code>NOAUDIT</code>&nbsp;<code>sql_statements</code> </td> 
 </tr> 
 <tr> 
 <td> <code>SYSTEM GRANT</code> </td> 
 <td> <code>GRANT</code>&nbsp;<code>system_privileges_and_roles</code> <code>REVOKE</code>&nbsp;<code>system_privileges_and_roles</code> </td> 
 </tr> 
 <tr> 
 <td> <code>TABLE</code> </td> 
 <td> <code>CREATE</code>&nbsp;<code>TABLE</code> <code>DROP</code>&nbsp;<code>TABLE</code> <code>TRUNCATE</code>&nbsp;<code>TABLE</code> </td> 
 </tr> 
 <tr> 
 <td> <code>TABLESPACE</code> </td> 
 <td> <code>CREATE</code>&nbsp;<code>TABLESPACE</code> <code>ALTER</code>&nbsp;<code>TABLESPACE</code> <code>DROP</code>&nbsp;<code>TABLESPACE</code> </td> 
 </tr> 
 <tr> 
 <td> <code>TRIGGER</code> </td> 
 <td> <code>CREATE</code>&nbsp;<code>TRIGGER</code> <code>ALTER</code>&nbsp;<code>TRIGGER</code> &nbsp;&nbsp;&nbsp;with&nbsp;<code>ENABLE</code>&nbsp;and&nbsp;<code>DISABLE</code>&nbsp;clauses <code>DROP</code>&nbsp;<code>TRIGGER</code> <code>ALTER</code>&nbsp;TABLE &nbsp;&nbsp;&nbsp;with&nbsp;<code>ENABLE</code>&nbsp;<code>ALL</code>&nbsp;<code>TRIGGERS</code>&nbsp;clause &nbsp;&nbsp;&nbsp;and&nbsp;<code>DISABLE</code>&nbsp;<code>ALL</code>&nbsp;<code>TRIGGERS</code>&nbsp;clause </td> 
 </tr> 
 <tr> 
 <td> <code>TYPE</code> </td> 
 <td> <code>CREATE</code>&nbsp;<code>TYPE</code> <code>CREATE</code>&nbsp;<code>TYPE</code>&nbsp;<code>BODY</code> <code>ALTER</code>&nbsp;<code>TYPE</code> <code>DROP</code>&nbsp;<code>TYPE</code> <code>DROP</code>&nbsp;<code>TYPE</code>&nbsp;<code>BODY</code> </td> 
 </tr> 
 <tr> 
 <td> <code>USER</code> </td> 
 <td> <code>CREATE</code>&nbsp;<code>USER</code> <code>ALTER</code>&nbsp;<code>USER</code> <code>DROP</code>&nbsp;<code>USER</code> </td> 
 </tr> 
 <tr> 
 <td> <code>VIEW</code> </td> 
 <td> <code>CREATE</code>&nbsp;<code>VIEW</code> <code>DROP</code>&nbsp;<code>VIEW</code> </td> 
 </tr> 
 </tbody> 
</table>

Note:

Java schema objects (sources, classes, and resources) are considered the same as procedures for purposes of auditing SQL statements.

Table 13-2 Additional Statement Auditing Options for SQL Statements

<table> 
 <thead> 
 <tr> 
 <th>Statement Option</th> 
 <th>SQL Statements and Operations</th> 
 </tr> 
 </thead> 
 <tbody> 
 <tr> 
 <td> <code>ALTER</code>&nbsp;<code>SEQUENCE</code> </td> 
 <td> <code>ALTER</code>&nbsp;<code>SEQUENCE</code> </td> 
 </tr> 
 <tr> 
 <td> <code>ALTER</code>&nbsp;<code>TABLE</code> </td> 
 <td> <code>ALTER</code>&nbsp;<code>TABLE</code> </td> 
 </tr> 
 <tr> 
 <td> <code>COMMENT</code>&nbsp;<code>TABLE</code> </td> 
 <td> <code>COMMENT</code>&nbsp;<code>ON</code>&nbsp;<code>TABLE</code>&nbsp;<code>table</code>,&nbsp;<code>view</code>,&nbsp;<code>materialized</code>&nbsp;<code>view</code> <code>COMMENT</code>&nbsp;<code>ON</code>&nbsp;<code>COLUMN</code>&nbsp;<code>table</code>.<code>column</code>,&nbsp;<code>view</code>.<code>column</code>,&nbsp;<code>materialized</code><code>view</code>.<code>column</code> </td> 
 </tr> 
 <tr> 
 <td> <code>DELETE</code>&nbsp;<code>TABLE</code> </td> 
 <td> <code>DELETE</code>&nbsp;<code>FROM</code>&nbsp;<code>table</code>,&nbsp;<code>view</code> </td> 
 </tr> 
 <tr> 
 <td> <code>EXECUTE</code>&nbsp;<code>PROCEDURE</code> </td> 
 <td> <code>CALL</code> Execution of any procedure or function or access to any variable, library, or cursor inside a package. </td> 
 </tr> 
 <tr> 
 <td> <code>GRANT</code>&nbsp;<code>DIRECTORY</code> </td> 
 <td> <code>GRANT</code>&nbsp;privilege&nbsp;<code>ON</code>&nbsp;directory <code>REVOKE</code>&nbsp;privilege&nbsp;<code>ON</code>&nbsp;directory </td> 
 </tr> 
 <tr> 
 <td> <code>GRANT</code>&nbsp;<code>PROCEDURE</code> </td> 
 <td> <code>GRANT</code>&nbsp;privilege&nbsp;<code>ON</code>&nbsp;procedure, function, package <code>REVOKE</code>&nbsp;privilege&nbsp;<code>ON</code>&nbsp;procedure, function, package </td> 
 </tr> 
 <tr> 
 <td> <code>GRANT</code>&nbsp;<code>SEQUENCE</code> </td> 
 <td> <code>GRANT</code>&nbsp;privilege&nbsp;<code>ON</code>&nbsp;sequence <code>REVOKE</code>&nbsp;privilege&nbsp;<code>ON</code>&nbsp;sequence </td> 
 </tr> 
 <tr> 
 <td> <code>GRANT</code>&nbsp;<code>TABLE</code> </td> 
 <td> <code>GRANT</code>&nbsp;privilege&nbsp;<code>ON</code>&nbsp;table, view, materialized view <code>REVOKE</code>&nbsp;privilege&nbsp;<code>ON</code>&nbsp;table, view, materialized view </td> 
 </tr> 
 <tr> 
 <td> <code>GRANT</code>&nbsp;<code>TYPE</code> </td> 
 <td> <code>GRANT</code>&nbsp;privilege&nbsp;<code>ON</code>&nbsp;<code>TYPE</code> <code>REVOKE</code>&nbsp;privilege&nbsp;<code>ON</code>&nbsp;<code>TYPE</code> </td> 
 </tr> 
 <tr> 
 <td> <code>INSERT</code>&nbsp;<code>TABLE</code> </td> 
 <td> <code>INSERT</code>&nbsp;<code>INTO</code>&nbsp;table, view </td> 
 </tr> 
 <tr> 
 <td> <code>LOCK</code>&nbsp;<code>TABLE</code> </td> 
 <td> <code>LOCK</code>&nbsp;<code>TABLE</code>&nbsp;table, view </td> 
 </tr> 
 <tr> 
 <td> <code>SELECT</code>&nbsp;<code>SEQUENCE</code> </td> 
 <td> Any statement containing&nbsp;<code>sequence</code>.<code>CURRVAL</code>&nbsp;or&nbsp;<code>sequence</code>.<code>NEXTVAL</code> </td> 
 </tr> 
 <tr> 
 <td> <code>SELECT</code>&nbsp;<code>TABLE</code> </td> 
 <td> <code>SELECT</code>&nbsp;<code>FROM</code>&nbsp;table, view, materialized view </td> 
 </tr> 
 <tr> 
 <td> <code>UPDATE</code>&nbsp;<code>TABLE</code> </td> 
 <td> <code>UPDATE</code>&nbsp;table, view </td> 
 </tr> 
 </tbody> 
</table>

Table 13-3 Object Auditing Options

<table> 
 <thead> 
 <tr> 
 <th>Object Option</th> 
 <th>Table</th> 
 <th>View</th> 
 <th>Sequence</th> 
 <th>Procedure, Function, Package (Note 1)</th> 
 <th>Materialized View (Note 2)</th> 
 <th>Directory</th> 
 <th>Library</th> 
 <th>ObjectType</th> 
 <th>Context</th> 
 </tr> 
 </thead> 
 <tbody> 
 <tr> 
 <td> <code>ALTER</code> </td> 
 <td> X </td> 
 <td> -- </td> 
 <td> X </td> 
 <td> -- </td> 
 <td> X </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> X </td> 
 <td> -- </td> 
 </tr> 
 <tr> 
 <td> <code>AUDIT</code> </td> 
 <td> X </td> 
 <td> X </td> 
 <td> X </td> 
 <td> X </td> 
 <td> X </td> 
 <td> X </td> 
 <td> -- </td> 
 <td> X </td> 
 <td> X </td> 
 </tr> 
 <tr> 
 <td> <code>COMMENT</code> </td> 
 <td> X </td> 
 <td> X </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> X </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> -- </td> 
 </tr> 
 <tr> 
 <td> <code>DELETE</code> </td> 
 <td> X </td> 
 <td> X </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> X </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> -- </td> 
 </tr> 
 <tr> 
 <td> <code>EXECUTE</code> </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> X </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> X </td> 
 <td> -- </td> 
 <td> -- </td> 
 </tr> 
 <tr> 
 <td> <code>FLASHBACK</code>(Note 3) </td> 
 <td> X </td> 
 <td> X </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> -- </td> 
 </tr> 
 <tr> 
 <td> <code>GRANT</code> </td> 
 <td> X </td> 
 <td> X </td> 
 <td> X </td> 
 <td> X </td> 
 <td> -- </td> 
 <td> X </td> 
 <td> X </td> 
 <td> X </td> 
 <td> X </td> 
 </tr> 
 <tr> 
 <td> <code>INDEX</code> </td> 
 <td> X </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> X </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> -- </td> 
 </tr> 
 <tr> 
 <td> <code>INSERT</code> </td> 
 <td> X </td> 
 <td> X </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> X </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> -- </td> 
 </tr> 
 <tr> 
 <td> <code>LOCK</code> </td> 
 <td> X </td> 
 <td> X </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> X </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> -- </td> 
 </tr> 
 <tr> 
 <td> <code>READ</code> </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> X </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> -- </td> 
 </tr> 
 <tr> 
 <td> <code>RENAME</code> </td> 
 <td> X </td> 
 <td> X </td> 
 <td> -- </td> 
 <td>&nbsp;</td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> -- </td> 
 </tr> 
 <tr> 
 <td> <code>SELECT</code> </td> 
 <td> X </td> 
 <td> X </td> 
 <td> X </td> 
 <td> -- </td> 
 <td> X </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> -- </td> 
 </tr> 
 <tr> 
 <td> <code>UPDATE</code> </td> 
 <td> X </td> 
 <td> X </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> X </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> -- </td> 
 <td> -- </td> 
 </tr> 
 </tbody> 
</table>

Note 1: Java schema objects (sources, classes, and resources) are considered the same as procedures, functions, and packages for purposes of auditing options.

Note 2: You can audit `INSERT`, `UPDATE`, and `DELETE` operations only on updatable materialized views.

Note 3: The `FLASHBACK` audit object option applies only to flashback queries.

Examples

Auditing SQL Statements Relating to Roles: Example To choose auditing for every SQL statement that creates, alters, drops, or sets a role, regardless of whether the statement completes successfully, issue the following statement:

AUDIT ROLE;

To choose auditing for every statement that successfully creates, alters, drops, or sets a role, issue the following statement:

AUDIT ROLE
        WHENEVER SUCCESSFUL;

To choose auditing for every `CREATE` `ROLE`, `ALTER` `ROLE`, `DROP` `ROLE`, or `SET` `ROLE` statement that results in an Oracle Database error, issue the following statement:

AUDIT ROLE
        WHENEVER NOT SUCCESSFUL;

Auditing Query and Update SQL Statements: Example To choose auditing for any statement that queries or updates any table, issue the following statement:

AUDIT SELECT TABLE, UPDATE TABLE;

To choose auditing for statements issued by the users `hr` and `oe` that query or update a table or view, issue the following statement

AUDIT SELECT TABLE, UPDATE TABLE
        BY hr, oe;

Auditing Deletions: Example To choose auditing for statements issued using the `DELETE` `ANY` `TABLE` system privilege, issue the following statement:

AUDIT DELETE ANY TABLE;

Auditing Statements Relating to Directories: Examples To choose auditing for statements issued using the `CREATE` `ANY` `DIRECTORY` system privilege, issue the following statement:

AUDIT CREATE ANY DIRECTORY;

To choose auditing for `CREATE` `DIRECTORY` (and `DROP` `DIRECTORY`) statements that do not use the `CREATE` `ANY` `DIRECTORY` system privilege, issue the following statement:

AUDIT DIRECTORY;

To choose auditing for every statement that reads files from the `bfile_dir` directory, issue the following statement:

AUDIT READ ON DIRECTORY bfile_dir;

Auditing Queries on a Table: Example To choose auditing for every SQL statement that queries the `employees` table in the schema `hr`, issue the following statement:

AUDIT SELECT
        ON hr.employees;

To choose auditing for every statement that successfully queries the `employees` table in the schema `hr`, issue the following statement:

AUDIT SELECT 
        ON hr.employees
        WHENEVER SUCCESSFUL;

To choose auditing for every statement that queries the `employees` table in the schema `hr` and results in an Oracle Database error, issue the following statement:

AUDIT SELECT 
        ON hr.employees
        WHENEVER NOT SUCCESSFUL;

Auditing Inserts and Updates on a Table: Example To choose auditing for every statement that inserts or updates a row in the `customers` table in the schema `oe`, issue the following statement:

AUDIT INSERT, UPDATE
        ON oe.customers;

Auditing Operations on a Sequence: Example To choose auditing for every statement that performs any operation on the `employees_seq` sequence in the schema `hr`, issue the following statement:

AUDIT ALL
        ON hr.employees_seq;

The preceding statement uses the `ALL` shortcut to choose auditing for the following statements that operate on the sequence:

*  `ALTER` `SEQUENCE`
 *  `AUDIT`
 *  `GRANT`
 *  any statement that accesses the values of the sequence using the pseudocolumns `CURRVAL` or `NEXTVAL`

Setting Default Auditing Options: Example The following statement specifies default auditing options for objects created in the future:

AUDIT ALTER, GRANT, INSERT, UPDATE, DELETE
        ON DEFAULT;

Any objects created later are automatically audited with the specified options that apply to them, if auditing has been enabled:

*  If you create a table, then Oracle Database automatically audits any `ALTER`, `GRANT`, `INSERT`, `UPDATE`, or `DELETE` statements issued against the table.
 *  If you create a view, then Oracle Database automatically audits any `GRANT`, `INSERT`, `UPDATE`, or `DELETE` statements issued against the view.
 *  If you create a sequence, then Oracle Database automatically audits any `ALTER` or `GRANT` statements issued against the sequence.
 *  If you create a procedure, package, or function, then Oracle Database automatically audits any `ALTER` or `GRANT` statements issued against it.

[Oracle Database Security Guide]: https://docs.oracle.com/cd/B19306_01/network.102/b14266/auditing.htm#DBSEG125
[PL_SQL Packages and Types Reference]: https://docs.oracle.com/cd/B19306_01/appdev.102/b14258/d_fga.htm#ARPLS015
[NOAUDIT]: https://docs.oracle.com/cd/B19306_01/server.102/b14200/statements_9017.htm#i2088908
[Oracle Database Reference]: https://docs.oracle.com/cd/B19306_01/server.102/b14237/toc.htm
[Description of audit.gif follows]: https://imgconvert.csdnimg.cn/aHR0cHM6Ly9kb2NzLm9yYWNsZS5jb20vY2QvQjE5MzA2XzAxL3NlcnZlci4xMDIvYjE0MjAwL2ltZy9hdWRpdC5naWY
[Description of the illustration audit.gif]: https://docs.oracle.com/cd/B19306_01/server.102/b14200/img_text/audit.htm
[sql_statement_clause]: https://docs.oracle.com/cd/B19306_01/server.102/b14200/statements_4007.htm#i2059144
[Description of sql_statement_clause.gif follows]: https://imgconvert.csdnimg.cn/aHR0cHM6Ly9kb2NzLm9yYWNsZS5jb20vY2QvQjE5MzA2XzAxL3NlcnZlci4xMDIvYjE0MjAwL2ltZy9zcWxfc3RhdGVtZW50X2NsYXVzZS5naWY
[Description of the illustration sql_statement_clause.gif]: https://docs.oracle.com/cd/B19306_01/server.102/b14200/img_text/sql_statement_clause.htm
[auditing_by_clause]: https://docs.oracle.com/cd/B19306_01/server.102/b14200/statements_4007.htm#i2077123
[Description of auditing_by_clause.gif follows]: https://imgconvert.csdnimg.cn/aHR0cHM6Ly9kb2NzLm9yYWNsZS5jb20vY2QvQjE5MzA2XzAxL3NlcnZlci4xMDIvYjE0MjAwL2ltZy9hdWRpdGluZ19ieV9jbGF1c2UuZ2lm
[Description of the illustration auditing_by_clause.gif]: https://docs.oracle.com/cd/B19306_01/server.102/b14200/img_text/auditing_by_clause.htm
[schema_object_clause]: https://docs.oracle.com/cd/B19306_01/server.102/b14200/statements_4007.htm#i2083424
[Description of schema_object_clause.gif follows]: https://imgconvert.csdnimg.cn/aHR0cHM6Ly9kb2NzLm9yYWNsZS5jb20vY2QvQjE5MzA2XzAxL3NlcnZlci4xMDIvYjE0MjAwL2ltZy9zY2hlbWFfb2JqZWN0X2NsYXVzZS5naWY
[Description of the illustration schema_object_clause.gif]: https://docs.oracle.com/cd/B19306_01/server.102/b14200/img_text/schema_object_clause.htm
[auditing_on_clause]: https://docs.oracle.com/cd/B19306_01/server.102/b14200/statements_4007.htm#i2077291
[Description of auditing_on_clause.gif follows]: https://imgconvert.csdnimg.cn/aHR0cHM6Ly9kb2NzLm9yYWNsZS5jb20vY2QvQjE5MzA2XzAxL3NlcnZlci4xMDIvYjE0MjAwL2ltZy9hdWRpdGluZ19vbl9jbGF1c2UuZ2lm
[Description of the illustration auditing_on_clause.gif]: https://docs.oracle.com/cd/B19306_01/server.102/b14200/img_text/auditing_on_clause.htm
[Table 13-1]: https://docs.oracle.com/cd/B19306_01/server.102/b14200/statements_4007.htm#BABEFEAC
[Table 13-2]: https://docs.oracle.com/cd/B19306_01/server.102/b14200/statements_4007.htm#g2274817
[Oracle Database Security Guide 1]: https://docs.oracle.com/cd/B19306_01/network.102/b14266/toc.htm
[Auditing SQL Statements Relating to Roles_ Example]: https://docs.oracle.com/cd/B19306_01/server.102/b14200/statements_4007.htm#i2115960
[Table 18-1_ _System Privileges]: https://docs.oracle.com/cd/B19306_01/server.102/b14200/statements_9013.htm#BABEFFEE
[GRANT]: https://docs.oracle.com/cd/B19306_01/server.102/b14200/statements_9013.htm#i2155015
[Auditing Query and Update SQL Statements_ Example]: https://docs.oracle.com/cd/B19306_01/server.102/b14200/statements_4007.htm#i2115972
[Auditing Deletions_ Example]: https://docs.oracle.com/cd/B19306_01/server.102/b14200/statements_4007.htm#i2115983
[Auditing Statements Relating to Directories_ Examples]: https://docs.oracle.com/cd/B19306_01/server.102/b14200/statements_4007.htm#i2115994
[Oracle Database Concepts]: https://docs.oracle.com/cd/B19306_01/server.102/b14220/toc.htm
[Table 13-3]: https://docs.oracle.com/cd/B19306_01/server.102/b14200/statements_4007.htm#g2275496
[Auditing Queries on a Table_ Example]: https://docs.oracle.com/cd/B19306_01/server.102/b14200/statements_4007.htm#i2116010
[Auditing Inserts and Updates on a Table_ Example]: https://docs.oracle.com/cd/B19306_01/server.102/b14200/statements_4007.htm#i2116021
[Auditing Operations on a Sequence_ Example]: https://docs.oracle.com/cd/B19306_01/server.102/b14200/statements_4007.htm#i2116032
[Setting Default Auditing Options_ Example]: https://docs.oracle.com/cd/B19306_01/server.102/b14200/statements_4007.htm#i2116057
[Oracle Database Security Guide 2]: https://docs.oracle.com/cd/B19306_01/network.102/b14266/cfgaudit.htm#DBSEG11013