Auditing Database Vault operations

In this recipe, you'll learn to audit Oracle Database Vault events.

Getting ready

To complete this recipe, you'll need to use Oracle Database 12c, which has Oracle Database Vault enabled and at least some of the components configured (for example, the realm HR realm and rule set Working Hours). Also, you'll need an existing user who has the audit_admin role (for example, jack).

How to do it...

  1. Connect to the database as a user who has the audit_admin role (for example, jack):
    $ connect jack
    
  2. Create the audit policy dbv_policy:
    SQL> CREATE AUDIT POLICY dbv_policy
    ACTIONS COMPONENT = DV Rule Set Failure on "Working Hours",realm 
    violation on "HR Realm";
    
    
  3. Enable the audit policy dbv_policy:
    SQL> audit policy dbv_policy; ...

Get Oracle Database 12c Security Cookbook now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.