Database Reference
In-Depth Information
There are three main categories of information pertaining to human action in the DB:
•
External sources of data regarding DBA actions
•
The Oracle-supplied native audit trail
•
Other Oracle records of SQL issued by a human
We can begin by looking at the external sources of information most likely to yield useful information dealing
with an incident.
External Sources of Metadata
Putty logs are a good example of an external source of metadata. By default putty does not log commands entered
through its interface, but it is an easy task to select the radio buttons to record all session output to a
putty.log
file
that is always appended to BUT does not contain password fields. This putty log is useful as a self-reminder, and every
DBA needs to keep this log and be willing to share it if asked, hence the need to omit passwords from that log, as
shown in Figure
11-1
.
Figure 11-1.
Putty log configuration
