Auditing Database Vault operations

In this recipe, you'll learn to audit Oracle Database Vault events.

Getting ready

To complete this recipe, you'll need to use Oracle Database 12c, which has Oracle Database Vault enabled and at least some of the components configured (for example, the realm HR realm and rule set Working Hours). Also, you'll need an existing user who has the audit_admin role (for example, jack).

How to do it...

1. Connect to the database as a user who has the audit_admin role (for example, jack):

   $ connect jack
   

2. Create the audit policy dbv_policy:

   SQL> CREATE AUDIT POLICY dbv_policy
   ACTIONS COMPONENT = DV Rule Set Failure on "Working Hours",realm 
   violation on "HR Realm";
   
   

3. Enable the audit policy dbv_policy:

   SQL> audit policy dbv_policy;
   

4. Execute several statements that will cause generation of audit records:

   SQL> select * from oe.orders;
   
   
   SQL> update hr.employees set salary=30000 where salary=24000;
   

How it works...

To create an audit policy that captures...