- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - HP-UX
- >
- Re: Oracle logging - HPUX
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-20-2005 04:35 AM
тАО09-20-2005 04:35 AM
Oracle logging - HPUX
Thanks
Joe.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-20-2005 04:42 AM
тАО09-20-2005 04:42 AM
Re: Oracle logging - HPUX
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-20-2005 05:14 AM
тАО09-20-2005 05:14 AM
Re: Oracle logging - HPUX
BIG thanks. Now that i have located the LOG file (it is way too big) how do i see the entry for change in the passwd or any relevant info pertaining to the outage? Please help
Thanks
Joe.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-20-2005 05:18 AM
тАО09-20-2005 05:18 AM
Re: Oracle logging - HPUX
If the user they logged in as sysdba or as SYS, you can look in the audit_file_Dest directory. The default is $ORACLE_HOME/rdbms/audit. There is a .aud file for each login to the database of privileged users.
You can also check the table SYS.AUD$ to see login and failed logins if you have auditing turned on.
Again, the listener log is probbaly what you need, but here's twoo more places to look, just in case.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-20-2005 04:36 PM
тАО09-20-2005 04:36 PM
Re: Oracle logging - HPUX
the listener.log and the audit files can come to the rescue.
in the audit files, you will have messages like:
Wed Sep 21 08:00:06 2005
ACTION : 'connect sys' OSPRIV : DBA
CLIENT USER: oracle8i
CLIENT TERMINAL:
STATUS: SUCCEEDED ( 0 )
also investigate on users who have such privileges that allow them to change passwords and have root/oracle user (or like) accesses
hope this helps too!
regards
yogeeraj
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-20-2005 05:19 PM
тАО09-20-2005 05:19 PM
Re: Oracle logging - HPUX
-->ceklistener
Recent Database Connections for cis2
On 21-SEP-2005 at 13:50:23 user oracle connected from cis4 using
On 21-SEP-2005 at 13:51:24 user oracle connected from cis4 using
On 21-SEP-2005 at 13:52:24 user oracle connected from cis4 using
On 21-SEP-2005 at 13:53:25 user oracle connected from cis4 using
On 21-SEP-2005 at 13:54:25 user oracle connected from cis4 using
On 21-SEP-2005 at 13:55:26 user oracle connected from cis4 using
On 21-SEP-2005 at 13:56:15 user connected from cis2 using
On 21-SEP-2005 at 13:56:26 user oracle connected from cis4 using
On 21-SEP-2005 at 13:57:27 user oracle connected from cis4 using
On 21-SEP-2005 at 13:58:27 user oracle connected from cis4 using
On 21-SEP-2005 at 13:59:28 user oracle connected from cis4 using
On 21-SEP-2005 at 14:00:28 user oracle connected from cis4 using
On 21-SEP-2005 at 14:01:28 user oracle connected from cis4 using
On 21-SEP-2005 at 14:02:29 user oracle connected from cis4 using
On 21-SEP-2005 at 14:03:29 user oracle connected from cis4 using
On 21-SEP-2005 at 14:04:30 user oracle connected from cis4 using
On 21-SEP-2005 at 14:05:30 user oracle connected from cis4 using
On 21-SEP-2005 at 14:06:14 user connected from cis2 using
On 21-SEP-2005 at 14:06:22 user oracle connected from cis4 using
On 21-SEP-2005 at 14:06:31 user oracle connected from cis4 using
On 21-SEP-2005 at 14:07:32 user oracle connected from cis4 using
The script looks like this:
grep -v service_update /s01/app/oracle/product/920/network/log/listener.log | tail -n 2048 | awk -f logins.awk
logins.awk looks like this:
-->cat logins.awk
BEGIN {
FS=" "
OFS=" "
print "Recent Database Connections for cis2"
}
$0 ~ /USER/ && $0 !~ /techone/ { num=index($0,"USER");
num=num+5;
let=index($0,")))");
tot=let-num;
num2=index($0,"HOST");
num2=num2+5;
let2=index($0,")(USER");
tot2=let2-num2;
num3=index($0,"PROGRAM");
num3=num3+8;
let3=index($0,")(HOST");
tot3=let3-num3;
print "On " $1,"at",$2,"user " substr($0,num,tot), "connected from",substr($0,num2,tot2), "using " substr($0,num3,tot3) ; matches++
}
END { print "A total of "matches" matches."}
oracle@cis2:cscdev in /home/oracle
-->
You will have to change the listener log file name ans path to suite your own environment.
The script, and its output, has been put to many uses.
Good luck!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-20-2005 05:21 PM
тАО09-20-2005 05:21 PM
Re: Oracle logging - HPUX
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-21-2005 01:11 AM
тАО09-21-2005 01:11 AM
Re: Oracle logging - HPUX
could I suggest you setup an Afterlogon trigger (for the future) ?
cf. Metalink Note:70679.1 "How to Audit Logon/Logoff Events with Triggers"
and also :
Note:167293.1 "Some examples about auditing and output of auditing"
Regards
Jean-Luc