Auditing

There are two types of autiding that can be set up in dbWatch.

Auditing of database statements, and auditing of user actions.

Database statements

DbWatch supports auditing of all statements that are executed on the database instances from dbWatch.

There is currently no graphical way of turning this feature on, so it involves manually editing the server_configuration.xml file.

Stop the dbWatch Server and take a backup of this file before editing it.

Add the following tag to the file:

<audit-settings>
   <audit-setting>
       <audit-catalog>E:/dbWatch/dbw-audit</audit-catalog>
       <file-switch-interval-minutes>360</file-switch-interval-minutes>
       <audit-level>2</audit-level>
       <file-keep-for-days>7</file-keep-for-days>
   </audit-setting>
</audit-settings>

• audit-catalog The catalog where dbWatch will place the audit files. dbWatch will create a file called audit.log in this catalog.
• file-switch-interval-minutes How many minutes should pass before switching log files. When switching files, dbWatch creates a zip file of the log and names it with a timestamp. Then a new audit.log file is created and used.
• file-keep-for-days Zip files that are older than this will be deleted. A vaule of 0, means it will not delete any files.
• audit-level 0=no logging, 1 = log statements triggered by user actions, 2 = log all statements

User actions

DbWatch supports auditing of the actions a user perfoms on the dbWatch Server.

There is currently no graphical way of turning this feature on, so it involves manually editing the server_configuration.xml file.

Stop the dbWatch Server and take a backup of this file before editing it.

Add the following tag to the file:

<dbwatch-audit>
   <audit-type>1</audit-type>
   <audit-type>2</audit-type>
   <audit-type>3</audit-type>
   <audit-type>4</audit-type>
   <audit-type>5</audit-type>
   <catalog>E:/dbwatch/user_audit</catalog>
</dbwatch-audit>

• catalog The catalog where dbWatch will place the audit files.
• audit-type 1=dbwatch get commands, 2 = dbwatch set commands, 3 = datebase get commands, 4 = database set commands, 5 = dbwatch logins

You can find a list of logged user actions here.

← Add a new server to your monitor / Special setup in NAT environments →