Informix History Log

Posted in 2005

Topics: Performance & Tuning, Security, Permissions & Auditing

sergios.zagotsis@egnatiabank.gr — Thu, 21 Apr 2005 07:30:38 — source: IIUG Forums & Mailing Lists

Hi, Does Informix 9.x supports a History Log? (Who and when was logged in, = what he did or tried to do?). =20 After a little search (Trusted Facility Manual) I found that Informix = supports an Auditing mechanism that has to be activated.=20 Does any one has implement it?=20 What are the pros and cons?=20 How it degrates Informix Server performance? Thanks Sergios

↪ replying to sergios.zagotsis@egnatiabank.gr

Rajib Sarkar — Thu, 21 Apr 2005 14:27:47 — source: IIUG Forums & Mailing Lists

--0__=88BBE579DFDD06578f9e8a93df938690918c88BBE579DFDD0657 Content-type: multipart/alternative; Boundary="1__=88BBE579DFDD06578f9e8a93df938690918c88BBE579DFDD0657" --1__=88BBE579DFDD06578f9e8a93df938690918c88BBE579DFDD0657 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: quoted-printable Yes, its a pretty useful tool if used judiciously. I have seen it implemented in pretty busy systems with minimal (around 3-5%) perf. degradation. If you use too much auditing like all SQL statements etc. = then u can really bog it down. The way this auditing works is that, there's = code within the engine to check if auditing is turned on or not, if yes, it checks for the masks, if the masks satisfy the criteria then it creates= the AUDIT record and writes it in the memory which is later on flushed on t= o a file. So, you see if you have too much auditing, you can increase the overhead significantly. But, if you just want to check who has logged in ..it shouldn't affect performance at all. I would suggest you to implement "onaudit" facility= in ur case. Thanx much, Rajib Sarkar Advisory Software Engineer DB2/UDB Regional Advanced Support IBM Data Management Group = "sergios.zag...." = <sergios.zagotsis = @egnatiabank.gr> = To Sent by: ids@iiug.org = forum.subscriber@ = cc iiug.org = Subj= ect Informix History Log [4766] = 04/21/2005 12:30 = AM = = = = = Hi, Does Informix 9.x supports a History Log? (Who and when was logged in, = =3D what he did or tried to do?). =3D20 After a little search (Trusted Facility Manual) I found that Informix =3D= supports an Auditing mechanism that has to be activated.=3D20 Does any one has implement it?=3D20 What are the pros and cons?=3D20 How it degrates Informix Server performance? Thanks Sergios = --1__=88BBE579DFDD06578f9e8a93df938690918c88BBE579DFDD0657 Content-type: text/html; charset=US-ASCII Content-Disposition: inline Content-transfer-encoding: quoted-printable <html><body> Yes, its a pretty useful tool if used judiciously. I have seen it im= plemented in pretty busy systems with minimal (around 3-5%) perf. degra= dation. If you use too much auditing like all SQL statements etc. then = u can really bog it down. The way this auditing works is that, there's = code within the engine to check if auditing is turned on or not, if yes= , it checks for the masks, if the masks satisfy the criteria then it cr= eates the AUDIT record and writes it in the memory which is later on fl= ushed on to a file. So, you see if you have too much auditing, you can = increase the overhead significantly. But, if you just want to check who has logged in ..it shouldn't affect = performance at all. I would suggest you to implement "onaudit&quot= ; facility in ur case. Thanx much, Rajib Sarkar Advisory Software Engineer DB2/UDB Regional Advanced Support IBM Data Management Group <img src=3D"cid:10__=3D88BBE579DFDD06578f9e8a93df938@us.ibm.com" width=3D= "16" height=3D"16" alt=3D"Inactive hide details for "sergios.zag..= .." <sergios.zagotsis@egnatiabank.gr>">"sergios.zag....= " <sergios.zagotsis@egnatiabank.gr> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">= <tr valign=3D"top"><td style=3D"background-image:url(cid:20__=3D88BBE57= 9DFDD06578f9e8a93df938@us.ibm.com); background-repeat: no-repeat; " wid= th=3D"40%"> <ul> <ul> <ul> <ul>"sergios.zag...." <sergios.zagotsi= s@egnatiabank.gr> Sent by: forum.subscriber@iiug.org 04/21/2005 12:30 AM</ul> </ul> </ul> </ul> </td><td width=3D"60%"> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">= <tr valign=3D"top"><td width=3D"1%" valign=3D"middle"><img src=3D"cid:3= 0__=3D88BBE579DFDD06578f9e8a93df938@us.ibm.com" border=3D"0" height=3D"= 1" width=3D"58" alt=3D""> <div align=3D"right">To</div></td><td width=3D"= 100%"><img src=3D"cid:30__=3D88BBE579DFDD06578f9e8a93df938@us.ibm.com" = border=3D"0" height=3D"1" width=3D"1" alt=3D""> ids@iiug.org</td></tr> <tr valign=3D"top"><td width=3D"1%" valign=3D"middle"><img src=3D"cid:3= 0__=3D88BBE579DFDD06578f9e8a93df938@us.ibm.com" border=3D"0" height=3D"= 1" width=3D"58" alt=3D""> <div align=3D"right">cc</div></td><td width=3D"= 100%"><img src=3D"cid:30__=3D88BBE579DFDD06578f9e8a93df938@us.ibm.com" = border=3D"0" height=3D"1" width=3D"1" alt=3D""> </td></tr> <tr valign=3D"top"><td width=3D"1%" valign=3D"middle"><img src=3D"cid:3= 0__=3D88BBE579DFDD06578f9e8a93df938@us.ibm.com" border=3D"0" height=3D"= 1" width=3D"58" alt=3D""> <div align=3D"right">Subject</div></td><td widt= h=3D"100%"><img src=3D"cid:30__=3D88BBE579DFDD06578f9e8a93df938@us.ibm.= com" border=3D"0" height=3D"1" width=3D"1" alt=3D""> Informix History Log [4766]</td></tr> </table> <table border=3D"0" cellspacing=3D"0" cellpadding=3D"0"> <tr valign=3D"top"><td width=3D"58"><img src=3D"cid:30__=3D88BBE579DFDD= 06578f9e8a93df938@us.ibm.com" border=3D"0" height=3D"1" width=3D"1" alt= =3D""></td><td width=3D"336"><img src=3D"cid:30__=3D88BBE579DFDD06578f9= e8a93df938@us.ibm.com" border=3D"0" height=3D"1" width=3D"1" alt=3D""><= /td></tr> </table> </td></tr> </table> <tt>Hi, Does Informix 9.x supports a History Log? (Who and when was logged in, = =3D what he did or tried to do?). =3D20 After a little search (Trusted Facility Manual) I found that Informix =3D= supports an Auditing mechanism that has to be activated.=3D20 Does any one has implement it?=3D20 What are the pros and cons?=3D20 How it degrates Informix Server performance? Thanks Sergios </tt> </body></html>= --1__=88BBE579DFDD06578f9e8a93df938690918c88BBE579DFDD0657-- --0__=88BBE579DFDD0657