Auditing SQL operations on HDR
Hello I need to audit SQL statements on a HDR server, which is by default in Read Only Mode. the way i used is to set a trigger on the primary server which insert into a table the statements and so the same works automaticaly on the Secondary server except that the insert doesn't work and the statements are blocked (on the secondary only) i found this way on IBM site (http://publib.boulder.ibm.com/infocenter/idshelp/v10/index.jsp?topic=/com.ibm.s qlt.doc/sqltmst317.htm) i saw also that the seconday can be on a updatable mode, but i don't want to use this way. is there another solution, i think that i don't especially need to insert the audited statements in a table but simply the have them on a file. thanks in advance for your help
I'm a bit confused by your question... You write that you audit using triggers and you need to do that for HDR... but since you only want to do SELECTs on HDR I assume you want to audit SELECTs with triggers.... Is this correct? If yes, be careful. . It's trivial to avoid them. In theory you could make your triggers INSERT on the primary server. But that has consequences: - you must create trusts - you loose the "read only" environment - you create a dependency between the servers (if the primary goes down the queries will fail) And this is assuming that the SELECT triggers are fired on HDR servers which I haven't checked. You can off course consider alternatives: - using Informix auditing facility. Depending on what you want to capture this may or may not work. - using IBM Guardium product (cross database auditing tool that doesn't depend on the native auditing facilities). But it costs money. Regards. Em 25/01/2014 11:34, "SMITH JOHN" <daylight@webmails.com> escreveu: > Hello > > I need to audit SQL statements on a HDR server, which is by default in Read > Only Mode. > the way i used is to set a trigger on the primary server which insert into > a > table the statements and so the same works automaticaly on the Secondary > server except that the insert doesn't work and the statements are blocked > (on > the secondary only) > > i found this way on IBM site > > ( > http://publib.boulder.ibm.com/infocenter/idshelp/v10/index.jsp?topic=/com.ibm.sq lt.doc/sqltmst317.htm > ) > > i saw also that the seconday can be on a updatable mode, but i don't want > to > use this way. > > is there another solution, i think that i don't especially need to insert > the > audited statements in a table but simply the have them on a file. > > thanks in advance for your help > > > > ******************************************************************************* > Forum Note: Use "Reply" to post a response in the discussion forum. > > --e89a8f839e6f6f6fd804f0ca9082
The informix auditing is already on on the both servers prim and secondary. The primary server is used for applications access, the secondary for special users using odbc wity ms access the select directly the data. The fact is that i want to know what those special users select on the secondary ezpecially the sensible data, these sensible data are on some columns on some tables.
Informix auditing can show tables and rows accessed, but not columns. Guardium can tell you everything. Regards Em 25/01/2014 15:10, "SMITH JOHN" <daylight@webmails.com> escreveu: > The informix auditing is already on on the both servers prim and secondary. > The primary server is used for applications access, the secondary for > special > users using odbc wity ms access the select directly the data. The fact is > that > i want to know what those special users select on the secondary ezpecially > the > sensible data, these sensible data are on some columns on some tables. > > > > ******************************************************************************* > Forum Note: Use "Reply" to post a response in the discussion forum. > > --047d7b342d30c8d07004f0cfc2c2
Hard to do so (guardium) i am asked to find a free solution