个人简介
偶尔有空上来看看
文章分类
文章存档
最近访客
相关博文
- ·
- ·
- ·
- ·
- ·
- ·
- ·
- ·
- ·
- ·
分类： oracle
2022-03-13 15:14:14
oracle 11g，先确保审计开关打开
配置审计需要重启实例
sql> alter system set audit_trail = db scope=spfile;
sql> shutdown immediate
sql> startup
确认审计表存在
desc aud$
开启审计
sql>audit create session by access whenever not successful;
sql>audit connect by access whenever not successful
观察3天（等鱼上钩）
alter session set nls_date_format='yyyy-mm-dd hh24:mi:ss';
select username,os_username,userhost,client_id,trunc(timestamp),count(*) failed_logins
from dba_audit_trail
where returncode=1017 and --1017 is invalid username/password
timestamp < sysdate -7
group by username,os_username,userhost, client_id,trunc(timestamp);
配置审计需要重启实例
sql> alter system set audit_trail = db scope=spfile;
sql> shutdown immediate
sql> startup
确认审计表存在
desc aud$
开启审计
sql>audit create session by access whenever not successful;
sql>audit connect by access whenever not successful
观察3天（等鱼上钩）
alter session set nls_date_format='yyyy-mm-dd hh24:mi:ss';
select username,os_username,userhost,client_id,trunc(timestamp),count(*) failed_logins
from dba_audit_trail
where returncode=1017 and --1017 is invalid username/password
timestamp < sysdate -7
group by username,os_username,userhost, client_id,trunc(timestamp);
给主人留下些什么吧！~~