I need some help in auditing in Oracle. We have a database with many tables and we want to be able to audit every change made to any table in any field. So the things we want to have in this audit are:
- user who modified
- time of change occurred
- old value and new value
so we started creating the trigger which was supposed to perform the audit for any table but then had issues…
As I mentioned before we have so many tables and we cannot go creating a trigger per each table. So the idea is creating a master trigger that can behaves dynamically for any table that fires the trigger. I was trying to do it but no lucky at all….it seems that Oracle restricts the trigger environment just for a table which is declared by code and not dynamically like we want to do.
Do you have any idea on how to do this or any other advice for solving this issue?
You don’t need write your own triggers.
Oracle ships with flexible and fine grained audit trail services. Have a look at this document (9i) as a starting point.
(Edit: Here’s a link for 10g and 11g versions of the same document.)
You can audit so much that it can be like drinking from the firehose – and that can hurt the server performance at some point, or could leave you with so much audit information that you won’t be able to extract meaningful information from it quickly, and/or you could end up eating up lots of disk space. Spend some time thinking about how much audit information you really need, and how long you might need to keep it around. To do so might require starting with a basic configuration, and then tailoring it down after you’re able to get a sample of the kind of volume of audit trail data you’re actually collecting.