Upload
giri0120
View
228
Download
0
Embed Size (px)
Citation preview
8/12/2019 72461984 Oracle DBA Checklist
http://slidepdf.com/reader/full/72461984-oracle-dba-checklist 1/15
Oracle DBA ChecklistPosted by Oracle ACE - 2007/05/17 01:11 _____________________________________ Daily Procedres
A! "eri#y all i$sta$ces are %
&ake sre the database is a'ailable! (o) i$to each i$sta$ce a$d r$ daily re%orts or testscri%ts! *o+e sites +ay ,ishto ato+ate this!
O%tio$al i+%le+e$tatio$: se Oracle E$ter%rise &a$a)ers %robe e'e$t!
B! (ook #or a$y $e, alert lo) e$tries
. Co$$ect to each +a$a)ed syste+!
. se tel$et or co+%arable %ro)ra+!
. or each +a$a)ed i$sta$ce )o to the back)ro$d d+% desti$atio$ sallyO3AC(E_BA*E/4*D6/bd+%! &akesre to look $der each +a$a)ed databases *D!
. At the %ro+%t se the $i 8tail9 co++a$d to see the alert_4*D6!lo) orother,ise ea+i$e the +ost rece$t e$tries i$the #ile!
. # a$y O3A-errors ha'e a%%eared si$ce the %re'ios ti+e yo looked $ote the+i$ the Database 3eco'ery (o) a$di$'esti)ate each o$e! he reco'ery lo) is i$ 4#ile6!
C! "eri#y DB*;&P is r$$i$)
1! (o) o$ to each +a$a)ed +achi$e to check #or the dbs$+% %rocess!
or $i: at the co++a$d li$e ty%e %s <e# = )re% dbs$+%! here shold be t,o dbs$+% %rocesses r$$i$)! # $otrestart DB*;&P! >*o+e sites ha'e this disabled o$ %r%ose? i# this is the case re+o'ethis ite+ #ro+ yor list or cha$)e it to @'eri#y that DB*;&P is ;O r$$i$)@!
D! "eri#y sccess o# database back%
E! "eri#y sccess o# database archi'i$) to ta%e
! "eri#y e$o)h resorces #or acce%table %er#or+a$ce
8/12/2019 72461984 Oracle DBA Checklist
http://slidepdf.com/reader/full/72461984-oracle-dba-checklist 2/15
1! "eri#y #ree s%ace i$ tables%aces!
or each i$sta$ce 'eri#y that e$o)h #ree s%ace eists i$ each tables%ace to ha$dle theday9s e%ected )ro,th! As o#
4date6 the +i$i++ #ree s%ace #or 4re%eat #or each tables%ace6: ! he$ i$co+i$) datais stable a$d a'era)e daily)ro,th ca$ be calclated the$ the +i$i++ #ree s%ace shold be at least 4ti+e to order)et a$d i$stall +ore disks6days9 data )ro,th!
a o to each i$sta$ce r$ #ree!sl to check #ree +b i$ tables%aces!
Co+%are to the +i$i++ #ree &B #or that tables%ace! ;ote a$y lo,-s%ace co$ditio$sa$d correct!
b o to each i$sta$ce r$ s%ace!sl to check %erce$ta)e #ree i$ tables%aces!
Co+%are to the +i$i++ %erce$t #ree #or that tables%ace! ;ote a$y lo,-s%ace co$ditio$sa$d correct!
2! "eri#y rollback se)+e$t!
*tats shold be O;(;E $ot O(;E or (( ece%t i$ so+e cases yo +ay ha'e as%ecial rollback se)+e$t #or lar)e batch obs ,hose $or+al stats is O(;E!
a O%tio$al: each database +ay ha'e a list o# rollback se)+e$t $a+es a$d theire%ected statses!
b or crre$t stats o# each O;(;E or (( rollback se)+e$t >by D $ot by$a+e ery o$ "3O((*A!
c or stora)e %ara+eters a$d $a+es o# A(( rollback se)+e$t ery o$DBA_3O((BACF_*E*! hat 'ie,9s *A*#ield is less accrate tha$ "3O((*A ho,e'er as it lacks the PE;D; O(;Ea$d (( statses sho,i$)these as O(;E a$d O;(;E res%ecti'ely!
G! de$ti#y bad )ro,th %roectio$s!
(ook #or se)+e$ts i$ the database that are r$$i$) ot o# resorces >e!)! ete$ts or)ro,i$) at a$ ecessi'e rate! hestora)e %ara+eters o# these se)+e$ts +ay $eed to be adsted! or ea+%le i# a$yobect reached 200 as the $+ber
8/12/2019 72461984 Oracle DBA Checklist
http://slidepdf.com/reader/full/72461984-oracle-dba-checklist 3/15
o# crre$t ete$ts A;D its a$ obect that is s%%osed to )et lar)e %)rade the+a_ete$ts to $li+ited!
a o )ather daily siHi$) i$#or+atio$ r$ a$alyHe5%ct!sl! # yo are collecti$)$i)htly 'ol+etrics ski% this ste%!
b o check crre$t ete$ts r$ $r_ete$ts!sl
c Iery crre$t table siHi$) i$#or+atio$
d Iery crre$t i$de siHi$) i$#or+atio$
e Iery )ro,th tre$ds
J! de$ti#y s%ace-bo$d obects!
*%ace-bo$d obects9 $et_ete$ts are bi))er tha$ the lar)est ete$t that the tables%aceca$ o##er! *%ace-bo$d obectsca$ har+ database o%eratio$! # ,e )et sch obect #irst $eed to i$'esti)ate the sitatio$!he$ ,e ca$ se A(E3 AB(E*PACE 4tables%ace6 COA(E*CE! Or add a$other data#ile!
a 3$ s%acebo$d!sl! # all is ,ell Hero ro,s ,ill be retr$ed!
5! Processes to re'ie, co$te$tio$ #or CP +e+ory $et,ork or disk resorces!
a o check CP tiliHatio$ )o to :K,ebK%hase2Kde#alt!ht+ L6syste++etricsL6CP tiliHatio$ %a)e! J00 is the+ai++ CP tiliHatio$ becase there are J CPs o$ %hde' a$d %h%rd +achi$e!e $eed to i$'esti)ate i# CPtiliHatio$ kee%s abo'e G50 #or a ,hile!
! Co%y Archi'ed (o)s to *ta$dby Database a$d 3oll or,ard
# yo ha'e a *ta$dby Database co%y the a%%ro%riate Archi'ed (o)s to the e%ectedlocatio$ o$ the sta$dby +achi$ea$d a%%ly those lo)s >roll #or,ard the cha$)es to the sta$dby database! his kee%s thesta$dby database %-to-date!
ireBoard-or+ - BBo) - Co$$ecti$) a$d *hari$) o$ he o #ireboard or+Co+%o$e$t 'ersio$: 1!0!0 e$erated: 12 ;o'e+ber 2011 02:GJhe co%yi$) o# lo)s thea%%lyi$) o# the+ or both ca$ i$ so+e cases be ato+ated! # yo ha'e ato+ated the+the$yor daily task shold be to co$#ir+ that this ha%%e$ed correctly each day!
M! 3ead DBA +a$als #or o$e hor
8/12/2019 72461984 Oracle DBA Checklist
http://slidepdf.com/reader/full/72461984-oracle-dba-checklist 4/15
;othi$) is +ore 'alable i$ the lo$) r$ tha$ that the DBA be as ,idely e%erie$ceda$d as ,idely read as %ossible!3eadi$)s shold i$clde DBA +a$als trade or$als a$d %ossibly $e,s)ro%s or+aili$) lists!
;i)htly Procedres
&ost %rodctio$ databases >a$d +a$y de'elo%+e$t a$d test databases ,ill be$e#it #ro+ha'i$) certai$ $i)htly batch %rocesses r$!
A! Collect 'ol+etric data
his ea+%le collects table ro, co$ts! his ca$ easily be ete$ded to other obects schas i$dees a$d other data
sch as a'era)e ro, siHes!
1! A$alyHe *che+as a$d Collect Data!
he idea here is to se the +ore ti+e co$s+i$) a$d +ore accrate A;A(NECO&PE co++a$d a$d sa'e thereslts ,hich sho, % i$ the data dictio$ary to a +ore %er+a$e$t store!
a # yo ha'e$t yet create the 'ol+etrics table ,ith +k_'ol#act!sl
b o )ather $i)htly siHi$) i$#or+atio$ r$ a$alyHe_co+%!sl!
c o collect the reslti$) statistics r$ %o%_'ol!sl
d Ea+i$e the data at yor leisre %robably ,eekly or +o$thly!
se &* Ecel a$d a$ ODBC co$$ectio$ to ea+i$e a$d )ra%h data )ro,th!
eekly Procedres
A! (ook #or obects that break rles
or each obect-creatio$ %olicy >$a+i$) co$'e$tio$ stora)e %ara+eters etc! ha'e a$ato+ated check to 'eri#y that the %olicy is bei$) #ollo,ed!
1! E'ery obect i$ a )i'e$ tables%ace shold ha'e the eact sa+e siHe #or ;E_EE; ,hich shold +atch thetables%ace de#alt #or ;E_EE;! As o# 12/1J/QR de#alt ;E_EE; #orDAAM is 1 )i) >10JR57S kbytes
8/12/2019 72461984 Oracle DBA Checklist
http://slidepdf.com/reader/full/72461984-oracle-dba-checklist 5/15
DAA(O is 500 +b >52J2RR kbytes a$d ;DEE* is 25S +b >2S21JJ kbytes!
a o check setti$)s #or ;E_EE; r$ $etet!sl!
b o check eisti$) ete$ts r$ eistet!sl
2! All tables shold ha'e $ie %ri+ary keys!
a o check +issi$) PF r$ $o_%k!sl!
b o check disabled PF r$ disPF!sl!
c All %ri+ary key i$dees shold be $ie! 3$ $o$PF!sl to check!
G! All i$dees shold se ;DEE* tables%ace! 3$ +krebild_id!sl!
J! *che+as shold look ide$tical bet,ee$ e$'iro$+e$ts es%ecially test a$d %rodctio$!
a o check data ty%e co$siste$cy r$ dataty%e!sl!
b o check other obect co$siste$cy r$ ob_coord!sl!
c Better yet se a tool like Iest *o#t,ares *che+a &a$a)er!
B! (ook #or secrity %olicy 'iolatio$s
C! (ook i$ *I(T;et lo)s #or errors isses
1! Clie$t side lo)s
2! *er'er side lo)s
D! Archi'e all Alert (o)s to history
E! "isit ho+e %a)es o# key 'e$dors
1! Oracle Cor%oratio$
htt%://,,,!oracle!co+
htt%://tech$et!oracle!co+
htt%://,,,!oracle!co+/s%%ort
htt%://,,,!ora+a)!co+
8/12/2019 72461984 Oracle DBA Checklist
http://slidepdf.com/reader/full/72461984-oracle-dba-checklist 6/15
2! Iest *o#t,are
htt%://,,,!ests!co+
G! *$ &icrosyste+s
htt%://,,,!s$!co+
&o$thly Procedres
A! (ook #or Mar+#l ro,th 3ates
1! 3e'ie, cha$)es i$ se)+e$t )ro,th ,he$ co+%ared to %re'ios re%orts to ide$ti#yse)+e$ts ,ith a har+#l )ro,th rate!
ireBoard-or+ - BBo) - Co$$ecti$) a$d *hari$) o$ he o #ireboard or+Co+%o$e$t 'ersio$: 1!0!0 e$erated: 12 ;o'e+ber 2011 02:GJB!3e'ie, $i$)O%%ort$ities
1! 3e'ie, co++o$ Oracle t$i$) %oi$ts sch as cache hit ratio latch co$te$tio$a$d other %oi$ts deali$) ,ith +e+ory+a$a)e+e$t! Co+%are ,ith %ast re%orts to ide$ti#y har+#l tre$ds or deter+i$e i+%acto# rece$t t$i$) adst+e$ts!
C! (ook #or /O Co$te$tio$
1! 3e'ie, database #ile acti'ity! Co+%are to %ast ot%t to ide$ti#y tre$ds that coldlead to %ossible co$te$tio$!
D! 3e'ie, ra)+e$tatio$
1! $'esti)ate #ra)+e$tatio$ >e!)! ro, chai$i$) etc!!
E! Proect Per#or+a$ce i$to the tre
1! Co+%are re%orts o$ CP +e+ory $et,ork a$d disk tiliHatio$ #ro+ bothOracle a$d the o%erati$) syste+ to ide$ti#ytre$ds that cold lead to co$te$tio$ #or a$y o$e o# these resorces i$ the $ear #tre!
2! Co+%are %er#or+a$ce tre$ds to *er'ice (e'el A)ree+e$t to see ,he$ the syste+,ill )o ot o# bo$ds
! Per#or+ $i$) a$d &ai$te$a$ce
8/12/2019 72461984 Oracle DBA Checklist
http://slidepdf.com/reader/full/72461984-oracle-dba-checklist 7/15
1! &ake the adst+e$ts $ecessary to a'oid co$te$tio$ #or syste+ resorces! his+ay i$clde schedled do,$ ti+e or reest #or additio$al resorces!LLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLL
ireBoard-or+ - BBo) - Co$$ecti$) a$d *hari$) o$ he o #ireboard or+Co+%o$e$t 'ersio$: 1!0!0 e$erated: 12 ;o'e+ber 2011 02:GJ
Daily Checks
• Check the availability of the database and instance , every 15 mts• Check the availability of the listener, every 15 mts• Check the sync between the primary database and standby database ,every 15 mts or based on the SLA(Service level Agreement)• Check the space sage and make sre that all the tablespace sage isbelow critical level, once in a day• Check the space sage of the archive log file system for both primary andstandby
• !erify the sccess of daily backps, once in a day• !erify the sccess of archive log backps , based on the backp intervalto the backp media• Check the system performance , periodic basis• Check the database performance , periodic basis• Clear the tickets assigned in the ticketing mechanism• Check for the invalid ob"ects• #o throgh the adit files for any sspicios activities• #o throgh the alert logs for any critical ora errors , once in an hor • !erify all the monitoring agent, inclding $%& agent and third partymonitoring agents , once in an hor •
Archive the alert logs , if re'ired• Clear the trace files in the dmp and bdmp directory as per the policy• !erify the stats of daily schedled "obs
Weekly Checks
• Check the database statistics collection. On some databases this needsto be done every day depending upon the requirement• Approve or plan any scheduled changes for the week
8/12/2019 72461984 Oracle DBA Checklist
http://slidepdf.com/reader/full/72461984-oracle-dba-checklist 8/15
• Check for critical and patch updates from oracle• Verify the cron jobs scheduled and clear the output directory if required• Perform logical level backups of important tables• Perform level or cold backup ! this can be changed as per the backuppolicy
Quarterly Checks• Checks for the critical patch updates from Oracle!make sure that yoursystems are in compliance with CP" patches• Verify the accuracy for the backs by creating test databases from thebackup• Verify the accuracy of the #$ mechanism by peforming a databaseswitch over test. %his can be done once in si& months based on the businessrequirements
Daily DBA Checklist• Ensure that previous night's backup is complete and there are no RMANerrors in the backup logs.
• Ensure that any exports which are part o the backup are complete and thedump iles compressed.
• !heck the alert log or any "RA# errors # also or messages like'!heckpoint not complete etc'.
• Ensure that the cron $ob or truncating% saving and renaming alert logsis working # veriy the same.
• Ensure that the archive redo log iles are compressed and have beendeleted. "nly iles or current and previous day should be present.
• All tablespaces should be less than &( ull # run the coalesce commandon all tablespaces to reduce ragmentation. Ensure that space in the )EM* tablespace isreleased and is +,,( ree at the beginning o the day.
• Enough contiguous ree space is available in all tablespaces or ob$ectsto extend i re-uired.
• ackup the control ile to trace so that every day we have a outline othe iles and their locations or each database.
• No ob$ects are within extents o the MA/E/)EN)0 storage parameter.
• All core dumps are deleted rom the 1!23M* area.
• All 4.trc iles are deleted rom the 1323M* area.
8/12/2019 72461984 Oracle DBA Checklist
http://slidepdf.com/reader/full/72461984-oracle-dba-checklist 9/15
• !heck the machine or any disks +,,( ull or nearing that value. 5 adisk has illed up use the 'ind' command to determine iles which have been recentlycreated6modiied . Ensure that all 4.dmp iles are in their proper locations and large 4.dmp iles have beencompressed.
• )runcate the listener.log ile in the 1"RA!7E89"ME6network6log locationi the listener log has increased to a si:e ; than ,, M. Ensure the space is released%otherwise 'reload' listener.
• Run the 'recently created6modiied ob$ects' report to ensure that nounauthorised ob$ect creation6modiication is taking place.
• Ensure that there are no 2M08<"0 with the status o ailed or broken.Also last reresh times o all running $obs should be current.
• !heck to ensure that no ob$ects exist in the database with the status
'5N=A752'
Oracle DBA Checklist - Verify all instances are up - Daily
Procedures
Oracle DBA Checklist
Oracle DBA Checklist - Verify all instances are up - Daily Procedures
&ake sre the database is available Log into each instance and rn daily reports or test
scripts Some sites may wish to atomate this
$ptional implementation se $racle %nterprise &anager*s *probe* event
Oracle DBA Checklist - Look for any new alert log entries - Daily Procedures
Connect to each managed system
+se *telnet* or comparable program
or each managed instance, go to the backgrond dmp destination, sally
-$.ACL%/0AS% 2S34bdmp &ake sre to look nder each managed database*s
S34
At the prompt, se the +ni6 *tail* command to see the alert/ 2S34log, or otherwise
e6amine the most recent entries in the file 3f any $.A7errors have appeared since the previos time yo looked, note them in the
4atabase .ecovery Log and investigate each one 8he recovery log is in 2file
Oracle DBA Checklist - -Verify free space in tablespaces - Daily Procedures
8/12/2019 72461984 Oracle DBA Checklist
http://slidepdf.com/reader/full/72461984-oracle-dba-checklist 10/15
!erify sccess of database backp
!erify sccess of database archiving to tape
!erify enogh resorces for acceptable performance
!erify free space in tablespaces
or each instance, verify that enogh free space e6ists in each tablespace to handle the
day*s e6pected growth As of 2date, the minimm free space for 2repeat for each
tablespace 9 2 tablespace is 2 amont : ;hen incoming data is stable, and
average daily growth can be calclated, then the minimm free space shold be at least
2time to order, get, and install more disks days* data growth
a) #o to each instance, rn frees'l to check free mb in tablespaces Compare to the
minimm free &0 for that tablespace <ote any low7space conditions and correct
b) #o to each instance, rn spaces'l to check percentage free in tablespaces Compare
to the minimm percent free for that tablespace <ote any low7space conditions and
correct
Oracle DBA Checklist - -Verify rollback segent - Daily Procedures
Stats shold be $<L3<%, not $L3<% or +LL, e6cept in some cases yo may have
a special rollback segment for large batch "obs whose normal stats is $L3<%
a) $ptional each database may have a list of rollback segment names and their
e6pected statses
b) or crrent stats of each $<L3<% or +LL rollback segment (by 34 not by name),
'ery on !-.$LLS8A8
c) or storage parameters and names of ALL rollback segment, 'ery on
40A/.$LL0AC=/S%#S 8hat view*s S8A8+S field is less accrate than
!-.$LLS8A8, however, as it lacks the >%<43<# $L3<% and +LL statses,
showing these as $L3<% and $<L3<% respectively
Oracle DBA Checklist - Copy Archi!ed Logs to "tandby Database and #oll
$orward - Daily Procedures
3f yo have a Standby 4atabase, copy the appropriate Archived Logs to the e6pected
location on the standby machine and apply those logs (roll forward the changes) to the
standby database 8his keeps the standby database p7to7date
8he copying of logs, the applying of them, or both, can in some cases be atomated 3f
yo have atomated them, then yor daily task shold be to confirm that this happened
correctly each day
Oracle DBA Checklist - Look for %&O Contention - 'onthly Procedures
.eview database file activity Compare to past otpt to identify trends that cold lead to
possible contention
8/12/2019 72461984 Oracle DBA Checklist
http://slidepdf.com/reader/full/72461984-oracle-dba-checklist 11/15
Oracle DBA Checklist - Perfor (uning and 'aintenance - 'onthly Procedures
&ake the ad"stments necessary to avoid contention for system resorces 8his may
inclde schedled down time or re'est for additional resorces
Oracle DBA Checklist - Daily Procedures - $ree)s*l
77 frees'l
77
77 8o verify free space in tablespaces
77 &inimm amont of free space
77 docment yor thresholds
77 2 tablespace/name ? 2amont m
77
S%L%C8 tablespace/name, sm ( blocks ) as free/blk , trnc ( sm ( bytes )
(1@B1@B) ) as free/m , ma6 ( bytes ) (1@B) as big/chnk/k, cont () as
nm/chnks
.$& dba/free/space
#.$+> 0D tablespace/name
Oracle DBA Checklist - Daily Procedures - "pace)s*
77 spaces'l
77
77 8o check free, pct/free, and allocated space within a tablespace
77
S%L%C8 tablespace/name, largest/free/chnk
, nr/free/chnks, sm/alloc/blocks, sm/free/blocks
, to/char(1@@sm/free/blockssm/alloc/blocks, *@EEE*) FF *G*
AS pct/free
.$& ( S%L%C8 tablespace/name
, sm(blocks) AS sm/alloc/blocks
.$& dba/data/files
#.$+> 0D tablespace/name
)
, ( S%L%C8 tablespace/name AS fs/ts/name
, ma6(blocks) AS largest/free/chnk
, cont(blocks) AS nr/free/chnks
, sm(blocks) AS sm/free/blocks
8/12/2019 72461984 Oracle DBA Checklist
http://slidepdf.com/reader/full/72461984-oracle-dba-checklist 12/15
.$& dba/free/space
#.$+> 0D tablespace/name )
;H%.% tablespace/name ? fs/ts/name
Oracle DBA Checklist - Daily Procedures - analy+e,pct)s*l77 analyIe5pcts'l
77
77 8o analyIe tables and inde6es 'ickly, sing a 5G sample siIe
77 (do not se this script if yo are performing the overnight
77 collection of volmetric data)
77
0%#3<
dbms/tilityanalyIe/schema ( *J$;<%.*, *%S83&A8%*, <+LL, 5 ) K
%<4 K
Oracle DBA Checklist - Daily Procedures - nre.tents)s*l
77 nr/e6tentss'l
77
77 8o find ot any ob"ect reaching 2threshold
77 e6tents, and manally pgrade it to allow nlimited
77 ma6/e6tents (ths only ob"ects we e6pect to be big
77 are allowed to become big)77
S%L%C8 eowner, esegment/type , esegment/name , cont() as nr/e6tents ,
sma6/e6tents , to/char ( sm ( ebytes ) ( 1@B 1@B ) , *EEE,EEEE@*) as &0
.$& dba/e6tents e , dba/segments s
;H%.% esegment/name ? ssegment/name
#.$+> 0D eowner, esegment/type , esegment/name , sma6/e6tents
HA!3<# cont() J8H.%SH$L4
$. ( ( sma6/e6tents 7 cont() ) 2 JJ8H.%SH$L4 )
$.4%. 0D cont() desc
Oracle DBA Checklist - Daily Procedures - spacebound)s*l
77 spacebonds'l
77
8/12/2019 72461984 Oracle DBA Checklist
http://slidepdf.com/reader/full/72461984-oracle-dba-checklist 13/15
77 8o identify space7bond ob"ects 3f all is well, no rows are retrned
77 3f any space7bond ob"ects are fond, look at vale of <%M8 e6tent
77 siIe to figre ot what happened
77 8hen se coalesce (alter tablespace coalesceK)
77 Lastly, add another datafile to the tablespace if needed
77
S%L%C8 atable/name, ane6t/e6tent, atablespace/name
.$& all/tables a,
( S%L%C8 tablespace/name, ma6(bytes) as big/chnk
.$& dba/free/space
#.$+> 0D tablespace/name ) f
;H%.% ftablespace/name ? atablespace/name
A<4 ane6t/e6tent fbig/chnk
Auditing the #atabase
Auditing the #atabase ' Overview
Auditing is a method of recording database activity as part of database security. It enables the
DBA to track user activity within the database. The audit records provide information on who
performed what database operation and when it was performed. Records are written to a SS!
owned table named A"D#. The SS.A"D# table is commonly referred to as the audit trail.
Auditing information is not collected without some impact on performance and database
resources. $ow much of an impact auditing will have on your system depends largely on thetype of auditing you enable. %or e&le' setting high!level auditing such as connection
activity will not have as much of a performance impact as tracking all S() statements issued
by all users. It is best to start out with high!level auditing and then refine additional auditing as
needed.
Auditing can only be performed for users connected directly to the database and not for
actions on a remote database.
Auditing should be enabled if the following types of *uestionable activities are noted+
"ne&plained changes in passwords' tablespace settings' or *uotas
,&cessive deadlocks are encountered
Records are being read' deleted' or changed without authori-ation
There are three types of auditing+
(tatement Auditing
8/12/2019 72461984 Oracle DBA Checklist
http://slidepdf.com/reader/full/72461984-oracle-dba-checklist 14/15
Statement auditing is the tracking of S() statements issued by database users. To enable or
disable auditing on S() statements' you must have the A"DIT system privilege. The list below
shows the statements that can be audited.
Option Commands Included
A(E3 *N*E& A(E3 *N*E&
C(*E3 C3EAE C(*E3 A(E3 C(*E3 3;CAE C(*E3 D3OP C(*E3
DAABA*E (;F C3EAE DAABA*E (;F D3OP DAABA*E (;F
;DE C3EAE ;DE A(E3 ;DE D3OP ;DE
;O E** All *I( state+e$ts that retr$ a$ Oracle error becase the s%eci#ied strctre or obect does $oteist
P3OCED3E C3EAE >or 3EP(ACE ;CO; C3EAE >or 3EP(ACE PACFAE C3EAE >or3EP(ACE PACFAE BODN C3EAE >or 3EP(ACE P3OCED3E D3OP PACFAED3OP P3OCED3E
PB(CDAABA*E (;F
C3EAE PB(C DAABA*E (;F D3OP PB(C DAABA*E (;F
PB(C*N;O;N&
C3EAE PB(C *N;O;N& D3OP PB(C *N;O;N&
3O(E C3EAE 3O(E A(E3 3O(E *E 3O(E D3OP 3O(E3O((BACF*E&E;
C3EAE 3O((BACF *E&E; A(E3 3O((BACF *E&E; D3OP 3O((BACF*E&E;
*EIE;CE C3EAE *EIE;CE D3OP *EIE;CE
*E**O; All co$$ectio$s a$d disco$$ectio$s
*N;O;N& C3EAE *N;O;N& D3OP *N;O;N&
*N*E& AD AD ;OAD
*N*E& 3A; 3A; *N*E& P3"(EE*/3O(E* O *E3/3O(E 3E"OFE *N*E&P3"(EE*/3O(E* 3O& *E3/3O(E
AB(E C3EAE AB(E A(E3 AB(E D3OP AB(E
AB(E*PACE C3EAE AB(E*PACE A(E3 AB(E*PACE D3OP AB(E*PACE
3E3 C3EAE 3E3 A(E3 3E3 E;AB(E O3 D*AB(E A(E3 AB(E ME;AB(E D*AB(E A;D D3OP C(A*E*
*E3 C3EAE *E3 A(E3 *E3 D3OP *E3
"E C3EAE >or 3EP(ACE "E D3OP "E
In addition to the statement auditing options shown above' there are several options that will
create audit records for a combination of statements. These options' sometimes referred to as
audit shortcuts' are+
/00,T
R,S/"R,
DBA
A))
The list below shows the statements audited by each of these shortcuts.
ShortcutOption Statement Equivalent
CO;;EC Ei'ale$t to setti$) aditi$) #or *E**O;
3E*O3CE Ei'ale$t to setti$) aditi$) #or A(E3 *N*E& C(*E3 DAABA*E (;F
8/12/2019 72461984 Oracle DBA Checklist
http://slidepdf.com/reader/full/72461984-oracle-dba-checklist 15/15
P3OCED3E 3O((BACF *E&E; *EIE;CE *N;O;N& AB(E AB(E*PACE"E
DBA Ei'ale$t to setti$) aditi$) #or A(E3 *N*E& PB(C DAABA*E (;F PB(C*N;O;N& 3O(E *N*E& 3A; a$d *E3
A(( Ei'ale$t to aditi$) all state+e$t o%tio$s
The audit shortcuts are useful for setting up auditing for multiple options with one command.
%or e&le
A"DIT R,S/"R,
1$,0,2,R 0/T S",SS%")3
will audit all the commands listed for A)T,R SST,4' )"ST,R' DATABAS, )I05' 6R/,D"R,'
R/))BA5 S,74,0T' S,(",0,' S0/04' TAB),' TAB),S6A,' and 2I,1 for all users when
the command does not successfully complete.
Be careful that you do not confuse these with the roles named /00,T' R,S/"R,' and
DBA. These shortcuts are provided for compatibility with earlier versions of /racle and may not
be supported in future versions.
Privilege Auditing
6rivilege auditing is the tracking of S() statements issued by users who have been granted
the right to e&ecute that statement through a system privilege. To enable or disable auditing
on S() statements' you must have the A"DIT system privilege. 6rivilege audit options match
the corresponding system privileges.
%or e&le' to audit the D,),T, A0 TAB), system privilege' you would issue the following
command+
A"DIT D,),T, A0 TAB),
B A,SS
1$,0,2,R S",SS%")3