Contents Index Table 6.2 - Format of audit records - fixed Administration of audit records

SQL Anywhere Studio Security Guide
  Auditing
    Audit records

Table 6.3 - Format of audit records - variable by type

This page describes operation of Adaptive Server Anywhere in a manner equivalent to a C2-security-certified configuration. It does not provide general-purpose information on the topic.

Type Format
AUDIT_ENABLE_AUDITING

  • 1 byte    1 (auditing enabled) or 0 (auditing disabled)
AUDIT_SET_PUB_OPTION

  • 2 bytes    length of following string (n)

  • n bytes    option name
AUDIT_OP_ATTEMPT

  • 2 bytes    length of following string (n)

  • n bytes    SQL of attempted operation
AUDIT_OP_SUCCESS

  • 1 byte    1 (operation succeeded) or 0 (operation failed)
AUDIT_PERM_CHECK

  • 1 byte    1 (success) or 0 (failure)

  • 2 bytes    length of following string (n)

  • n bytes    permission type (for example, select, update, or execute)

  • 2 bytes    length of following string (n)

  • n bytes    object (table, view, procedure, etc.) name

  • 2 bytes    length of following string (n)

  • n bytes    column name, if applicable
AUDIT_USER_CHECK

  • 1 byte    1 (success) or 0 (failure)

  • 2 bytes    length of following string (n)

  • n bytes    user name
AUDIT_CONNECTION

  • 1 byte    1 (success) or 0 (failure)

  • 2 bytes    length of following string (n)

  • n bytes    user name (if connection succeeded)

  • 2 bytes    length of following string (n)

  • n bytes    machine ID
AUDIT_SETUSER

  • 2 bytes    length of following string (n)

  • n bytes    user name
AUDIT_TRIGGER

  • 2 bytes    length of following string (n)

  • n bytes    name of trigger

  • 3 bytes    fired or finished
AUDIT_STRING

  • 2 bytes    length of following string (n)

  • n bytes    variable text string

Contents Index Table 6.2 - Format of audit records - fixed Administration of audit records