audit

Tool to Compare/Analyze/Audit Different Versions of SVN Repository

I've been hired to audit multiple versions of a large application's source code repository. In particular, I want to verify whether certain components of newer versions of the system existed (or in some cases did not exist) in previous versions of the system. The company has been around for over a decade and there are about 60000 revisio...

Audit Logging Strategies

I am trying to decide on the best method for audit logging within my application. The main reason for the log is reporting the sequence of events (changes). I have a hierarchy of Objects, I need to create reports when something changes on any part of that hierarchy, at a latter date. I think that I have three options: Have a log for...

A Scheduler framework for Audit - Balance and Control of the software processes

Hi all, I am looking for a scheduler framework which can provide the following functionality - 1. Audit of the processes - start time, end time and throughput of the process 2. Balance - if necessary schedule jobs according to the load 3. Control - when to run a job? like cron of Unix, helps us to schedule processes at the specified tim...

What's the best way to audit log DELETEs?

The user id on your connection string is not a variable and is different from the user id (can be GUID for example) of your program. How do you audit log deletes if your connection string's user id is static? [EDIT] The best place to log insert/update/delete is through triggers. But with static connection string, it's hard to log wh...

What's the PostgreSQL equivalent of MSSQL's CONTEXT_INFO?

In relation to my other question "What’s the best way to audit log DELETEs?". What's the PostgreSQL equivalent of CONTEXT_INFO? [EDIT] I want to log deletes using trigger, but since i'm not using the database user as my app's logical user, I cannot log the CURRENT_USER from the trigger code as the user who deleted the record. But for...

Is this the best approach to creating an audit trail?

I'm trying to create some functionality that keeps an audit trail of how data in a given user form has been changed over time, with a dated audit at the foot of that page. For example: 02/04/09 21:49 Name changed from "Tom" to "Chris". I'm doing this by storing the data in it's present format in the session and then on save checking ...

Should I include primary key for Audit Table in SQL?

I am creating an audit table for tracking changes done on a record in main table. Here audit table is the exact duplicate of main table (say Employee Table) but will only have 'inserts' for every changes happens in the main table. So it will have duplicates (same EmployeeIDs), so should I add separate Audit_ID for each entry? ...

Implementing Audit Trail- Spring AOP vs.Hibernate Interceptor vs DB Trigger

I found couple of discussion threads on this- but nothing which brought a comparison of all three mechanism under one thread. So here is my question... I need to audit DB changes- insert\updates\deletes to business objects. I can think of three ways to do this 1) DB Triggers 2) Hibernate interceptors 3) Spring AOP (This question i...

django AuditTrail vs Reversion

I am working on an new web app I need to store any changes in database to audit table(s). Purpose of such audit tables is that later on in a real physical audit we can asecertain what happened in a situation, who edited what and what was the state of db at the time of e.g. a complex calculation. So mostly audit table will be written and ...

Getting the username inside a model class

I'm trying to implement basic auditing with some of my models (like CreatedAt, UpdatedAt, CreatedBy and UpdatedBy). The date/time part is done. I'm throwing events on my models when a property is changed (implementing INotifyPropertyChanging, INotifyPropertyChanged) and can update the correspondent fields just fine. I just need to know...

Is there a standard way of audit tracking in grails?

Is there a grails plugin or standard way of managing the created_by, created_on, updated_by, updated_on fields for a domain object? ...

Audit logging nhibernate

could you provide some samples for audit loggin using NHibernate (ASP.Net+C# codd, not java code) ...

MySQL Trigger based Audit logging with comparisons

In looking at similar questions like: http://stackoverflow.com/questions/740182/getting-trigger-to-insert-changed-column-values-only-in-audit-table http://stackoverflow.com/questions/617225/audit-logging-strategies I would like to take this one step further and compare the updated data to see if it actually has been updated... I'm not...

NHibernate Interceptor Auditing Inserted Object Id

Hi, I am using NHibernate interceptors to log information about Updates/Inserts/Deletes to my various entities. Included in the information logged is the Entity Type and the Unique Id of the entity modified. The unique Id is marked as a <generator class="identity"> in the NHibernate mapping file. The obvious problem is when logging an...

How to implement an Audit Interceptor using iBATIS ?

I want to log all changes in my database for auditing purposes, using a table called AuditEvent that stores the modified row ID (primary key), table name, column name, previous value, new value, date of change (timestamp), operation type (insert / update / delete) and the name of the user who did the changes. I'm using SQL Server 2005,...

Audit whether stored proc was executed - in the transaction logs

We have SQL Server 2005 database with full backup and transaction logs. We have a problem with the database - and need the SQL CSI Forensic team to help. Is there a way to look at the transaction logs and identify whether a stored procedure was executed? We know the time that it happened (if it happened) but there is a dispute wheth...

Oracle Database character set issue with the audit tables on Debian

I've got Oracle XE installed on Debian linux and the character set is configured to AL32UTF8. There are several client applications that connects to a database from Windows with the different locales - French etc, not English. That's ok with all the client data these applications put into database, nothing converted and text data in Fren...

Record user Login to a ASP.NET MVC Aplication

I am developing a ASP.NET MVC aplication and I need to record the history of logins of a User. I need something similar to the last seen here in Stack Overflow (I will be keeping the history, I don't know if SO does this). I want to know what is the best way to do it? Global.asax: Application_AuthenticateRequest, Application_AuthorizeR...

What sort of audit information is stored by sql server when a CREATE TABLE or ALTER TABLE operation is performed?

The inspiration for this question is a stored proc broke on me because it called another stored proc that inserted data in a table whose schema was completely altered. The question is you have a table in a SQL Server database, and you don't know how it got there. You don't have any DDL triggers in place for custom audit information, and...

What's the best approach in auditing a big java/j2ee web application

I have to audit a large web Java/J2ee application that has evolved over several years. It's been written by some other company, not the one I'm working for. In it's current state it has become hard to evolve and maintain, new functionalities are hard to add and often lead to bugs that sometime show up in production. There seem to be some...