This appendix contains:
This appendix lists the audit event names and IDs, and the attribute names and data types for IBM DB2. The audit events are organized by their respective categories (for example, Account Management). You can use these audit events as follows:
For alerts. When you create an alert, you can specify an audit event, based on its category, that can trigger the alert. See "Creating a Basic Alert" for more information.
For custom reports using third-party tools. If you want to create custom reports using other Oracle Database reporting products or third-party tools, then refer to the tables in this appendix when you design the reports. See Chapter 4, "Oracle Audit Vault Data Warehouse Schema" for more information about custom reports created with third-party tools.
Account management events track SQL commands that affect user accounts, such as the UNLOCK ADMIN ACCOUNT
command. The Account Management Report, described in Section 3.3.3.2, uses these events.
Table D-1 lists the IBM DB2 account management source database events and the equivalent Oracle Audit Vault events.
Table D-1 IBM DB2 Account Management Audit Events
Event Name Description | Source Event | Audit Vault Event |
---|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Table D-2 lists the IBM DB2 account management event attributes.
Table D-2 IBM DB2 Account Management Event Attributes
Attribute Name | Data Type |
---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Application management events track actions that were performed on the underlying SQL commands of system services and applications, such as the CREATE RULE
command. The Procedure Management Report, described in Section 3.3.3.5, uses these events.
Table D-3 lists the IBM DB2 application management source database events and the equivalent Oracle Audit Vault events.
Table D-3 IBM DB2 Application Management Audit Events
Event Name Description | Source Event | Audit Vault Event |
---|---|---|
|
|
|
|
|
|
|
|
|
Table D-4 lists the IBM DB2 application management event attributes.
Table D-4 IBM DB2 Application Management Event Attributes
Attribute Name | Data Type |
---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Audit command events track the use of auditing SQL commands on other SQL commands and on database objects. The Audit Command Report, described in Section 3.3.3.3, uses these events.
Table D-5 lists the IBM DB2 audit command source database events and the equivalent Oracle Audit Vault events.
Table D-5 IBM DB2 Audit Command Audit Events
Event Name Description | Source Event | Audit Vault Event |
---|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Table D-6 lists the IBM DB2 audit command event attributes.
Table D-6 IBM DB2 Audit Command Event Attributes
Attribute Name | Data Type |
---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Data access events track audited SQL commands, such as all SELECT TABLE
, INSERT TABLE
, or UPDATE TABLE
commands. The Data Access Report, described in Section 3.3.2.3, uses these events.
Table D-7 lists the IBM DB2 data access source database events and the equivalent Oracle Audit Vault events.
Table D-7 IBM DB2 Data Access Audit Events
Event Name Description | Source Event | Audit Vault Event |
---|---|---|
|
|
|
|
|
|
Table D-8 lists the IBM DB2 data access event attributes.
Table D-8 IBM DB2 Data Access Event Attributes
Attribute Name | Data Type |
---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Exception events track audited error and exception activity, such as network errors. The Exception Activity Report, described in Section 3.3.4.2, uses these events. These events do not have any event names; they only contain event attributes.
Table D-9 lists the IBM DB2 exception event attributes.
Table D-9 IBM DB2 Exception Event Attributes
Attribute Name | Data Type |
---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Invalid record events track audited activity that Oracle Audit Vault cannot recognize, possibly due to a corrupted audit record. The Invalid Audit Record Report, described in Section 3.3.4.3, uses these events.
Table D-10 lists IBM DB2 invalid record event attributes.
Table D-10 IBM DB2 Invalid Record Event Attributes
Attribute Name | Data Type |
---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Object management events track audited actions performed on database objects, such as CREATE TABLE
commands. The Object Management Report, described in Section 3.3.3.4, uses these events.
Table D-11 lists the IBM DB2 object management source database events and the equivalent Oracle Audit Vault events.
Table D-11 IBM DB2 Object Management Audit Events
Event Name Description | Source Event | Audit Vault Event |
---|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
Table D-12 lists the IBM DB2 object management event attributes.
Table D-12 IBM DB2 Object Management Event Attributes
Attribute Name | Data Type |
---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Peer association events track database link commands. The Distributed Database Report, described in Section 3.3.2.5, uses these events. These events do not have any event names; they only contain event attributes.
Table D-13 lists the IBM DB2 peer association event attributes.
Table D-13 IBM DB2 Peer Association Event Attributes
Attribute Name | Data Type |
---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Role and privilege management events track audited role and privilege management activity, such as granting a user permissions to alter an object. The Role and Privilege Management Report, described in Section 3.3.3.6, uses these events.
Table D-14 lists the IBM DB2 role and privilege management source database events and the equivalent Oracle Audit Vault events.
Table D-14 IBM DB2 Role and Privilege Management Audit Events
Event Name Description | Source Event | Audit Vault Event |
---|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Table D-15 lists the IBM DB2 role and privilege management event attributes.
Table D-15 IBM DB2 Role and Privilege Management Event Attributes
Attribute Name | Data Type |
---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Service and application utilization events track audited application access activity, such as the execution of SQL commands. The Procedure Executions Report, described in Section 3.3.2.6, uses these events.
Table D-16 lists the IBM DB2 service and application utilization source database events and the equivalent Oracle Audit Vault events.
Table D-16 IBM DB2 Service and Application Utilization Audit Events
Event Name Description | Source Event | Audit Vault Event |
---|---|---|
|
|
|
|
|
|
Table D-17 lists the IBM DB2 service and application utilization event attributes.
Table D-17 IBM DB2 Service and Application Utilization Event Attributes
Attribute Name | Data Type |
---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
System management events track audited system management activity, such as the CREATE DATABASE
and DISK INIT
commands. The System Management Report, described in Section 3.3.3.7, uses these events.
Table D-18 lists the IBM DB2 system management source database events and the equivalent Oracle Audit Vault events.
Table D-18 IBM DB2 System Management Audit Events
Event Name Description | Source Event | Audit Vault Event |
---|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Table D-19 lists the IBM DB2 system management event attributes.
Table D-19 IBM DB2 System Management Event Attributes
Attribute Name | Data Type |
---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Unknown or uncategorized events track audited activity that cannot be categorized. The Uncategorized Activity Report, described in Section 3.3.4.4, uses these events.
Table D-20 lists the IBM DB2 unknown or uncategorized source database event and equivalent Oracle Audit Vault event.
Table D-20 IBM DB2 Unknown or Uncategorized Audit Events
Event Name Description | Source Event | Audit Vault Event |
---|---|---|
|
|
|
|
|
|
|
|
|
Table D-21 lists the IBM DB2 unknown or uncategorized event attributes.
Table D-21 IBM DB2 Unknown or Uncategorized Event Attributes
Attribute Name | Data Type |
---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
User session events track audited authentication events for users who log in to the database. The User Sessions Report, described in Section 3.3.2.7, uses these events.
Table D-22 lists the IBM DB2 user session source database events and the equivalent Oracle Audit Vault events.
Table D-22 IBM DB2 User Session Audit Events
Event Name Description | Source Event | Audit Vault Event |
---|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Table D-23 lists the IBM DB2 user session event attributes.
Table D-23 IBM DB2 User Session Event Attributes
Attribute Name | Data Type |
---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|