Audit Record Fields
Audit record fields capture data such as target, service, and policy names.
Table 1 lists the fields in an Oracle DBSecCentral audit record.
Table 1 Audit Record Fields
| Audit Record Field | Description | Column Type |
|---|---|---|
| Target Name | Target system secured by DBSecCentral | VARCHAR(255) |
| Target Type | Type of target, for example, Microsoft SQL Server, IBM DB2 etc. | VARCHAR2(255) |
| Service Name | Target service used to perform this event | VARCHAR2 (255 CHAR) |
| Policy Name | Name of the policy when the event was recorded | VARCHAR2(1024) |
| Policy Name | Name of the policy which caused the event | VARCHAR2(4000 CHAR) |
| Event Server Time | Time of entry of the audit record in the Audit Vault Server | Timestamp with local timezone |
| Event Time | Time of event occurrence | Timestamp with local timezone |
| User Name | Target user that performed the event | VARCHAR2(255) |
| Event Status | Status of completion of the event | VARCHAR2(30) |
| Error Code | Error number on event failure | VARCHAR2(30) |
| Error Message | Error message on event failure | VARCHAR2(1000) |
| Event Name | Name of the event as recognized by the target | VARCHAR2(255) |
| Action Taken | Action taken on the command | VARCHAR2(255) |
| Threat Severity | Threat severity assigned to the command | VARCHAR2(30 CHAR) |
| Log Cause | Reason for logging the event | NUMBER - Max 22 bytes |
| Object | Object affected by event | VARCHAR2(255) |
| Object Type | Type of target object, for example, Package, Type, Table | VARCHAR2(255) |
| Object Owner | Owner of target object | VARCHAR2(255) |
| Terminal | Name of the terminal (for example, Unix terminal) that was the source of the event | VARCHAR2(255 CHAR) |
| OS User Name | Operating system login name of the target user causing the event | VARCHAR2(255) |
| Client Host Name | Name of the host machine | VARCHAR2(255) |
| Client ID | Client identifier of the user whose actions were audited | VARCHAR2(1024 CHAR) |
| Client IP | IP address of the Client Host | VARCHAR2(255) |
| Network Connection | Description of the network connection | VARCHAR2(255) |
| Client Program | Name of program on Client Host that issued command | VARCHAR2(255) |
| Command Text | Command statement issued by target user | CLOB Securefile |
| Command Param | Parameters associated with command text | CLOB |
| Extension | Additional detailed information about the audited event | CLOB Securefile |
| Original Content | Audit record generated by target | CLOB Securefile |
| Command Class | Class of command issued by target user that caused the event | VARCHAR2(255) |
| Audit Type | Type of auditing | VARCHAR2(255 CHAR) |
| Application Context | Application context information | VARCHAR2(4000 BYTE) |