html

• Title and Copyright Information
• Preface
  • Audience
  • Related Documents
  • Conventions
  • Translation
• Changes in Oracle Database Security Central
• Introducing Oracle Database Security Central
  • Downloading the Latest Version of This Manual
  • Learning About Oracle Database Security Central
  • The Auditor's Role
  • Understanding Targets
  • Understanding Firewall Policies
  • Understanding Audit Policies and Audit Data Collection
  • Configuring Alerts and Notifications
  • Generating Reports
  • Creating Users and Managing Access
  • Logging in and Understanding the Oracle Database Security Central Console UI
    • Logging in to the Oracle Database Security Central Console
    • Understanding the Tabs in the Oracle Database Security Central Console UI
    • Working with Lists of Objects in the UI
• About the Auditor Home Page
• Managing Targets
  • About Managing Targets
  • Viewing and Changing Settings for a Target
    • Viewing Audit Data Collection and Database Firewall Monitoring Details for Targets
    • Scheduling the Retrieval of Audit Policies for an Oracle Database
    • Retrieving User Assessment Data for Oracle Database Targets
    • Retrieving Security Assessment Data for Oracle Database Targets
    • Retrieving Sensitive Data for Oracle Database Targets
    • Activating Stored Procedure Auditing
    • Viewing a List of Audit Trails for a Target
    • Selecting a Firewall Policy
    • Viewing a List of Database Firewall Monitoring Points
      • Viewing a List of Monitoring Points for a Database Target
      • Viewing a List of Monitoring Points for All Your Target Databases
    • Setting a Data Retention (Archiving) Policy
  • Preparing Targets for Sensitive Data Discovery and Global Sets
    • Prerequisites for Enabling Sensitive Data Discovery
    • Managing Privileges for Discovering Privileged Users
    • Managing Statistics Gathering for Discovering Sensitive Objects
  • Creating and Modifying Target Groups
    • About Target Groups
    • Creating and Modifying Target Groups
  • Managing Compliance for Target Databases
  • Setting Access Rights for Targets and Groups
• Discover & Classify
  • Sensitive Data Discovery
    • Prerequisites for Discovering Sensitive Data
    • Data Discovery Summary
    • Data Discovery Configuration
  • Global Sets
    • About Global Sets
    • Prerequisites for Creating Global Privileged User and Sensitive Object Sets
    • Creating a Global Set
    • Creating Privileged User Sets
    • Creating Sensitive Object Global Sets
    • Viewing Where Global Sets Are Used
    • Modifying Global Sets
    • Understanding the Impact of Modifying Global Sets
    • Deleting a Global Set
• Policy Management
  • Audit Policies
    • About Audit Policies
    • Retrieving and Modifying Audit Policies from an Oracle Database
      • Understanding the Columns on the Audit Policies Tab
      • Retrieving Audit Policies from Multiple Oracle Databases
      • Scheduling the Retrieval of Audit Policies for an Oracle Database
    • Provisioning Unified Audit Policies
      • Oracle Defined Policies
        • Database Actions
          • System Configuration Changes
          • Critical Database Activity
          • Security Policy Activity
        • User Actions
          • User Login Events
          • Admin User Activity
          • Dormant User Activity
          • User Activity
        • Data Access
          • Database Schema Changes
          • Local Database Activity
          • Non-Trusted Path Auditing
          • Sensitive Data Access Monitoring
        • Compliance
          • Center for Internet Security (CIS) Configuration
          • Security Technical Implementation Guidelines (STIG)
      • Custom policies
      • Fine-grained policies
        • About Fine-Grained Auditing
        • Using Event Handlers in Fine-Grained Auditing
        • Auditing Specific Columns and Rows
        • Creating Fine-Grained Audit Policies
        • Manage Fine-Grained Audit Policies
      • Provisioning Traditional Audit Settings
        • About Creating Audit Policy Settings
        • Specifying which Audit Policies are Needed
        • Creating Audit Policies for SQL Statements
          • About SQL Statement Auditing
          • Defining SQL Statement Audit Settings
          • Understanding the Statement Audit Settings
        • Creating Audit Policies for Schema Objects
          • About Schema Object Auditing
          • Defining Schema Object Audit Settings
          • Understanding the Object Audit Settings Page
        • Creating Audit Policies for Privileges
          • About Privilege Auditing
          • Defining Privilege Audit Settings
          • Understanding the Privilege Audit Settings Page
        • Exporting Audit Settings to a SQL Script
        • Provisioning Traditional Audit Policies from the Audit Vault Server
    • Viewing Unified Audit Policies
  • Database Vault Policies
    • Prerequisites
      • Using Database Vault with DBSecCentral
      • Manually Retrieve Database Vault Policies
      • Set or Update the Credentials Needed for Database Vault Policy Management
    • Object Protection Policies
      • Create Object Protection Policies
      • Modify Object Protection Policies
      • Enable, Enable in Simulation Mode, Disable, or Delete Object Protection Policies
    • SQL Command Protection Policies
      • Create SQL Command Protection Policies
      • Modify SQL Command Protection Policies
      • Enable, Enable in Simulation Mode, Disable, or Delete SQL Command Protection Policies
    • Administrative Controls
      • Create Administrative Controls
      • Delete Administrative Controls
  • Database Firewall Policies
    • About Database Firewall Policies
    • About Database Firewall Deployment Modes and Policies
    • Types of Database Firewall Policies
    • Developing a Database Firewall Policy
    • Creating a New Database Firewall Policy
    • Configuring the Created Database Firewall Policy
      • Configuring Database Firewall Global Policy Settings
        • Configuring Policies for Login and Logout Events
        • Configuring Policies for Masking Sensitive Data
        • Configuring Policies for Unknown Traffic
        • Configuring Database Firewall Policies for Policy Pattern
      • Creating And Managing Database Firewall Sets and Profiles
        • Creating Sets
        • Creating and Managing SQL Cluster Sets
        • Creating and Managing Profiles
      • Database Firewall Policy Rules
        • About Database Firewall Policy Rules
        • Evaluation Order of the Rules
        • Session Context Rule
        • SQL Statement Rule
        • Database Object Rule
          • Statement Class to Command Mappings for Database Firewall Policies
        • Default Rule
    • Publishing and Deploying Firewall Policies
      • About Publishing and Using Database Firewall Policies
      • Publishing a Database Firewall Policy
      • Deploying Database Firewall Policies
        • Deploying Database Firewall Policies from Policies Tab
        • Deploying Database Firewall Policies from Targets Tab
    • Exporting and Importing Database Firewall Policies
      • Exporting Database Firewall Policies
      • Importing Database Firewall Policies
    • Copying a Database Firewall Policy
    • Editing a Database Firewall Policy
    • Database Firewall Policy for Capturing Return Row Count
    • Configuring Firewall Policy for SQL Statements
    • Blocking SQL and Creating Substitute Statements
    • SQL Statement Encrypted with Oracle Native Network Encryption
  • Oracle SQL Firewall
    • SQL Firewall Overview
      • About SQL Firewall
      • Terms in SQL Firewall
      • Prerequisites for SQL Firewall
    • Start Using SQL Firewall
      • Step 1: Start SQL Collection for a Database User
      • (Optional) Step 2: Manually Stop SQL Learning
      • Step 3: Enable SQL Firewall Policies
      • Step 4: Set SQL Firewall Behavior for Database Jobs
      • Step 5: Start Audit Trail for SQL Firewall Violation Log
      • Step 6: View SQL Firewall Violation Reports
      • Follow-Up Actions for SQL Firewall
    • Manage SQL Firewall
      • Delete Learned SQL Data for a User
      • Create a Session Context Only SQL Firewall Policy
      • Update SQL Firewall Policies
      • Export and Import SQL Firewall Policies
      • Disable or Enable SQL Firewall Policies
      • Delete SQL Firewall Policies
• Reports
  • About the Reports in Database Security Central
  • Activity Reports
    • About the Activity Reports
    • Activity Reports
      • About the Activity Reports
      • All Activity Report
      • All Activity by Privileged Users
      • Data Access Report
      • Audit Policy Activity Report
      • Data Modification Report
      • Data Modification Before-After Values Report
      • Database Schema Activity Report
      • Entitlement Activity Report
      • Failed Login Events Report
      • Login and Logout Report
      • Startup and Shutdown Report
    • Entitlement Reports
    • OS Correlation Reports
    • Database Firewall Reports
    • Stored Procedure Changes
    • DB Vault Activity
    • SQL Firewall Violations Report
    • Alert Reports
  • Summary Reports
    • Trend Charts Report
    • Anomaly Reports
    • All Activity Reports
  • Compliance Reports
    • About the Compliance Reports
    • Configuring Compliance Reports
    • Data Privacy Reports
      • About Data Privacy Reports
      • Importing Sensitive Data Into Repository
      • Accessing Data Privacy Reports
      • Implementation In Oracle Database Security Central
  • Assessment Reports
    • Security Assessment
      • About Security Assessment Reports
      • Setting a Baseline for Security Assessment Reports
      • Viewing Security Assessment Reports
      • Adding Exception for Security Assessment Reports
        • Updating the Severity of an Assessment
        • Deferring an Assessment
      • Revert Exception for Security Assessment Reports
      • Severity Levels
      • Categories and Assessments
    • User Assessment
      • Getting Started with User Assessment
        • Scheduling User Assessment
        • Key Terms in User Assessment
        • Understanding the User Assessment Dashboard
      • Setting a Baseline for User Assessment Reports
      • User Assessment Reports
  • DBSecCentral System Reports
  • Customizing Reports
    • Filtering Data in a Report
      • Filtering by Search
      • Filtering by a Data Value
      • Filtering by an Expression
      • Filtering by a Global Set in an All Activity Report
      • Filtering on Sensitive Objects in Compliance GDPR Reports
    • Formatting Data in a Report
      • Sorting Row Data for All Columns
      • Highlighting Rows in a Report
      • Creating a Chart from Report Data
      • Adding Control Breaks to a Report
      • Using the Group By Feature to Format a Report
    • Hiding or Showing Columns in a Report
    • Customized Reports
      • Saving your Customized Reports
      • Accessing Your Saved Custom Reports
    • Creating and Scheduling a Custom Report
    • Resetting the Report Display Values to Their Default Settings
  • Creating Non-Interactive Report Templates
    • Creating Non-Interactive Report Template
    • Modifying Non-Interactive Report Template
    • Generating XML Data File Using SPOOL Command
    • Generating Reports Using RTF And XML Sample Templates
  • Creating and Uploading Your Own Custom Reports
  • Scheduling and Generating PDF or XLS Reports
    • About Scheduling and Creating PDF or XLS Reports
    • Creating a Report Schedule
    • Viewing or Modifying Report Schedules
    • View and Edit All Scheduled Reports
    • Downloading Generated Reports in PDF or XLS Format
    • Notifying Users About Generated PDF or XML Reports
  • Annotating and Attesting Reports
  • Downloading a Report in HTML or CSV Format
  • Related Event Data Appendices
• Managing Access and Other Settings
  • Managing User Accounts and Access
    • About Oracle DBSecCentral Auditor Accounts and Passwords
    • Creating Local Auditor Users
    • Creating New SSO Users
    • Viewing the Status of Auditor User Accounts
    • Managing User Access to Targets or Groups
      • About Managing User Access
      • Controlling Access by User
      • Controlling Access by Target or Group
    • Changing a User Account Type
    • Changing the Auditor Password
      • Changing Your Own Password
      • Changing the Password of Another Auditor
      • Changing the Expired Password of an Auditor
    • Deleting an Auditor Account
  • Creating Templates and Distribution Lists for Email Notifications
    • About Email Notifications and Templates
    • Creating or Modifying an Email Distribution List
    • Creating or Modifying an Email Template
  • Creating Alert Syslog Templates
  • Viewing Monitoring Point and Audit Trail Status
    • Viewing Monitoring Point Status
    • Viewing Audit Trail Status
  • Monitoring Jobs
• Creating Alerts
  • About Alerts
    • Overview
    • Defining Useful Alerts
  • Creating Alerts and Writing Alert Conditions
    • Creating or Modifying an Alert
      • Command Class to Command Mappings for Alert Policies and Reports
      • Session or Statement to Command Mappings for Alert Policies and Reports
    • Writing Alert Conditions
      • About Alert Conditions
      • Writing an Alert Condition
      • Using the Alert Assistant
    • Disabling, Enabling, or Deleting Alerts
  • Monitoring Alerts
  • Responding to an Alert
  • Creating Custom Alert Status Values
  • Forwarding Alerts to Syslog
• Troubleshooting Oracle Database Security Central for Auditors
  • Is the Audit Vault 20.X EVENT_LOG column RECORD_ID Generated Sequentially or Randomly
  • There is No Option to Filter All Activity Report Using Timestamp/Time
  • How to Purge Alert Queue and Alert Store
• Oracle Database Security Central Database Schemas
  • About Oracle Database Security Central Schemas
  • Metadata for Activity Reports
  • Data for Event Reports
  • Data for Alert Reports
  • Data for Entitlement Reports
  • Data for SPA Reports
  • Data for Database Firewall Reports
• Data Warehouse Partition
• Audit Record Fields
• Oracle Database Audit Events
  • About the Oracle Database Audit Events
  • Account Management Events
  • Audit Command Events
  • Data Access Events
  • Exception Events
  • Invalid Record Events
  • Peer Association Events
  • Role and Privilege Management Events
  • Service and Application Utilization Events
  • Unknown or Uncategorized Events
  • User Session Events
• AIX Audit Events
• Microsoft SQL Server SQL Trace Audit Events
  • About the Microsoft SQL Server Audit Events
  • Account Management Events
  • Application Management Events
  • Audit Command Events
  • Data Access Events
  • Exception Events
  • Invalid Record Events
  • Object Management Events
  • Peer Association Events
  • Role and Privilege Management Events
  • Service and Application Utilization Events
  • System Management Events
  • Unknown or Uncategorized Events
  • User Session Events
  • Target Type Values for SQL Trace Audit Events
  • Possible Target Types Values Associated With Certain SQL Trace Audit Events
• Microsoft SQL Server SQL Audit and Event Log Events
  • SQL Audit Events
  • Event Log Events
  • Target Type Values for SQL Audit and Event Log Events
  • Possible Target Types Values Associated With SQL Audit and Event Log Events
• IBM DB2 Audit Events
  • About the IBM DB2 for LUW Audit Events
  • Account Management Events
  • Application Management Events
  • Audit Command Events
  • Context Events
  • Data Access Events
  • Exception Events
  • Execution Event
  • Invalid Record Events
  • Object Management Events
  • Peer Association Events
  • Role and Privilege Management Events
  • Service and Application Utilization Events
  • System Administration Events
  • System Management Events
  • Unknown or Uncategorized Events
  • User Session Events
  • Possible Target Type Values for IBM DB2 Audit Events
    • List 1: Possible Target Type Values for IBM DB2 Audit Events
    • List 2: Possible Target Type Values for IBM DB2 Audit Events
    • List 3: Possible Target Type Values for IBM DB2 Audit Events
• MySQL Audit Events
• Solaris Operating System Audit Events
• Microsoft Windows Operating System Audit Events
• Linux Operating System Audit Events
• Active Directory Audit Events
  • About Active Directory Audit Events
  • Directory Service Audit Trail Events
  • Security Audit Trail Events