The Set Access Logging tab enables you to configure access logging rules for user and database objects. Create or remove access logging on an object by specifying the target object and then clicking either Begin Log or End Log.
-
Under By User select one of the following:
Option Description All Users Creates an access logging rule that applies to all users on the database. Specific User(s) Creates an access logging rule that applies to specific users. Select a user from the list. To select multiple users, use the Shift and Ctrl keys. - [Optional] Select Denials to create a rule that only applies when access is denied. You can define two rules for the same user and object, but with different Denials settings.
- [Optional] Select With SQL to record SQL statements in the access log.
-
Under Frequency select one of the following:
Option Description First Logs only the first access by selected user(s) to the selected object. Last Logs only the last access by selected user(s) to the selected object. Each Logs every access by selected user(s) to the selected object. First & Last Logs only the selected user(s) first and last access to the selected object. -
Under On Object select one of the following:
Option Description All Sets a rule that applies to all database and user objects. Database Sets a rule that applies to objects on the selected database. Use the drop-down list to select a database available for access logging. User Sets a rule that applies to objects on the selected user. Use the drop-down list to select a user available for access logging. Authentication Sets a rule that applies to the selected authentication name. Use the drop-down list to select a name. -
[Optional] If you selected Database or User in the previous step, select Object Type to create or remove an access logging rule for a specific object on the selected database or user.
- Use the list to select the object type of the target object.
- Use the second list to select the target object on which you want to create or remove the role.
-
[Optional] Select specific SQL statements to log.
You can manually select individual SQL statements or use the Select By options to group related SQL statements to log.
-
Under Select By, select one or more of the following:
Option Description All Selects all available commands for logging. Dictionary Selects all available dictionary commands for access logging. Create Selects all available create object rights for access logging; automatically selected if you select Dictionary. Drop Selects all available drop object rights for access logging; automatically selected if you select Dictionary. Access Selects all available access commands for access logging. Drop Selects all available maintenance commands for access logging. - Under Normal select from the list of basic SQL access statements to log.
- Under Create select from the list of SQL CREATE statements to log.
- Under Drop select the SQL DROP statements to log.
-
Under Select By, select one or more of the following:
-
Click one of the following buttons:
Button Description Begin Log Defines an access logging rule for the selected user(s), database, and object (optional). End Log Revokes an existing access logging rule for the selected user(s), database, and object (optional).