|
We're looking for a 3rd party tool to extend the native auditing functionality to allow reporting on historical data per DIACAP V-6173 of the AS&D Checklist to retain logs for 5 years. Or has someone enabled the functionality of ASE to log audit data to an audit DB? Only tool I found stopped supporting SQLA at v10, and I'm getting errors with v16 https://www.softtreetech.com/dbaudit/ |
Follow this question
By Email:Once you sign in you will be able to subscribe for any updates here
By RSS:Markdown Basics
- *italic* or _italic_
- **bold** or __bold__
- link:[text](http://url.com/ "title")
- image?
- numbered list: 1. Foo 2. Bar
- to add a line break simply add two spaces to where you would like the new line to be.
- basic HTML tags are also supported
Question tags:
question asked: 27 Feb '14, 12:08
question was seen: 1,591 times
last updated: 05 Mar '14, 14:05
Good news, the latest version of DBAUDIT works with Sybase ASA v16, bad news I haven't received any responses from this post about alternatives. I found Breck Carter's series on creating our own auditing functionality which we might consider http://sqlanywhere.blogspot.com/2008/02/tip-triggering-audit-trail.html
I'm having an EXTREME case of deja vu here... but no, there is no other recent question on the same subject. It must be this one I am thinking of: Auditing group membership
Good luck! ...if you really do have to comply with Sarbanes-Oxley, you will need it. If Dodd-Frank is also in your future, prayer is recommended :)
Thanks, love your blog but we're trying to meet DOD http://www.stigviewer.com/check/V-32376
A delightfully vague document :)
Seriously, that would be a fun project: Build an audit trail framework for SQL Anywhere. The base data would be ACID-protected by storing it in the database itself, and MobiLink could be used to continuously copy it upwards/outwards to another SQL Anywhere database, likewise ACID-protected but stored elsewhere. Marketers could write glowing descriptions of how thorough and perfectly paranoid such a mechanism would be. One might even be able to write a blog post about it... after spending hundreds (hah!) of hours building it. (Yes, I have just watched Almost Human episode 10 in which a futuristic pharmaceutical printer wrote a perfect audit trail of the drugs it created to "the cloud" even while being hacked by an evil-doer :)