Обсуждение: Who altered the database?
Dear Members!
We have a server.
Because of high usage we can't log DDL-s. There are too many temporary tables created by users, so it would slow down the server.
A database owner changed.
What can we do to get info about the change (who did it, from what IP, when it happened) in the future?
As I see we can't define precisely what we want to log... All or nothing.
Do you know any tricks to do it?
For example: DB level trigger, or other thing?
Thank you for the answer!
Best regards
dd
On 4/9/21 6:14 AM, Durumdara wrote: > Dear Members! > > We have a server. > Because of high usage we can't log DDL-s. There are too many temporary > tables created by users, so it would slow down the server. > A database owner changed. > > What can we do to get info about the change (who did it, from what IP, > when it happened) in the future? > > As I see we can't define precisely what we want to log... All or nothing. > > Do you know any tricks to do it? > > For example: DB level trigger, or other thing? pg_audit? -- Angular momentum makes the world go 'round.
On Fri, 9 Apr 2021, 4:44 pm Durumdara, <durumdara@gmail.com> wrote:
Dear Members!We have a server.Because of high usage we can't log DDL-s. There are too many temporary tables created by users, so it would slow down the server.A database owner changed.What can we do to get info about the change (who did it, from what IP, when it happened) in the future?As I see we can't define precisely what we want to log... All or nothing.Do you know any tricks to do it?For example: DB level trigger, or other thing?Thank you for the answer!Best regardsdd
You can use different options in log_line_prefix parameter in postgresql.conf
You can also log connection and disconnection, each has separate parameter in configuration file.
Regards,
Ganesh Korde.
On Fri, 9 Apr 2021 13:14:17 +0200 Durumdara <durumdara@gmail.com> wrote: > > What can we do to get info about the change (who did it, from what IP, when > it happened) in the future? > > As I see we can't define precisely what we want to log... All or nothing. > Create a web interface to apply the changes and have the web server log the info in its own logs? Apache has this directive : https://httpd.apache.org/docs/2.4/mod/mod_log_config.html#logformat -- Bien à vous, Vincent Veyron https://marica.fr/ Logiciel de suivi des contentieux juridiques, des sinistres d'assurance et des contrats