ALTER AUDIT POLICY

Description

Modifies the unified audit policy.

Precautions

• Only users with the POLADMIN or SYSADMIN permission, or the initial user can perform this operation.
• The unified audit policy takes effect only after enable_security_policy is set to on.

Syntax

Add or delete an operation type in the audit policy.

ALTER AUDIT POLICY [ IF EXISTS ] policy_name { ADD | REMOVE } { [ privilege_audit_clause ] [ access_audit_clause ] };

Modify the filter criteria in the audit policy.

ALTER AUDIT POLICY [ IF EXISTS ] policy_name MODIFY ( filter_group_clause );

Delete the filter criteria from the audit policy.

ALTER AUDIT POLICY [ IF EXISTS ] policy_name DROP FILTER; 

Modify the description of the audit policy.

ALTER AUDIT POLICY [ IF EXISTS ] policy_name COMMENTS policy_comments;

Enable or disable the audit policy.

ALTER AUDIT POLICY [ IF EXISTS ] policy_name { ENABLE | DISABLE };

• privilege_audit_clause
  DDL operation type and target resource label in the audit policy.

  1	PRIVILEGES ({ DDL | ALL } [ ON LABEL ( resource_label_name [, ... ] ) ])

• access_audit_clause
  DML operation type and target resource label in the audit policy.

  ACCESS ({ DML | ALL } [ ON LABEL ( resource_label_name [, ... ] ) ])

• filter_group_clause
  Filter criteria in the audit policy.

  1	FILTER ON { filter_type ( filter_value [, ... ] ) } [, ... ]

Parameters

• policy_name

  Specifies the audit policy name, which must be unique.

  Value range: a string. It must comply with the naming convention.

• DDL

  Specifies the operations that are audited in the database: CREATE, ALTER, DROP, ANALYZE, COMMENT, GRANT, REVOKE, SET, and SHOW.

• DML

  Specifies the operations that are audited in the database: SELECT, COPY, DEALLOCATE, DELETE, EXECUTE, INSERT, PREPARE, REINDEX, TRUNCATE, and UPDATE.

• ALL

  Specifies all DDL or DML operations supported in the database. When the form is { DDL | ALL }, ALL indicates all DDL operations. When the form is { DML | ALL }, ALL indicates all DML operations.

• filter_type

  Specifies a type of information to be filtered by the audit policy. The value can be IP, ROLES, or APP.

• filter_value

  Specifies the detailed information to be filtered.

• policy_comments

  Records description information of the audit policy.

• ENABLE|DISABLE

  Enables or disables the unified audit policy.

Examples

See Examples in section "CREATE AUDIT POLICY."

Helpful Links

CREATE AUDIT POLICY and DROP AUDIT POLICY