Sybase Recorder Reference Guide

eTrust Audit Field Mapping>goNumber of current Sybase audit table:>select value from master.dbo.sysconfigures where name = "current audit table">goNumber of records in audit table sysaudits_01:>select count(*) from sybsecurity.dbo.sysaudits_01>goSybase server system time +1 sec:>select (convert(char(10),getdate(),112) +convert(char(8),dateadd(ss,1,getdate()),108)>goeTrust Audit Field MappingThis section describes Audit fields and Sybase-specific fields. Since policy rulesdefine actions based on values of specific event fields, this section can be used tofacilitate the creation or maintenance of policy rules for Sybase events.Sybase Event TypesSybase events are logged in table sysaudits_xx (where xx = 01, 02, …, 08). Here isthe list of the fields from this table:event, eventmod, spid, eventtime, sequence, suid, dbid, objid, xactid, loginname,dbname, objname, objowner, extrainfoThe table below describes Sybase event types. Each event type is mapped toAudit field ‘ Event ID’.Each type is associated with Audit ‘Category’, ‘ObjClass’ and ‘Operation’ asdefined in the table below:Sybase Event Tableevent Category ObjClass Operation1 Security Systems DATABASE sp_addauditrecord2 Administration DATABASE Alter3 Object Access TABLE Alter4 Object Access TABLE bcp6 Object Access TABLE sp_bindefault7 Object Access TABLE sp_bindmsg9