Fwd: Can I bother you for some more assistance?

From: John Scalia <jayknowsunix(at)gmail(dot)com>
To: "pgsql-admin(at)postgresql(dot)org" <pgsql-admin(at)postgresql(dot)org>
Subject: Fwd: Can I bother you for some more assistance?
Date: 2017-01-06 15:55:26
Message-ID: CABzCKRAnPg6vJSd-6FmO0LgxtfCd9nJoTGstPUKFToD+-XkF+Q@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

Hi all,

This may not be the most appropriate forum for this question, but if anyone
know of a better one, I'd be happy to change the destination, anyway I've
been struggling most of this morning to get pgaudit working with object
logging on a test database, but I can't seem to get it working properly.
Apologies for the length of this, but here's the procedure I've been
following:

psql -U postgres postgres
CREATE DATABASE phi;
GRANT ALL ON DATABASE phi TO postgres;
\c phi

-- Null out pgaudit.log or the extension will not load
SET pgaudit.log = '';
CREATE EXTENSION pgaudit;
SET pgaudit.log = 'function,ddl,rule,misc';
\i .usr/pgaudit_analyze/sql/audit.sql

--- I have to exit the database at this point or the create schema database
command will fail, not sure why. Maybe the audit.sql is doing something
weird.
\q
psql -U postgres phi
CREATE SCHEMA phi;
SET search_path TO phi, pgaudit, public;
GRANT ALL ON SCHEMA phi TO postgres;
CREATE TABLE patient (id INT, 'first_name' VARCHAR(20), 'last_name'
VARCHAR(30), SS_NUM CHAR(12), mpi VARCHAR(20));
SET pgaudit.role = 'auditor';
GRANT select, update, delete on patient TO auditor;

-- The INSERT command should not logged
INSERT INTO patient VALUES (1, 'Test', 'Test', '000-00-0000', 'T29383');

-- The UPDATE should be logged
UPDATE patient SET mpi = 'T459093';

If you'll note the last 4 commands, they're basically identical to the
pgaudit instructions, but the CSV logfile shows '<not logged>' for both of
these as opposed to showing that the UPDATE command should have been
logged. In any event, I can't determine what step(s) I might be missing,
and nothing is coming to mind immediately. Can anyone assist?

TIA,
Jay

Responses

Browse pgsql-admin by date

  From Date Subject
Next Message Ferrell, Denise D CTR NSWCDD, H11 2017-01-06 19:02:12 Restoring from backup
Previous Message Günce Kaya 2017-01-06 08:47:14 Re: Displaying ProcessList to Users