parsing audit table

From: "M(dot) D(dot)" <lists(at)turnkey(dot)bz>
To: pgsql-sql(at)postgresql(dot)org, pgsql-admin(at)postgresql(dot)org
Subject: parsing audit table
Date: 2011-08-16 21:02:58
Message-ID: 4E4ADB02.4020808@turnkey.bz
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin pgsql-sql

Hi everyone,

I'm a bit lazy, or actually in a bit of a crunch. I added an audit
recording a few months ago, but never really used it much, but today I'm
seeing a bunch of suspicious activity by one user. Does someone have
any function to quickly parse this data?

I followed this: http://wiki.postgresql.org/wiki/Audit_trigger - so I'm
hoping someone else has something to parse that.

original data:
"(B04TaEsAAIG5bEEX5xBVPQ,2,jakew,mag,"",2011-07-05,2011-07-05,,,7,528284,"",2011-07-05,13:20:59,2011-07-05,"",A04CQUUABSxYfxftPQqJlg,,JUfhSzwADKqAFSN1Cbv+mg,BUiZqlIABburW7jqdY9JJQ,HUZPx0gACfCxy1Y34QSTQw,,,0,N,Y,Y,919.9100,0.0000,0.0000,2011-07-05,2011-07-05)"
new data:
"(B04TaEsAAIG5bEEX5xBVPQ,3,jakew,mag,"",2011-07-05,2011-07-05,,,7,528284,"",2011-07-05,13:20:59,2011-07-05,"",A04CQUUABSxYfxftPQqJlg,,JUfhSzwADKqAFSN1Cbv+mg,BUiZqlIABburW7jqdY9JJQ,HUZPx0gACfCxy1Y34QSTQw,,,0,N,N,Y,919.9100,919.9100,0.0000,,2011-08-04)"

those 22 alphanumeric columns are IDs.

Thanks for any help,
Mark

Responses

Browse pgsql-admin by date

  From Date Subject
Next Message Chris Travers 2011-08-16 21:04:11 Re: Using Postgresql as application server
Previous Message Steve Atkins 2011-08-16 20:40:34 Re: [] Using Postgresql as application server

Browse pgsql-sql by date

  From Date Subject
Next Message M. D. 2011-08-16 21:48:43 Re: parsing audit table
Previous Message Igor Neyman 2011-08-16 17:43:09 Re: which is better: using OR clauses or UNION?