From: M. D. <lists@turnkey.bz>
To: pgsql-sql@postgresql.org
To: pgsql-admin@postgresql.org
Subject: parsing audit table
Date: Tue, 16 Aug 2011 15:02:58 -0600
Message-ID: <4E4ADB02.4020808@turnkey.bz> (raw)
Hi everyone,
I'm a bit lazy, or actually in a bit of a crunch. I added an audit
recording a few months ago, but never really used it much, but today I'm
seeing a bunch of suspicious activity by one user. Does someone have
any function to quickly parse this data?
I followed this: http://wiki.postgresql.org/wiki/Audit_trigger - so I'm
hoping someone else has something to parse that.
original data:
"(B04TaEsAAIG5bEEX5xBVPQ,2,jakew,mag,"",2011-07-05,2011-07-05,,,7,528284,"",2011-07-05,13:20:59,2011-07-05,"",A04CQUUABSxYfxftPQqJlg,,JUfhSzwADKqAFSN1Cbv+mg,BUiZqlIABburW7jqdY9JJQ,HUZPx0gACfCxy1Y34QSTQw,,,0,N,Y,Y,919.9100,0.0000,0.0000,2011-07-05,2011-07-05)"
new data:
"(B04TaEsAAIG5bEEX5xBVPQ,3,jakew,mag,"",2011-07-05,2011-07-05,,,7,528284,"",2011-07-05,13:20:59,2011-07-05,"",A04CQUUABSxYfxftPQqJlg,,JUfhSzwADKqAFSN1Cbv+mg,BUiZqlIABburW7jqdY9JJQ,HUZPx0gACfCxy1Y34QSTQw,,,0,N,N,Y,919.9100,919.9100,0.0000,,2011-08-04)"
those 22 alphanumeric columns are IDs.
Thanks for any help,
Mark
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-sql@postgresql.org
Cc: lists@turnkey.bz, pgsql-admin@postgresql.org
Subject: Re: parsing audit table
In-Reply-To: <4E4ADB02.4020808@turnkey.bz>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox