Home
Security
You can secure your Informix® database server and the data that is stored in your Informix databases. You can encrypt data, secure connections, control user privileges and access, and audit data security.
Security in HCL Informix®
The Informix® Security Guide documents methods for keeping your data secure by preventing unauthorized viewing and altering of data or database objects, including how to use the secure-auditing facility of the database server.
Auditing data security
Overview of auditing with the Informix® secure auditing facility
Secure-auditing facility
Audit trail

Security
You can secure your Informix® database server and the data that is stored in your Informix databases. You can encrypt data, secure connections, control user privileges and access, and audit data security.
- Security in HCL Informix®
  The Informix® Security Guide documents methods for keeping your data secure by preventing unauthorized viewing and altering of data or database objects, including how to use the secure-auditing facility of the database server.
  - Securing data
  - Auditing data security
    - Overview of auditing with the Informix® secure auditing facility
      - Secure-auditing facility
        Audit events
        Audit masks
        Selective row-level auditing
        Auditing can be configured so that row-level events of only selected tables are recorded in the audit trail. Selective row-level auditing can compact audit records so that they are more manageable and potentially improve database server performance.
        Audit process
        When you turn on auditing, the database server generates audit records for every event that the auditing instructions specify.
        Audit trail
      - Roles for database server and audit administration
      - Audit masks and audit instructions
      - Audit configuration
      - Audit analysis overview
      - DBMS security threats
    - Audit administration
    - Audit analysis
    - The onaudit utility
      Use the onaudit utility to manage audit masks and auditing configuration.
    - The onshowaudit utility
      Use the onshowaudit utility to view the audit information from an existing audit trail. You can use this command to extract information for a particular user, database server, or both, making it possible to isolate a particular subset of data from a potentially large audit trail.
    - Audit event codes and fields
      The secure-auditing facility audits certain database server events.
    - The ADTCFG file

Audit trail

Review the audit trail regularly. The database server offers a data-extraction utility, onshowaudit, that you can use to select audit data for specific users or database servers.

After you extract data, you can specify that it be formatted to load into a database for subsequent manipulation with SQL. Audit analysis overview explains this process.

When the database server stops writing to one audit file and begins writing to a different audit file, an event alarm is generated. If you use an alarm program, you can modify it to watch for the new audit event to archive audit records, monitor records, or remove them. See the event alarms documentation in Informix® Administrator's Reference for more information about how to make use of the audit event notification.

Details about the Audit Trail Switch Event Alarm:

Class ID: 72
Severity: 2
Class Message: Audit trail is switched to a new file
Message: This message is displayed when the database server switches to a new audit trail file.