DISABLE SECURITY_AUDIT
Valid in: SQL, ESQL, OpenAPI, ODBC, JDBC, .NET
The DISABLE SECURITY_AUDIT statement enables the security administrator to turn off security logging for the specified type of security event. To turn security logging on, use the ENABLE SECURITY_AUDIT statement.
Syntax
The DISABLE SECURITY_AUDIT statement has the following format:
[EXEC SQL] DISABLE SECURITY_AUDIT audit_type | ALL;
audit_type
Specifies the type of information to not log, as follows:
ALARM
Disables logging of all security events generated by create security_alarm statements issued on tables.
DATABASE
Disables logging of all types of access by all users to all database objects, including use of the ckpdb, rollforwarddb, and auditdb utilities.
DBEVENT
Disables logging of all create dbevent, raise dbevent, register dbevent, remove dbevent, and drop dbevent statements.
LOCATION
Disables logging of all access to location objects (create location, alter location and drop location statements) by all users.
ROLE
Disables logging of role events (set role statement with -r flag)
SECURITY
Disables logging of all types of access by all users to all security-related objects.
TABLE
Disables logging of all types of access by all users to all tables.
USER
Disables logging of all changes to user and group information, including runtime verification of user and group names.
VIEW
Disables logging of all types of access by all users to all views.
ROW
Disables logging of all types of access by all users to all row-level events.
QUERY_TEXT
Disables logging of all types of access by all users to all the detail information for querytext events.
RESOURCE
Disables logging of all types of access by all users to violations of resource limits.
ALL
Disables logging of all types of security events.
After disabling security logging, the DBMS Server continues to log security events for users that have the AUDIT_ALL privilege. (To disable auditing for users that are assigned the AUDIT_ALL privilege, use Vector configuration tools.)