然而传统的数据库审计系统往往只是一个简单的日志系统，而并不具备对日志进行分析的能力。
But the traditional database audit system is always only a simple log system without the ability of analyzing the log records.
例如，如果只需要审计数据库连接和系统管理事件类型，那么在配置审计功能时应该仅指定VALIDATE和SYSADMIN事件类型。
For example, if you only needed to audit database connection and system administration event types, you would only specify the VALIDATE and SYSADMIN event types when configuring the facility.
探测器在操作系统内核级上监视所有数据库事务，包括特权用户的事务，而不依赖于数据库审计日志。
The probes monitor all database transactions, including those of privileged users, at the operating system kernel level without relying on database audit logs.
应用推荐