The blog
Practical, vendor-neutral Oracle engineering — verified against real systems.
- Security & Ops •
Oracle Privilege Analysis: You Granted DBA. Here's What They Actually Used.
Oracle Privilege Analysis with DBMS_PRIVILEGE_CAPTURE: how to record the privileges a user really exercises, compare used against granted, and generate the least-privilege revoke list from evidence — including why SELECT ANY TABLE almost always shows up unused, and a lab that proves it.
- Security & Ops •
Oracle Virtual Private Database: Row-Level Security You Can't Route Around
Oracle VPD (DBMS_RLS) without the confusion: how a policy function appends a per-session WHERE clause to the base table, how EXEMPT ACCESS POLICY works, SELECT vs INSERT/UPDATE/DELETE and update_check, and a lab proving three users each see only the rows they should — on counts, sums, and by-id lookups.
- Cloud & Migration •
Oracle Data Pump, Done Right: A Migration You Can Prove
Oracle Data Pump beyond expdp full=y: server-side architecture, the flags that actually matter (REMAP, INCLUDE, PARALLEL, consistency, encryption), the command-line quoting trap, and a lab that proves an export/import round trip loses nothing.
- Performance •
Oracle Partition Pruning: Read One Partition, Not the Whole Table
Partition pruning is the whole point of partitioning for performance: how the optimizer skips partitions it does not need, the function-on-the-key mistake that silently defeats it, static vs dynamic pruning in the plan, and a lab that reads one partition instead of twenty-four.
- Security & Ops •
Oracle Data Redaction: Mask at Read Time, Prove It Isn't Access Control
Oracle Data Redaction (DBMS_REDACT) without the myths: full, partial, regexp and random masking, who gets redacted via the policy expression and EXEMPT REDACTION POLICY, and a lab proving it is a read-time display control — not encryption at rest and not access control.
- HA & DR •
Oracle Flashback: Undo at the Database Level
Oracle Flashback without the confusion: the family of features that reverse human error fast — Flashback Query, Table, Drop, and Database — what each needs, where each stops, and proving all three recoveries end to end.
- Security & Ops •
Oracle Transparent Data Encryption: Prove the Datafile Is Unreadable
Oracle TDE without the hand-waving: what encryption at rest actually protects, the keystore that is the whole game, tablespace vs column encryption, and proving a stolen datafile is unreadable ciphertext.
- Performance •
Oracle SQL Plan Management: Stop a Good Plan From Going Bad
How Oracle SQL plan baselines keep a good execution plan from silently regressing: what a baseline is, capturing and evolving them, and proving one holds the plan when the statistics drift.
- Performance •
Oracle Optimizer Statistics, Demystified
Oracle optimizer statistics without the cargo cult: histograms, extended stats for correlated columns, the automatic job, and how to keep your plans honest.
- Performance •
Oracle Execution Plans, Decoded: The One Number That Matters
Read an Oracle execution plan the way that finds the problem: compare E-Rows to A-Rows with DBMS_XPLAN, spot the estimate that blew up, and fix the query that is actually slow.
- Security & Ops •
Oracle Unified Auditing Without the Noise
Oracle Unified Auditing done right: enable the few policies that matter, migrate off traditional AUD$, read the trail, and why 23ai desupports it entirely.
- Security & Ops •
The Oracle Hardening Checklist That Actually Matters
Oracle hardening without the busywork: close default-password accounts, tame PUBLIC and ANY grants, lock the listener, encrypt at rest, and audit what matters.
- Cloud & Migration •
OCI vs Oracle Database@Azure: Where Should Your Oracle Database Live?
OCI native, Oracle Database@Azure, or the Interconnect? Choose by where your apps live, latency, Azure commitments (MACC), and cost — with a decision tree.
- HA & DR •
Oracle RMAN Recovery Runbook: Restore, Recover, Prove It
Restore rebuilds datafiles; recover rolls them forward. The RMAN runbook for a lost datafile, controlfile, bad DELETE, or corrupt block — proven, not hoped.
- Cloud & Migration •
Your First Oracle Autonomous Database on OCI Always Free
Stand up a real, managed Oracle Autonomous Database free on OCI Always Free in minutes — provision it, connect with no client install, and try AI Vector Search.
- Security & Ops •
Oracle Patching, Demystified: CPU, RU, RUR — and What Changed in 2026
Oracle patching in 2026: what a Release Update is, why RUR is dead, the new monthly CSPU and MRP, and how to apply it with OPatch and datapatch — no outage.
- Cloud & Migration •
Migrating Oracle to the Cloud: Which Method, and When
Choose an Oracle cloud migration method — Data Pump, transportable tablespaces, Data Guard, GoldenGate, or ZDM — by downtime, endianness, version, and target.
- Performance •
ORA-00060 Deadlock: Find It, Fix It, Prevent It
ORA-00060 rolls back one statement, not your transaction. How to read the deadlock graph, the causes (lock order, unindexed FKs, bitmaps, ITL), and the fixes.
- Performance •
Oracle Wait Events, Decoded: The Half-Dozen
A wait event is just where a session spent time not on CPU. Learn the six that matter, rank them by DB time, and ignore the idle ones.
- HA & DR •
Data Guard Switchover vs Failover: Which Role Transition, and When
Switchover is a planned zero-loss role swap; failover is for when the primary is gone — plus Fast-Start Failover, protection modes, and the mistakes to avoid.
- HA & DR •
RAC Node Eviction: A Troubleshooting Checklist That Starts With "Why"
Oracle RAC node eviction from the logs up: the three heartbeats, misscount vs disktimeout, split-brain and voting disks, and a checklist to find the real cause.
- Performance •
How to Read an AWR Report Without Drowning
A field guide to Oracle AWR and ASH: DB Time as the master metric, the sections that matter, wait events decoded, the ratios to ignore — plus a free lab.
- HA & DR •
The Oracle HA Decision Tree: RAC vs Data Guard vs Both
RAC survives node failure; Data Guard survives site loss; only backups survive a bad DELETE. A RAC-vs-Data-Guard decision framework with RTO/RPO and a free lab.