Re: Audit related

  • From: "Bradd Piontek" <piontekdd@xxxxxxxxx>
  • To: veeeraman@xxxxxxxxx
  • Date: Mon, 20 Oct 2008 09:06:03 -0500

I see no issue with this. I"m also fairly positive you can run your database
via NFS provided you have the proper mount settings for your platform. ( I
could be mistaken). I know some Security Admin's prefer the audit_file_dest
be set to a secured location that the 'oracle' user can only write to and
then have them reviewed by a third party. I'm not sure how Database Vault
(or is it Audit Vault , or both) handles this situation.

Bradd Piontek
  "Next to doing a good job yourself,
        the greatest joy is in having someone
        else do a first-class job under your
        direction."
 -- William Feather


On Fri, Oct 17, 2008 at 4:35 PM, Ram Raman <veeeraman@xxxxxxxxx> wrote:

>
> Hi,
>
> A follow up on this.  Hopefully not a silly question.
>
> We are going to set up auditing with audit_trail=DB. We have
> audit_sys_oprations=TRUE too. Is it OK to set the audit_file_dest at an NFS
> location. I know it is not Ok to have a datafile in NFS. There is not enough
> space in the $ORACLE_BASE mount point, otherwise I would set it there. The
> audting is enabled by a third party product and administered by it. I
> checked with the company and yet to receive information on how often they
> clean out the 'audit_file_dest' and in what way.
>
> In the meanwhile, I want to make sure it is OK to have NFS for
> audit_file_dest. I read in Oracle manual that it goes to $OH/rdbms/audit if
> it by default (I assume it may happen if NFS is not avaialable, but NFS has
> always been available in our case, so far).
>
> Venky.
>
>
>
> On 10/13/08, Nigel Thomas <nigel.cl.thomas@xxxxxxxxxxxxxx> wrote:
>>
>>  Ram
>>
>> Moving AUD$ to another tablespace has been answered on the list before -
>> see //www.freelists.org/archives/oracle-l/02-2004/msg02964.html which
>> includes a couple of Metalink references. See also
>> //www.freelists.org/archives/oracle-l/06-2008/msg00681.html which
>> recommends you also open an SR with Oracle to register their approval.
>>
>>
>> Regards Nigel
>>
>
>

Other related posts: