RE: audit_sys_operations apparently not working
- From: "Chandra Pabba" <Chandra_Pabba@xxxxxxxxxxx>
- To: <jkstill@xxxxxxxxx>, "'Oracle-L Freelists'" <oracle-l@xxxxxxxxxxxxx>
- Date: Wed, 18 Mar 2009 18:41:22 -0600
Jared,
On windows, the audit trace information is written to Event Viewer. See if
you can find the audit traces written to Event viewer.
HTH
Thanks
Chandra
From: oracle-l-bounce@xxxxxxxxxxxxx [mailto:oracle-l-bounce@xxxxxxxxxxxxx]
On Behalf Of Jared Still
Sent: Wednesday, March 18, 2009 5:29 PM
To: Oracle-L Freelists
Subject: audit_sys_operations apparently not working
Platform: Windows 23k Server SP2 64bit
Oracle: 10.2.0.4 EE
I have two databases for which both audit_file_dest and audit_sys_operations
are set.
NAME VALUE
VAL? MOD? MOD?
------------------------- --------------------------------------------------
---- ---- ----
audit_file_dest D:\ORACLE\ORCL\102\RDBMS\AUDIT
Y N D
audit_sys_operations TRUE
N N N
audit_trail DB
N N N
3 rows selected.
Yet I don't find any audit files in audit_file_dest.
Obvious possible problems:
permissions - Local System user runs the Oracle service, and has full
control of the directory
full file system - it is not full, 40G free
Even without audit_sys_operations=true, audit logs showing logons by
SYS/SYSDBA should
appear in the audit_file_dest directory.
Checking a linux 10.2.0.4 database, I find that it works as expected.
Before OYASR (Opening Yet Another Service Request) I thought it would be a
good
idea to ask here first. For low priority issues, Oracle-L is usually
faster. :)
So, is there something I am missing, or is it just broke on Windows?
I did search MetaLink^H^H^H^H^H^H^H^HMy Oracle Support, but didn't find
anything useful.
Jared Still
Certifiable Oracle DBA and Part Time Perl Evangelist
Other related posts:
