Re: Oracle Auditing with SYSLOG
- From: Henry Poras <hrp@xxxxxxxxxx>
- To: andy@xxxxxxxxxxxxxxx
- Date: Tue, 5 Nov 2013 17:06:20 -0500
Andy,
We are doing it for security reasons. It is, however, next to impossible to
get the kind of information I used to get from querying AUD$. I put in an
enhancement request to Oracle years ago to allow auditing to both OS and
DBA simultaneously. This would allow security and querying. Never heard
anything back about this.
Maybe you will have better luck.
Henry
On Tue, Nov 5, 2013 at 12:44 PM, Andy Klock <andy@xxxxxxxxxxxxxxx> wrote:
> There is an option to persist audit records via the syslog rather than
> directly to the OS or DB. My experience with audit records has always
> been with AUD$. Very simple and useful (albeit sometimes slow) to
> find the information I need to report on.
> I can see the benefit though with locking audit info to syslog (root
> only access and no longer having to deal with purging AUD$ for
> example) but I also see that parsing information out of syslogs to be
> incredibly cumbersome.
>
> I'm interested in hearing if anybody is using syslog for auditing and
> how you are managing and dealing with the data.
>
> Thanks!
>
> Andy Klock
> --
> //www.freelists.org/webpage/oracle-l
>
>
>
Other related posts:
