Re: audit_sys_operations apparently not working

  • From: Jared Still <jkstill@xxxxxxxxx>
  • To: Chandra Pabba <Chandra_Pabba@xxxxxxxxxxx>
  • Date: Wed, 18 Mar 2009 17:13:17 -0700

Thanks, I seem to recall that now.

It would be much easier to use in a file IMO.


Jared Still
Certifiable Oracle DBA and Part Time Perl Evangelist



On Wed, Mar 18, 2009 at 5:41 PM, Chandra Pabba <Chandra_Pabba@xxxxxxxxxxx>wrote:

>  Jared,
>
>
>
> On windows, the audit trace information is written to Event Viewer.  See if
> you can find the audit traces written to Event viewer.
>
>
>
> HTH
>
>
>
> Thanks
> Chandra
>
>
>
>
>
> *From:* oracle-l-bounce@xxxxxxxxxxxxx [mailto:
> oracle-l-bounce@xxxxxxxxxxxxx] *On Behalf Of *Jared Still
> *Sent:* Wednesday, March 18, 2009 5:29 PM
> *To:* Oracle-L Freelists
> *Subject:* audit_sys_operations apparently not working
>
>
>
>
> Platform:  Windows 23k Server SP2 64bit
> Oracle: 10.2.0.4 EE
>
> I have two databases for which both audit_file_dest and
> audit_sys_operations are set.
>
>
> NAME
> VALUE                                              VAL? MOD? MOD?
> -------------------------
> -------------------------------------------------- ---- ---- ----
> audit_file_dest
> D:\ORACLE\ORCL\102\RDBMS\AUDIT                     Y    N    D
> audit_sys_operations
> TRUE                                               N    N    N
> audit_trail
> DB                                                 N    N    N
>
> 3 rows selected.
>
>
> Yet I don't find any audit files in audit_file_dest.
>
> Obvious possible problems:
>   permissions - Local System user runs the Oracle service, and has full
> control of the directory
>   full file system - it is not full, 40G free
>
> Even without audit_sys_operations=true, audit logs showing logons by
> SYS/SYSDBA should
> appear in the audit_file_dest directory.
>
> Checking a linux 10.2.0.4 database, I find that it works as expected.
>
> Before OYASR (Opening Yet Another Service Request) I thought it would be a
> good
> idea to ask here first.  For low priority issues, Oracle-L is usually
> faster. :)
>
> So, is there something I am missing, or is it just broke on Windows?
>
> I did search MetaLink^H^H^H^H^H^H^H^HMy Oracle Support, but didn't find
> anything useful.
>
> Jared Still
> Certifiable Oracle DBA and Part Time Perl Evangelist
>

Other related posts: