Thanks, I seem to recall that now. It would be much easier to use in a file IMO. Jared Still Certifiable Oracle DBA and Part Time Perl Evangelist On Wed, Mar 18, 2009 at 5:41 PM, Chandra Pabba <Chandra_Pabba@xxxxxxxxxxx>wrote: > Jared, > > > > On windows, the audit trace information is written to Event Viewer. See if > you can find the audit traces written to Event viewer. > > > > HTH > > > > Thanks > Chandra > > > > > > *From:* oracle-l-bounce@xxxxxxxxxxxxx [mailto: > oracle-l-bounce@xxxxxxxxxxxxx] *On Behalf Of *Jared Still > *Sent:* Wednesday, March 18, 2009 5:29 PM > *To:* Oracle-L Freelists > *Subject:* audit_sys_operations apparently not working > > > > > Platform: Windows 23k Server SP2 64bit > Oracle: 10.2.0.4 EE > > I have two databases for which both audit_file_dest and > audit_sys_operations are set. > > > NAME > VALUE VAL? MOD? MOD? > ------------------------- > -------------------------------------------------- ---- ---- ---- > audit_file_dest > D:\ORACLE\ORCL\102\RDBMS\AUDIT Y N D > audit_sys_operations > TRUE N N N > audit_trail > DB N N N > > 3 rows selected. > > > Yet I don't find any audit files in audit_file_dest. > > Obvious possible problems: > permissions - Local System user runs the Oracle service, and has full > control of the directory > full file system - it is not full, 40G free > > Even without audit_sys_operations=true, audit logs showing logons by > SYS/SYSDBA should > appear in the audit_file_dest directory. > > Checking a linux 10.2.0.4 database, I find that it works as expected. > > Before OYASR (Opening Yet Another Service Request) I thought it would be a > good > idea to ask here first. For low priority issues, Oracle-L is usually > faster. :) > > So, is there something I am missing, or is it just broke on Windows? > > I did search MetaLink^H^H^H^H^H^H^H^HMy Oracle Support, but didn't find > anything useful. > > Jared Still > Certifiable Oracle DBA and Part Time Perl Evangelist >