2 Replies Latest reply: Feb 14, 2013 6:25 AM by Helios-GunesEROL RSS

    auditing all

    sonidba
      Hello to all,

      I am working on auditing in 11.2.0.1.0.

      I issued
      SQL> Audit all;

      Other auditing parameters are as follows:

      SQL> show parameter audit;

      NAME TYPE VALUE
      ------------------------------------ ----------- ------------------------------
      audit_file_dest string /u01/app/oracle/admin/orcl/adu
      mp
      audit_sys_operations boolean FALSE
      audit_syslog_level string
      audit_trail string DB

      SQL>select audit_option from ;

      AUDIT_OPTION
      ----------------------------------------
      CREATE USER
      ALTER USER
      DROP USER
      CREATE ANY TABLE
      ALTER ANY TABLE
      DROP ANY TABLE
      CREATE PUBLIC DATABASE LINK
      GRANT ANY ROLE
      ALTER DATABASE
      CREATE ANY PROCEDURE
      ALTER ANY PROCEDURE

      AUDIT_OPTION
      ----------------------------------------
      DROP ANY PROCEDURE
      ALTER PROFILE
      DROP PROFILE
      GRANT ANY PRIVILEGE
      CREATE ANY LIBRARY
      EXEMPT ACCESS POLICY
      GRANT ANY OBJECT PRIVILEGE
      CREATE ANY JOB
      CREATE EXTERNAL JOB

      I execute select statement from hr user;
      Auditing works fine. DBA_AUDIT_TRAIL displays auditing record for the action taken by hr user.

      then I issued,
      SQL> noaudit all;
      But still auditing records generated by HR. dba_stmt_audit_opts view shows that any such auditing options do not set, as I posted above. Then why auditing records are generated.

      I saw that after some time audit records are stopped generating these records that were previously generated.

      Does it mean that NOAUDIT statement do not take effect immediately?