5 Replies Latest reply: Mar 15, 2013 12:17 PM by TSharma-Oracle RSS

    AUDIT_SYS_OPERATIONS !!

    AnkitV
      Hi All

      I am using 11gR2, Win7 OS.
      I am trying to audit SYS operations, like altering some SYSTEM parameter etc by sysdba privileged user.
      show parameter audit
      
      NAME                                               TYPE        VALUE                                                                                                
      -------------------------------------------------- ----------- ---------------------------------------------------------------------------------------------------- 
      audit_file_dest                                    string        C:\ORACLE\APP\ORACLE\PRODUCT\11.2.0\ADMIN\ORCL\ADUMP                                                 
      audit_sys_operations                           boolean     TRUE                                                                                                 
      audit_trail                                           string        OS                                                                                                   
      After firing command "alter system set statistics_level=TYPICAL", no .aud file is getting generated at audit_file_dest location !!
      Am I missing something ?
        • 1. Re: AUDIT_SYS_OPERATIONS !!
          sb92075
          AnkitV wrote:
          Hi All

          I am using 11gR2, Win7 OS.
          I am trying to audit SYS operations, like altering some SYSTEM parameter etc by sysdba privileged user.
          show parameter audit
          
          NAME                                               TYPE        VALUE                                                                                                
          -------------------------------------------------- ----------- ---------------------------------------------------------------------------------------------------- 
          audit_file_dest                                    string        C:\ORACLE\APP\ORACLE\PRODUCT\11.2.0\ADMIN\ORCL\ADUMP                                                 
          audit_sys_operations                           boolean     TRUE                                                                                                 
          audit_trail                                           string        OS                                                                                                   
          After firing command "alter system set statistics_level=TYPICAL", no .aud file is getting generated at audit_file_dest location !!
          Am I missing something ?
          did you start a brand new session after the ALTER command was issued?
          • 2. Re: AUDIT_SYS_OPERATIONS !!
            Osama_Mustafa
            Which Version Of Windows 7 you use ?
            • 3. Re: AUDIT_SYS_OPERATIONS !!
              AnkitV
              Yes, I started brand new session after altering it.

              Win 7 64 bit.
              • 4. Re: AUDIT_SYS_OPERATIONS !!
                Osama_Mustafa
                audit_sys_operation will audit all activities by session connect as sysdba. Audit records are save in OS files.

                Refer
                Audit SYS User Operations (How to Audit SYSDBA) [ID 174340.1]
                • 5. Re: AUDIT_SYS_OPERATIONS !!
                  TSharma-Oracle
                  'AUDIT_FILE_DEST' is invalid on Windows, all Oracle audit trail information on Windows is recorded in the Windows event viewer.