Include user account id in audit file after performing su - oracle command
Hello,
On my Oracle 11g/12c Linux environment, I have set the AUDIT_SYS_OPERATIONS parameter to TRUE and the AUDIT_TRAIL parameter to XML, EXTENDED in order to get a detailed activity log for DBA users.
All these users initially connect to the database server through their personal ID account (X123456 for example) and then run a su - oracle to perform administration commands.
The whoiam command returns oracle and the who am i command returns the personal ID account, but obviously the client user in the audit file is always oracle; so is there a way to include this personal ID account information in the audit file?