Database Security Products (MOSC)

MOSC Banner

Multiple DBIDS in 11.2.0.3 Database Audit trail causing audit purge issue.

edited Jan 21, 2019 6:23AM in Database Security Products (MOSC) 7 commentsAnswered ✓

I have an 11.2.0.3 Oracle database that I have enabled auditing that was then migrated to a new server via RMAN duplicate.  As a result of this, a new DBID was generated and there are now multiple DBIDS in the audit trail.  Because of the multiple DBIDs, the DBMS_AUDIT_MGMT purge job will no longer clear the old records.  The auditing is the standard type (AUDIT_TRAIL=DB), with the records being stored in SYS.AUD$ table.

I have seen that in version 12, a DBID can be passed to the purge routine to purge audit records for a specific DBID, but this is not available in 11.2.0.3.  I have not been able to find a recommended solution for this issue in 11.2.0.3.  I'm assuming that the purge routine will work for the new id once the retention time is exceeded for the new DBID audit records, but that the records associated with the previous DBID will never be removed.  The other possibility is the multiple DBIDs will prevent ANY records from being deleted, which is more

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center