AUDIT TRAIL (12C)
Hello ,
The IT security service asks us to communicate to it each end of the month all the accesses made for oracle dba with the users: sys, system, user_dba users in a report specifying the operations of type:
Connection, create / alter objects, select, update, delete, merge, truncate ... and all administration operations.
ALTER SYSTEM SET AUDIT_TRAIL = DB, EXTENDED SCOPE = SPFILE;
audit ALL STATEMENTS by sys;
audit ALL STATEMENTS by system;
audit ALL STATEMENTS by user_dba;
But the following query brings back more information than expected, in particular the results of SELECT in the views X $, OBJ $, IND $, XXX $, ...