Schema level audit policy with unified auditing
Hi
I am using Oracle 18.4 in a RHEL7 environment.
just starting to use unified auditing and i would like to audit all SELECT, DELETE, UPDATE and INSERTS performed by certain users against one schema when performed through SQLPLUS.
So far i have this...
CREATE AUDIT POLICY sqlplus_policy ACTIONS ALL WHEN 'SYS_CONTEXT(''USERENV'', ''CLIENT_PROGRAM_NAME'') like ''sqlplus%''' EVALUATE PER STATEMENT;
but ideally i would like a policy which looks like this...
CREATE AUDIT POLICY sqlplus_policy ACTIONS ALL ON SCHEMA dev4dv070 WHEN 'SYS_CONTEXT(''USERENV'', ''CLIENT_PROGRAM_NAME'') like ''sqlplus%''' EVALUATE PER STATEMENT;
From looking at the documentation it appears i can only achieve a schema level policy if i separately list all the objects in the schema.