Database Security Products (MOSC)

MOSC Banner

DBSAT (2.2.1) - No audit records found, but audits are activated and there are plenty of them

Oracle RDBMS 10.2.0.5.12 (latest PSU) - Linux x64

dbsat release 2.2.1 (May 2020, Reporter version f3a1)

Hi,

Some time (months) ago we activated traditional auditing in a instance (audit_trail=xml,extended) and under the audit folder location (and also thru v$xml_audit_trail), there are plenty of records.

But dbsat shows (see below) that there are no records generated, so it marks the item as high risk. I've run dbsat without problems or errors, as the oracle uid, and via a sysdba connection. Other auditing-related sections of the report shows the audited items activated (as expected) .

from the source of sat_collector.sql I see:

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center