This discussion is archived
0 Replies Latest reply: Oct 25, 2010 10:32 AM by user12052956 RSS

difference between audit at 10.2  to 11.2

user12052956 Newbie
Currently Being Moderated
I have 10g system with audit, where I see only failure LOGON/LOGOFF.
on the 11.2 I see also DBA users with Success LOGON/ LOGOFF (except for sys user)

in both I have :
AUDIT SESSION WHENEVER NOT SUCCESSFUL

in the 10g I have in addition
AUDIT SESSION BY SYSTEM WHENEVER SUCCESSFUL

I do not want the success DBA logon/logoff to exist in the 11.2 version.
where should I look ?

this is my audit config :
AUDIT SESSION WHENEVER NOT SUCCESSFUL
AUDIT CREATE USER BY ACCESS
AUDIT NOT EXISTS BY ACCESS
AUDIT DROP TABLESPACE
AUDIT DROP USER
AUDIT DROP ROLLBACK SEGMENT
AUDIT DROP ANY TABLE
AUDIT DROP ANY CLUSTER
AUDIT DROP ANY INDEX
AUDIT DROP ANY SYNONYM
AUDIT DROP PUBLIC SYNONYM
AUDIT DROP ANY VIEW
AUDIT DROP ANY SEQUENCE
AUDIT DROP PUBLIC DATABASE LINK
AUDIT DROP ANY ROLE
AUDIT DROP ANY PROCEDURE
AUDIT DROP ANY TRIGGER
AUDIT DROP PROFILE
AUDIT DROP ANY SNAPSHOT
AUDIT DROP ANY DIRECTORY
AUDIT DROP ANY TYPE
AUDIT DROP ANY LIBRARY
AUDIT DROP ANY DIMENSION
AUDIT DROP ANY OUTLINE BY ACCESS
AUDIT TABLE BY ACCESS
NOAUDIT CREATE TABLE
NOAUDIT DELETE TABLE
NOAUDIT COMMENT TABLE

AUDIT INSERT, UPDATE, DELETE ON SYS.AUD$ BY ACCESS

btw: in both systems I have parameter
audit_sys_operations TRUE


Thanx
Nir

Edited by: user12052956 on Oct 25, 2010 10:31 AM

Legend

  • Correct Answers - 10 points
  • Helpful Answers - 5 points