0 Replies Latest reply: Oct 25, 2010 12:32 PM by user12052956 RSS

    difference between audit at 10.2  to 11.2

    user12052956
      I have 10g system with audit, where I see only failure LOGON/LOGOFF.
      on the 11.2 I see also DBA users with Success LOGON/ LOGOFF (except for sys user)

      in both I have :
      AUDIT SESSION WHENEVER NOT SUCCESSFUL

      in the 10g I have in addition
      AUDIT SESSION BY SYSTEM WHENEVER SUCCESSFUL

      I do not want the success DBA logon/logoff to exist in the 11.2 version.
      where should I look ?

      this is my audit config :
      AUDIT SESSION WHENEVER NOT SUCCESSFUL
      AUDIT CREATE USER BY ACCESS
      AUDIT NOT EXISTS BY ACCESS
      AUDIT DROP TABLESPACE
      AUDIT DROP USER
      AUDIT DROP ROLLBACK SEGMENT
      AUDIT DROP ANY TABLE
      AUDIT DROP ANY CLUSTER
      AUDIT DROP ANY INDEX
      AUDIT DROP ANY SYNONYM
      AUDIT DROP PUBLIC SYNONYM
      AUDIT DROP ANY VIEW
      AUDIT DROP ANY SEQUENCE
      AUDIT DROP PUBLIC DATABASE LINK
      AUDIT DROP ANY ROLE
      AUDIT DROP ANY PROCEDURE
      AUDIT DROP ANY TRIGGER
      AUDIT DROP PROFILE
      AUDIT DROP ANY SNAPSHOT
      AUDIT DROP ANY DIRECTORY
      AUDIT DROP ANY TYPE
      AUDIT DROP ANY LIBRARY
      AUDIT DROP ANY DIMENSION
      AUDIT DROP ANY OUTLINE BY ACCESS
      AUDIT TABLE BY ACCESS
      NOAUDIT CREATE TABLE
      NOAUDIT DELETE TABLE
      NOAUDIT COMMENT TABLE

      AUDIT INSERT, UPDATE, DELETE ON SYS.AUD$ BY ACCESS

      btw: in both systems I have parameter
      audit_sys_operations TRUE


      Thanx
      Nir

      Edited by: user12052956 on Oct 25, 2010 10:31 AM