Home » RDBMS Server » Security » audit issue (11.2.0.1 windows)
audit issue [message #521058] Fri, 26 August 2011 02:33 Go to next message
andy huang
Messages: 498
Registered: July 2011
Senior Member
Dear all,
I have set the parameter audit_trail to DB,and found the table SYS.AUD$ has record much infomation about login,how can i do not record the info?

login info:
Authenticated by: DATABASE; Client address: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1928))
Re: audit issue [message #521060 is a reply to message #521058] Fri, 26 August 2011 02:56 Go to previous messageGo to next message
Michel Cadot
Messages: 68624
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
You cannot.
Either you have no information, either you have all information.

Regards
Michel
Re: audit issue [message #521064 is a reply to message #521060] Fri, 26 August 2011 03:26 Go to previous messageGo to next message
andy huang
Messages: 498
Registered: July 2011
Senior Member
hi,
Other issue: I set the audit_trail to OS,but i can not find any record file in directory D:\ORACLE\ADMIN\ORCL\ADUMP.why?


SQL> show parameters AUDIT;

NAME                                 TYPE        VALUE
------------------------------------ ----------- ------------------------------
audit_file_dest                      string      D:\ORACLE\ADMIN\ORCL\ADUMP
audit_sys_operations                 boolean     TRUE
audit_trail                          string      OS
SQL>
Re: audit issue [message #521066 is a reply to message #521064] Fri, 26 August 2011 03:30 Go to previous messageGo to next message
Michel Cadot
Messages: 68624
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
I don't know.
Maybe you do nothing that is audited.
Or maybe the directory is not accessible to Oracle.
Or maybe something else.

Regards
Michel
Re: audit issue [message #521068 is a reply to message #521066] Fri, 26 August 2011 03:41 Go to previous messageGo to next message
andy huang
Messages: 498
Registered: July 2011
Senior Member
hi,
i have audit select on hxl.tb_hxl_id,and open other session using user hxl to execute select * from tb_hxl_id. the operation can records if the audit_trail set to OS.

Quote:
maybe the directory is not accessible to Oracle.


how to check oracle can access the directoty D:\ORACLE\ADMIN\ORCL\ADUMP?

Re: audit issue [message #521069 is a reply to message #521068] Fri, 26 August 2011 03:42 Go to previous messageGo to next message
andy huang
Messages: 498
Registered: July 2011
Senior Member
os:windows xp
db version:11.2.0.1
Re: audit issue [message #521070 is a reply to message #521068] Fri, 26 August 2011 03:43 Go to previous messageGo to next message
Michel Cadot
Messages: 68624
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Use UTL_FILE and try to create and write a file into this directory.

Regards
Michel
Re: audit issue [message #521072 is a reply to message #521070] Fri, 26 August 2011 03:52 Go to previous messageGo to next message
andy huang
Messages: 498
Registered: July 2011
Senior Member
hi,
The directory D:\ORACLE\ADMIN\ORCL\ADUMP is created when install oracle,and can accessed by default.
Re: audit issue [message #521073 is a reply to message #521072] Fri, 26 August 2011 03:57 Go to previous messageGo to next message
Michel Cadot
Messages: 68624
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
If you say so, then if everything is finely installed then everything works fine.
You have to realize that we know ONLY what you post and you posted NOTHING that can help you to diagnose your issue.

Regards
Michel
Re: audit issue [message #521076 is a reply to message #521072] Fri, 26 August 2011 04:04 Go to previous messageGo to next message
andy huang
Messages: 498
Registered: July 2011
Senior Member
hi,
I can find the audit record in Windows Event Viewer,why?
Re: audit issue [message #521077 is a reply to message #521076] Fri, 26 August 2011 04:16 Go to previous messageGo to next message
Michel Cadot
Messages: 68624
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Because it is what you asked.

AUDIT_TRAIL documentation states:

Quote:
os

Enables database auditing and directs all audit records to the operating system's audit trail.


Regards
Michel
Re: audit issue [message #521078 is a reply to message #521076] Fri, 26 August 2011 04:17 Go to previous messageGo to next message
andy huang
Messages: 498
Registered: July 2011
Senior Member
hi,
Quote:
Use UTL_FILE and try to create and write a file into this directory.


I don't know how to use UTL_FILE, is there have some examples?
Re: audit issue [message #521080 is a reply to message #521078] Fri, 26 August 2011 04:22 Go to previous messageGo to next message
Michel Cadot
Messages: 68624
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
It will not be of no use for your audit issue unless you change AUDIT_TRAIL value to XML.

Regards
Michel

[Edit: typo]

[Updated on: Fri, 26 August 2011 04:34]

Report message to a moderator

Re: audit issue [message #521081 is a reply to message #521078] Fri, 26 August 2011 04:22 Go to previous messageGo to next message
cookiemonster
Messages: 13917
Registered: September 2008
Location: Rainy Manchester
Senior Member
Have you tried the documentation? It has examples.
Re: audit issue [message #521091 is a reply to message #521081] Fri, 26 August 2011 04:53 Go to previous messageGo to next message
andy huang
Messages: 498
Registered: July 2011
Senior Member
hi,
if AUDIT_TRAIL value set to XML, the directory D:\ORACLE\ADMIN\ORCL\ADUMP have record.
Re: audit issue [message #521092 is a reply to message #521091] Fri, 26 August 2011 04:56 Go to previous message
Michel Cadot
Messages: 68624
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Good! Now you tested all values and all of them work. Wink

Regards
Michel
Previous Topic: vpd implementation
Next Topic: Hiding UnApproved Data to Users
Goto Forum:
  


Current Time: Thu Mar 28 10:17:24 CDT 2024