Home » RDBMS Server » Server Administration » Oracle 11g event log file is full
Oracle 11g event log file is full [message #411266] Thu, 02 July 2009 22:40 Go to next message
rajabaskar
Messages: 13
Registered: June 2007
Location: chennai
Junior Member
Hi ,

I got below error while connecting the oracle database.

Enter user-name: sys as sysdba
Enter password:

ERROR:
ORA-28056: Writing audit records to Windows Event Log failed
OSD-00048: additional error information
O/S-Error: (OS 1502) The event log file is full.


DB Version : 11.1.0.7
O/s : Windows Xp (32 bit)

Please help me..

Best Regards
Rajabaskar Thangaraj



Re: Oracle 11g event log file is full [message #411269 is a reply to message #411266] Thu, 02 July 2009 22:51 Go to previous messageGo to next message
ebrian
Messages: 2794
Registered: April 2006
Senior Member
Free some space on the volume where the event log is located, purge some records out of the Windows Event viewer or change the properties of the log to a larger size and/or overwrite events.

[Updated on: Thu, 02 July 2009 22:53]

Report message to a moderator

Re: Oracle 11g event log file is full [message #411270 is a reply to message #411269] Thu, 02 July 2009 23:00 Go to previous messageGo to next message
rajabaskar
Messages: 13
Registered: June 2007
Location: chennai
Junior Member
Enough space in C drive..

In same pc, i am able to connect the oracle 10g database.

While i am connecting oracle 11g database, i have faced this issue.

BR
Rajabaskar
Re: Oracle 11g event log file is full [message #411273 is a reply to message #411270] Thu, 02 July 2009 23:06 Go to previous messageGo to next message
Michel Cadot
Messages: 68716
Registered: March 2007
Location: Saint-Maur, France, https...
Senior Member
Account Moderator
Quote:
purge some records out of the Windows Event viewer change the properties of the log to a larger size and/or overwrite events.

Did you do that?

Regards
Michel
Re: Oracle 11g event log file is full [message #411274 is a reply to message #411266] Thu, 02 July 2009 23:08 Go to previous messageGo to next message
animesh_nz19
Messages: 7
Registered: July 2009
Junior Member
This is because the AUDITING is enabled in the database.
Set AUDIT_TRAIL=NONE and then try to start database.

If you want AUDIT to be enabled, then check with your OS admin on why Oracle is not able to write to event log.

In windows when audit_trail=OS is set all the audit entries are logged in eventviewer.

You can also change audit_trail=db so that audit entries are recorded in SYS.AUD$ table. << This will also solve your problem.
Re: Oracle 11g event log file is full [message #411276 is a reply to message #411274] Thu, 02 July 2009 23:12 Go to previous messageGo to next message
ebrian
Messages: 2794
Registered: April 2006
Senior Member
animesh_nz19 wrote on Fri, 03 July 2009 00:08

You can also change audit_trail=db so that audit entries are recorded in SYS.AUD$ table. << This will also solve your problem.

No it won't since auditing to the Event Viewer is unavoidable on Windows.
Re: Oracle 11g event log file is full [message #411279 is a reply to message #411276] Thu, 02 July 2009 23:20 Go to previous messageGo to next message
rajabaskar
Messages: 13
Registered: June 2007
Location: chennai
Junior Member
I have purged old log files and increased maximum log file size.
Now able to connect.

Thanks all.

Why it happen only for 11g database?


Best Regards
Rajabaskar
Re: Oracle 11g event log file is full [message #411284 is a reply to message #411276] Thu, 02 July 2009 23:35 Go to previous messageGo to next message
animesh_nz19
Messages: 7
Registered: July 2009
Junior Member
Hi Ebrian,

Auditing in windows in the external file is unavoidable in windows.
You can always set audit_trail=db and direct the auditing to the database sys.aud$ table.

To Rajbaskar :
Why this haapened in 11G, because auditing was enabled and that was causing the audit records to write in event viewer... check the audit_trail in both 10G and 11G.

Regards,
Animesh
Re: Oracle 11g event log file is full [message #411285 is a reply to message #411284] Thu, 02 July 2009 23:42 Go to previous messageGo to next message
ebrian
Messages: 2794
Registered: April 2006
Senior Member
animesh_nz19 wrote on Fri, 03 July 2009 00:35

Auditing in windows in the external file is unavoidable in windows.


That sounds vaguely familiar ?
ebrian wrote on Fri, 03 July 2009 00:12

No it won't since auditing to the Event Viewer is unavoidable on Windows.


animesh_nz19 wrote on Fri, 03 July 2009 00:35

You can always set audit_trail=db and direct the auditing to the database sys.aud$ table.


How is setting the audit_trail to db going to help the OP if the audit location is 100% already?
Re: Oracle 11g event log file is full [message #411287 is a reply to message #411266] Thu, 02 July 2009 23:52 Go to previous messageGo to next message
animesh_nz19
Messages: 7
Registered: July 2009
Junior Member
AUDIT_TRAIL enables or disables database auditing.

Values:
* none Disables database auditing.
* os Enables database auditing and directs all audit records to the operating system's audit trail.
* db Enables database auditing and directs all audit records to the database audit trail (the SYS.AUD$ table).
*db,extended Enables database auditing and directs all audit records to the database audit trail (the SYS.AUD$ table). In addition, populates the SQLBIND and SQLTEXT CLOB columns of the SYS.AUD$ table.
*xml Enables database auditing and writes all audit records to XML format OS files.
*xml,extended Enables database auditing and prints all columns of the audit trail, including SqlText and SqlBind values.

-------------------------
I apologize for not putting my points correctly, I meant that when you set the AUDIT_TRAIL=OS in windows all the audit entries will be logged in event viewer whereas in UNIX you can direct the audit entires to the OS file also.


How setting the audit_trail=OS will help solving the issue, problem is writing a audit record in event viewer.. once we set audit_trail=OS the audit records will be directed to the database sys.aud$ table.
Re: Oracle 11g event log file is full [message #411288 is a reply to message #411287] Thu, 02 July 2009 23:56 Go to previous messageGo to next message
ebrian
Messages: 2794
Registered: April 2006
Senior Member
animesh_nz19 wrote on Fri, 03 July 2009 00:52
once we set audit_trail=OS the audit records will be directed to the database sys.aud$ table.

I assume you meant audit_trail=DB. Nevertheless, you are missing the point that this wouldn't help the OP in resolving his situation with a 100% full event log.

[Updated on: Thu, 02 July 2009 23:56]

Report message to a moderator

Re: Oracle 11g event log file is full [message #411289 is a reply to message #411288] Fri, 03 July 2009 00:05 Go to previous messageGo to next message
animesh_nz19
Messages: 7
Registered: July 2009
Junior Member
Ooops..
Yes I meant audit_trail=DB.

I suggested the above solution as I thought he might not want audit...

But ya the correct answer was to purge the records...
Re: Oracle 11g event log file is full [message #437799 is a reply to message #411266] Wed, 06 January 2010 01:44 Go to previous message
Adain
Messages: 1
Registered: January 2010
Location: canada
Junior Member
Thanks for the suggestions
Previous Topic: processes and sessions settings
Next Topic: Error when start DB
Goto Forum:
  


Current Time: Thu Nov 28 20:56:46 CST 2024