Oracle 11g event log file is full [message #411266] |
Thu, 02 July 2009 22:40 |
rajabaskar
Messages: 13 Registered: June 2007 Location: chennai
|
Junior Member |
|
|
Hi ,
I got below error while connecting the oracle database.
Enter user-name: sys as sysdba
Enter password:
ERROR:
ORA-28056: Writing audit records to Windows Event Log failed
OSD-00048: additional error information
O/S-Error: (OS 1502) The event log file is full.
DB Version : 11.1.0.7
O/s : Windows Xp (32 bit)
Please help me..
Best Regards
Rajabaskar Thangaraj
|
|
|
|
|
|
Re: Oracle 11g event log file is full [message #411274 is a reply to message #411266] |
Thu, 02 July 2009 23:08 |
animesh_nz19
Messages: 7 Registered: July 2009
|
Junior Member |
|
|
This is because the AUDITING is enabled in the database.
Set AUDIT_TRAIL=NONE and then try to start database.
If you want AUDIT to be enabled, then check with your OS admin on why Oracle is not able to write to event log.
In windows when audit_trail=OS is set all the audit entries are logged in eventviewer.
You can also change audit_trail=db so that audit entries are recorded in SYS.AUD$ table. << This will also solve your problem.
|
|
|
|
|
Re: Oracle 11g event log file is full [message #411284 is a reply to message #411276] |
Thu, 02 July 2009 23:35 |
animesh_nz19
Messages: 7 Registered: July 2009
|
Junior Member |
|
|
Hi Ebrian,
Auditing in windows in the external file is unavoidable in windows.
You can always set audit_trail=db and direct the auditing to the database sys.aud$ table.
To Rajbaskar :
Why this haapened in 11G, because auditing was enabled and that was causing the audit records to write in event viewer... check the audit_trail in both 10G and 11G.
Regards,
Animesh
|
|
|
|
Re: Oracle 11g event log file is full [message #411287 is a reply to message #411266] |
Thu, 02 July 2009 23:52 |
animesh_nz19
Messages: 7 Registered: July 2009
|
Junior Member |
|
|
AUDIT_TRAIL enables or disables database auditing.
Values:
* none Disables database auditing.
* os Enables database auditing and directs all audit records to the operating system's audit trail.
* db Enables database auditing and directs all audit records to the database audit trail (the SYS.AUD$ table).
*db,extended Enables database auditing and directs all audit records to the database audit trail (the SYS.AUD$ table). In addition, populates the SQLBIND and SQLTEXT CLOB columns of the SYS.AUD$ table.
*xml Enables database auditing and writes all audit records to XML format OS files.
*xml,extended Enables database auditing and prints all columns of the audit trail, including SqlText and SqlBind values.
-------------------------
I apologize for not putting my points correctly, I meant that when you set the AUDIT_TRAIL=OS in windows all the audit entries will be logged in event viewer whereas in UNIX you can direct the audit entires to the OS file also.
How setting the audit_trail=OS will help solving the issue, problem is writing a audit record in event viewer.. once we set audit_trail=OS the audit records will be directed to the database sys.aud$ table.
|
|
|
Re: Oracle 11g event log file is full [message #411288 is a reply to message #411287] |
Thu, 02 July 2009 23:56 |
|
ebrian
Messages: 2794 Registered: April 2006
|
Senior Member |
|
|
animesh_nz19 wrote on Fri, 03 July 2009 00:52 | once we set audit_trail=OS the audit records will be directed to the database sys.aud$ table.
|
I assume you meant audit_trail=DB. Nevertheless, you are missing the point that this wouldn't help the OP in resolving his situation with a 100% full event log.
[Updated on: Thu, 02 July 2009 23:56] Report message to a moderator
|
|
|
|
|