Home » RDBMS Server » Security » Syslog Audit Trail format (11)
Syslog Audit Trail format [message #535187] Mon, 12 December 2011 13:37
bvamos
Messages: 1
Registered: December 2011
Location: Hungary
Junior Member

Hi,

There are two audit trails from the same session:

<60>Dec 12 14:01:52 oraclehost Audit[4886698]: LENGTH: "156"
SESSIONID: "16854972" ENTRYID: "1" ACTION: "101" RETURNCODE: "0"
LOGOFF$PREAD: "1" LOGOFF$LREAD: "827" LOGOFF$LWRITE: "5" LOGOFF$DEAD:
"0" SESSIONCPU: "2"

<60>Dec 12 14:01:52 oraclehost Audit[4886698]: LENGTH: "315"
SESSIONID:[8] "16854972" ENTRYID:[3] "167" STATEMENT:[2] "85" USERID:[9]
"LEKERDEZO" USERHOST:[18] "DOMAIN\HOST" TERMINAL:[7] "HOST"
ACTION:[3] "103" RETURNCODE:[1] "0" OBJ$CREATOR:[3] "SYS" OBJ$NAME:[16]
"DBMS_TRANSACTION" SES$ACTIONS:[16] "------------S---" SES$TID:[4]
"4378" OS$USERID:[7] "user"

The format of the 2 entry is different.

SESSIONID: "16854972"
SESSIONID:[8] "16854972"

Does anyone know why?
I guess this is just a mistake of the programmer. Am I right?

Previous Topic: trace or audit user activity
Next Topic: moving sys table
Goto Forum:
  


Current Time: Tue Dec 17 19:53:00 CST 2024