Syslog Audit Trail format [message #535187] |
Mon, 12 December 2011 13:37 |
|
bvamos
Messages: 1 Registered: December 2011 Location: Hungary
|
Junior Member |
|
|
Hi,
There are two audit trails from the same session:
<60>Dec 12 14:01:52 oraclehost Audit[4886698]: LENGTH: "156"
SESSIONID: "16854972" ENTRYID: "1" ACTION: "101" RETURNCODE: "0"
LOGOFF$PREAD: "1" LOGOFF$LREAD: "827" LOGOFF$LWRITE: "5" LOGOFF$DEAD:
"0" SESSIONCPU: "2"
<60>Dec 12 14:01:52 oraclehost Audit[4886698]: LENGTH: "315"
SESSIONID:[8] "16854972" ENTRYID:[3] "167" STATEMENT:[2] "85" USERID:[9]
"LEKERDEZO" USERHOST:[18] "DOMAIN\HOST" TERMINAL:[7] "HOST"
ACTION:[3] "103" RETURNCODE:[1] "0" OBJ$CREATOR:[3] "SYS" OBJ$NAME:[16]
"DBMS_TRANSACTION" SES$ACTIONS:[16] "------------S---" SES$TID:[4]
"4378" OS$USERID:[7] "user"
The format of the 2 entry is different.
SESSIONID: "16854972"
SESSIONID:[8] "16854972"
Does anyone know why?
I guess this is just a mistake of the programmer. Am I right?
|
|
|