Home » Infrastructure » Unix » audit_sys_operations (Oracle 11gr2, Sunsolaris..)
audit_sys_operations [message #650011] Tue, 12 April 2016 12:58 Go to next message
krish96
Messages: 74
Registered: October 2012
Member
Hello Experts,

How to setup auditlogs to one continuous file when we turn on logging for audit_sys_operations from multiple files..

Thanks in advance..
Re: audit_sys_operations [message #650012 is a reply to message #650011] Tue, 12 April 2016 13:26 Go to previous messageGo to next message
Michel Cadot
Messages: 68716
Registered: March 2007
Location: Saint-Maur, France, https...
Senior Member
Account Moderator

Set it to log into system audit log; see AUDIT_SYSLOG_LEVEL parameter.

Re: audit_sys_operations [message #650013 is a reply to message #650012] Tue, 12 April 2016 13:39 Go to previous messageGo to next message
krish96
Messages: 74
Registered: October 2012
Member
Thanks Michel,

it is already set to (audit_syslog_level string LOCAL1.WARNING)


couldn't find a option to set for filesize..
Re: audit_sys_operations [message #650014 is a reply to message #650013] Tue, 12 April 2016 13:44 Go to previous messageGo to next message
Michel Cadot
Messages: 68716
Registered: March 2007
Location: Saint-Maur, France, https...
Senior Member
Account Moderator

Sorry don't understand your reference to file size.
What have you currently?
What do you want?

Re: audit_sys_operations [message #650015 is a reply to message #650014] Tue, 12 April 2016 13:51 Go to previous messageGo to next message
krish96
Messages: 74
Registered: October 2012
Member
sorry about the confusion..


currently we are getting the files in this formats as below

-rw-r----- 1 oracle dba 526K Apr 11 22:03 ora_1123_timestamp.aud
-rw-r----- 1 oracle dba 1.4K Apr 11 22:03 ora_1125_timestamp.aud
-rw-r----- 1 oracle dba 682 Apr 11 22:03 ora_1126_timestamp.aud
-rw-r----- 1 oracle dba 1011 Apr 11 22:03 ora_1127_timestamp.aud
-rw-r----- 1 oracle dba 682 Apr 11 22:03 ora_1128_timestamp.aud
-rw-r----- 1 oracle dba 682 Apr 11 22:03 ora_1129_timestamp.aud
-rw-r----- 1 oracle dba 682 Apr 11 22:03 ora_1130_timestamp.aud

is it possible to set it create them to continuous one big file?

Re: audit_sys_operations [message #650016 is a reply to message #650015] Tue, 12 April 2016 13:54 Go to previous message
Michel Cadot
Messages: 68716
Registered: March 2007
Location: Saint-Maur, France, https...
Senior Member
Account Moderator

So you are not auditing into the system audit log, this is the "normal" auditing.
Try setting AUDIT_TRAIL to OS.
The setting may depends on your OS, so have a look at the Solaris specific documentation.

[Updated on: Tue, 12 April 2016 13:54]

Report message to a moderator

Previous Topic: Please help me in using case sensitive command
Next Topic: pattern search in unix
Goto Forum:
  


Current Time: Thu Nov 21 06:41:57 CST 2024