OraFAQ Forum: Security » Syslog Audit Trail format

Home » RDBMS Server » Security » Syslog Audit Trail format (11)

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

Syslog Audit Trail format [message #535187]

Mon, 12 December 2011 13:37

bvamos
Messages: 1
Registered: December 2011
Location: Hungary

Junior Member

Hi,

There are two audit trails from the same session:

<60>Dec 12 14:01:52 oraclehost Audit[4886698]: LENGTH: "156"
SESSIONID: "16854972" ENTRYID: "1" ACTION: "101" RETURNCODE: "0"
LOGOFF$PREAD: "1" LOGOFF$LREAD: "827" LOGOFF$LWRITE: "5" LOGOFF$DEAD:
"0" SESSIONCPU: "2"

<60>Dec 12 14:01:52 oraclehost Audit[4886698]: LENGTH: "315"
SESSIONID:[8] "16854972" ENTRYID:[3] "167" STATEMENT:[2] "85" USERID:[9]
"LEKERDEZO" USERHOST:[18] "DOMAIN\HOST" TERMINAL:[7] "HOST"
ACTION:[3] "103" RETURNCODE:[1] "0" OBJ$CREATOR:[3] "SYS" OBJ$NAME:[16]
"DBMS_TRANSACTION" SES$ACTIONS:[16] "------------S---" SES$TID:[4]
"4378" OS$USERID:[7] "user"

The format of the 2 entry is different.

SESSIONID: "16854972"
SESSIONID:[8] "16854972"

Does anyone know why?
I guess this is just a mistake of the programmer. Am I right?

Report message to a moderator

Previous Topic:	trace or audit user activity
Next Topic:	moving sys table

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Mon May 05 11:39:07 CDT 2025