OraFAQ Forum: Server Administration » Event Viewer Write Error

Home » RDBMS Server » Server Administration » Event Viewer Write Error (Oracle 11.2.0.4 Enteprise Edition, Windows 2003 Server)

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

Event Viewer Write Error [message #652306]

Mon, 06 June 2016 14:56

jesuisantony
Messages: 166
Registered: July 2006
Location: Chennai

Senior Member

The audit events are written to the OS. We received an error specific to event viewer on the Windows DB server. The event viewer has "Overwrite" option. However, we have received the error in spite of that. The file limit is set to 200M.

We had to do the cleanup manually. And the application team had to restart the transactions. This was raised with the application vendor by the application team. The vendor claims that this is an DB issue as the DB is generating the events. This occurs in production and occurrence of this issue is not expected by the application team.

Can you please suggest the way to get rid of this issue?

Code: [Select all] [Show/ hide]

ORA-28056: Writing audit records to Windows Event Log failed

O/S-Error: (OS 1502) The event log file is full.

Report message to a moderator

Re: Event Viewer Write Error [message #652308 is a reply to message #652306]

Mon, 06 June 2016 15:01

John Watson
Messages: 8976
Registered: January 2010
Location: Global Village

Senior Member

You need to tell your system administrators to manage the audit trail properly. you can;t blame the database for that. You might also want to ask whether there is any point in auditing - I don't think you are looking at the 200,000,000 audit records.

Report message to a moderator

Re: Event Viewer Write Error [message #652317 is a reply to message #652308]

Tue, 07 June 2016 01:45

Frank Naude
Messages: 4596
Registered: April 1998

Senior Member

Also see discussion at http://www.orafaq.com/forum/t/147256/

I wouldn't disable auditing entirely, maybe just scale it down a bit.
It's normally not necessary to audit successfully connections and all DML operations.
Look at what's being written to the log and craft a few NOAUDIT commands to counter it.

Report message to a moderator

Re: Event Viewer Write Error [message #652334 is a reply to message #652317]

Tue, 07 June 2016 08:26

jesuisantony
Messages: 166
Registered: July 2006
Location: Chennai

Senior Member

Thanks Frank & John for your inputs.

Report message to a moderator

Previous Topic:	Is it better to use DBUA for database upgrade on windows platofrm?
Next Topic:	DIAGNOSTIC PROBLEMS

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Sun May 04 20:43:25 CDT 2025