audit_sys_operations apparently not working

From: Jared Still <jkstill_at_gmail.com>
Date: Wed, 18 Mar 2009 16:29:09 -0700
Message-ID: <bf46380903181629n1bc21903ld4ad63df25366fa3_at_mail.gmail.com>

Platform: Windows 23k Server SP2 64bit
Oracle: 10.2.0.4 EE

I have two databases for which both audit_file_dest and audit_sys_operations are set.

NAME                      VALUE

VAL? MOD? MOD?
------------------------- --------------------------------------------------

• ---- ---- audit_file_dest D:\ORACLE\ORCL\102\RDBMS\AUDIT Y N D audit_sys_operations TRUE N N N audit_trail DB N N N

3 rows selected.

Yet I don't find any audit files in audit_file_dest.

Obvious possible problems:
  permissions - Local System user runs the Oracle service, and has full control of the directory
  full file system - it is not full, 40G free

Even without audit_sys_operations=true, audit logs showing logons by SYS/SYSDBA should
appear in the audit_file_dest directory.

Checking a linux 10.2.0.4 database, I find that it works as expected.

Before OYASR (Opening Yet Another Service Request) I thought it would be a good
idea to ask here first. For low priority issues, Oracle-L is usually faster. :)

So, is there something I am missing, or is it just broke on Windows?

I did search MetaLink^H^H^H^H^H^H^H^HMy Oracle Support, but didn't find anything useful.

Jared Still
Certifiable Oracle DBA and Part Time Perl Evangelist

--

http://www.freelists.org/webpage/oracle-l Received on Wed Mar 18 2009 - 18:29:09 CDT