RE: audit_sys_operations apparently not working

On windows, the audit trace information is written to Event Viewer. See if you can find the audit traces written to Event viewer.  

HTH   Thanks
Chandra    

From: oracle-l-bounce_at_freelists.org [mailto:oracle-l-bounce_at_freelists.org] On Behalf Of Jared Still
Sent: Wednesday, March 18, 2009 5:29 PM
To: Oracle-L Freelists
Subject: audit_sys_operations apparently not working  

Platform: Windows 23k Server SP2 64bit
Oracle: 10.2.0.4 EE

I have two databases for which both audit_file_dest and audit_sys_operations are set.

NAME                      VALUE

• ---- ---- audit_file_dest D:\ORACLE\ORCL\102\RDBMS\AUDIT Y N D audit_sys_operations TRUE N N N audit_trail DB N N N

3 rows selected.

Yet I don't find any audit files in audit_file_dest.

Obvious possible problems:
  permissions - Local System user runs the Oracle service, and has full control of the directory
  full file system - it is not full, 40G free

Even without audit_sys_operations=true, audit logs showing logons by SYS/SYSDBA should
appear in the audit_file_dest directory.

Checking a linux 10.2.0.4 database, I find that it works as expected.

Before OYASR (Opening Yet Another Service Request) I thought it would be a good
idea to ask here first. For low priority issues, Oracle-L is usually faster. :)

So, is there something I am missing, or is it just broke on Windows?

I did search MetaLink^H^H^H^H^H^H^H^HMy Oracle Support, but didn't find anything useful.

Jared Still
Certifiable Oracle DBA and Part Time Perl Evangelist

--

http://www.freelists.org/webpage/oracle-l Received on Wed Mar 18 2009 - 19:41:22 CDT