Hello,
I apologize up front for my inability to grasp the new unified auditing in 12c, but I will say that I've spent a few hours reading through several documents trying to understand it.
First objective was to fine a way to see similar views with data as the "dba_audit_session" view shows. Logon time, logoff time, return code, username, terminal, etc.
But it seems that in 12c, those views are not populated, even though the documents say by default we are running in a mixed mode of the old auditing, as well as the new Unified Auditing.
Problem is that aud$ has no records, and dba_audit_session has no records.
I confirmed audit_trail is set to DB (as it is by default), yet no records in the old audit views.
select VALUE from V$OPTION where PARAMETER='Unified Auditing';
VALUE
----------
FALSE
So, I checked the unified_audit_trail view (or table) and it shows a few thousand records.
So, I guess my first question is if in 12c now, the DBA_AUDIT views are no longer populated?
and if so, are their similar views we can use that are based on the unified_audit_trail table/view.
Or, do we have to create all of our own personalized audit policies for what we want, and then create our own views?
This seems like a step backwards and I'm assuming I am missing something.