I have enabled audit on oracle database 12.1.0.2 version with parameter audit trail- db extended.
And I have
When I query against aud$, I can see below entries
audit all;
audit session;
audit session whenever not successful;
audit alter table;
audit delete table;
audit grant table;
audit grant directory;
audit grant procedure;
audit grant sequence;
audit alter any role;
audit grant any privilege;
audit create table;
audit create user;
audit update,delete on sys.aud$ by access;
audit insert,update,delete on sys.dba_users by access;
audit insert table by system by access;
audit select table by system by access;
audit update table by system by access;
SQL> select * from audit$;
USER# PROXY# OPTION# SUCCESS FAILURE
---------- ---------- ---------- ---------- ----------
1 38 2 2
1 357 2 2
1 5 2
1 16 2 2
1 28 2 2
1 29 2 2
1 4 2 2
173 146 2 2
1 3 2 2
1 8 2 2
1 9 2 2
USER# PROXY# OPTION# SUCCESS FAILURE
---------- ---------- ---------- ---------- ----------
1 14 2 2
1 17 2 2
1 18 2 2
1 24 2 2
1 25 2 2
1 26 2 2
1 27 2 2
1 33 2 2
1 34 2 2
1 35 2 2
1 36 2 2
USER# PROXY# OPTION# SUCCESS FAILURE
---------- ---------- ---------- ---------- ----------
1 37 2 2
1 39 2 2
1 52 2 2
1 53 2 2
1 77 2 2
1 131 2 2
1 221 2 2
1 339 2 2
1 54 2 2
1 68 2 2
1 179 2 2
USER# PROXY# OPTION# SUCCESS FAILURE
---------- ---------- ---------- ---------- ----------
1 147 2 2
1 111 2 2
1 69 2 2
1 128 2 2
1 47 2 2
1 22 2 2
1 127 2 2
1 167 2 2
1 48 2 2
1 49 2 2
1 40 2 2
USER# PROXY# OPTION# SUCCESS FAILURE
---------- ---------- ---------- ---------- ----------
1 41 2 2
1 20 2 2
5 66 2 2
5 65 2 2
5 67 2 2
how I can track the audit records?
I want to verify audit is working as expected