Hi everyone,
Environment:
11gR2 11.2.0.3.0
Win Server 2008R2 Ent
I am curious about why only one logon action of SYS is recorded in DBA_AUDIT_TRAIL in my DB. Further logon/logoff is not recorded(Simply use SQLPLUS to logon/logoff). I have the below settings:
SQL> show parameter audit
NAME TYPE VALUE
------------------------------------ ----------- ------------------------------
audit_sys_operations boolean TRUE
audit_trail string DB
SQL> SELECT * FROM DBA_PRIV_AUDIT_OPTS WHERE PRIVILEGE = 'CREATE SESSION';
USER_NAME PROXY_NAME PRIVILEGE SUCCESS FAILURE
------------------------------ ------------------------------ ---------------------------------------- ---------- ----------
CREATE SESSION BY ACCESS BY ACCESS
I used the below SQL to check.
SELECT * FROM DBA_AUDIT_TRAIL
WHERE USERNAME = 'SYS';
Anyone has any idea ?
Thank You