Auditing for SYSTEM and SYS user
I have a requirement to turn on auditing for user SYSTEM and SYS on all DML operations (Insert, Update and Delete).
I have followed the following procedure to turn on auditing
sqlplus "/ as sysdba"
create pfile from spfile;
Added following lines in pfile
*.AUDIT_SYS_OPERATIONS=TRUE
*.audit_trail='DB'
--Checking audit paramters
select name,value from v$parameter
where name like 'audit%'
NAME VALUE
audit_sys_operations TRUE
audit_file_dest ?/rdbms/audit
audit_trail DB
SQL> shutdown immediate;
SQL> startup nomount pfile=/horacle/oracle/product/9.2.0/dbs/inithcpdev.ora
SQL> create spfile from pfile;
SQL> shutdown immediate;
SQL> startup
SQL> AUDIT UPDATE TABLE, INSERT TABLE, DELETE TABLE BY SYSTEM BY ACCESS;
I can view SYSTEM audit records in DBA_AUDIT_OBJECT but sys records are being directed to OS files.
Now is there any way to store the audit records for SYS user in database tables or generate html report on the OS file generated audit records.
To turn off the auditing , i have used the following statement
NOAUDIT UPDATE TABLE, INSERT TABLE, DELETE TABLE BY SYSTEM;
Let me know if i am doing anything wrong or inefficient way. Also, let me know how to view sys audit records in a tabular view(some view that can be used in a report)
Edited by: OraSocrates on Jul 1, 2009 4:27 AM