Skip to Main Content

Oracle Database Discussions

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Auditing for SYSTEM and SYS user

OraSocratesJul 1 2009 — edited Jul 2 2009
I have a requirement to turn on auditing for user SYSTEM and SYS on all DML operations (Insert, Update and Delete).

I have followed the following procedure to turn on auditing


sqlplus "/ as sysdba"
create pfile from spfile;

Added following lines in pfile
*.AUDIT_SYS_OPERATIONS=TRUE
*.audit_trail='DB'


--Checking audit paramters
select name,value from v$parameter
where name like 'audit%'

NAME VALUE
audit_sys_operations TRUE
audit_file_dest ?/rdbms/audit
audit_trail DB


SQL> shutdown immediate;
SQL> startup nomount pfile=/horacle/oracle/product/9.2.0/dbs/inithcpdev.ora
SQL> create spfile from pfile;
SQL> shutdown immediate;
SQL> startup
SQL> AUDIT UPDATE TABLE, INSERT TABLE, DELETE TABLE BY SYSTEM BY ACCESS;

I can view SYSTEM audit records in DBA_AUDIT_OBJECT but sys records are being directed to OS files.

Now is there any way to store the audit records for SYS user in database tables or generate html report on the OS file generated audit records.

To turn off the auditing , i have used the following statement

NOAUDIT UPDATE TABLE, INSERT TABLE, DELETE TABLE BY SYSTEM;

Let me know if i am doing anything wrong or inefficient way. Also, let me know how to view sys audit records in a tabular view(some view that can be used in a report)

Edited by: OraSocrates on Jul 1, 2009 4:27 AM
Comments
Locked Post
New comments cannot be posted to this locked post.
Post Details
Locked on Jul 30 2009
Added on Jul 1 2009
3 comments
841 views