Hello,
I am trying to audit every failed statement. To do that I am doing the following:
ALTER SYSTEM SET audit_file_dest='/home/oracle/audit' SCOPE = SPFILE;
ALTER SYSTEM SET audit_trail = XML, extended SCOPE = SPFILE;
shutdown immediate;
startup;
AUDIT SELECT TABLE, INSERT TABLE, DELETE TABLE, UPDATE TABLE, EXECUTE PROCEDURE BY SESSION WHENEVER NOT SUCCESSFUL;
Then I try to run one invalid statement:
INSERT INTO customer VALUES('will', 'not', 'work');
And receives as response ORA-00947: "not enough values".
When I look at V$XML_AUDIT_TRAIL I can see it is empty.
But if I alter my audit_trail to "DB_EXTENDED", restart database and execute the same failed statement I can see it's respective entry on SYS.AUD$.
Am I missing anything?
Thanks in advance!