Skip to Main Content
Forums

Database Software

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Interested in getting your voice heard by members of the Developer Marketing team at Oracle? Check out this post for AppDev or this post for AI focus group information.

Creating large number of audit xml files with m001 m002

hesaraAug 23 2022 — edited Aug 23 2022

Hi,
Oracle version - 19c
Os version - solaris 11.5
SQL> sho parameter audit

NAME TYPE VALUE
------------------------------------ ----------- ------------------------------
audit_file_dest string /u01/app/oracle/admin/tstswdb/
adump
audit_sys_operations boolean TRUE
audit_syslog_level string
audit_trail string XML, EXTENDED
unified_audit_common_systemlog string
unified_audit_sga_queue_size integer 1048576
unified_audit_systemlog string
SQL>

There are large number of files with m00* .
-rw-r----- 1 oracle asmadmin 217707 Aug 23 22:57 tstswdb_m003_27031_20220823225332387368998418.xml
-rw-r----- 1 oracle asmadmin 3549 Aug 23 22:57 tstswdb_ora_28569_20220823225734418698809820.xml
-rw-r----- 1 oracle asmadmin 107664 Aug 23 23:14 tstswdb_m002_27009_20220823225630697258770799.xml
-rw-r----- 1 oracle asmadmin 1017 Aug 23 23:14 tstswdb_m002_27009_20220823231434571730614100.xml
-rw-r----- 1 oracle asmadmin 1017 Aug 23 23:14 tstswdb_m002_27009_20220823231434689456187906.xml
-rw-r----- 1 oracle asmadmin 1017 Aug 23 23:14 tstswdb_m002_27009_20220823231434734898442172.xml
-rw-r----- 1 oracle asmadmin 1017 Aug 23 23:14 tstswdb_m002_27009_20220823231434832968917395.xml
-rw-r----- 1 oracle asmadmin 18177 Aug 23 23:27 tstswdb_m002_27009_20220823232731547250283299.xml
-rw-r----- 1 oracle asmadmin 71835 Aug 23 23:32 tstswdb_m000_26745_20220823230230853802469232.xml
-rw-r----- 1 oracle asmadmin 32314 Aug 23 23:32 tstswdb_ora_28949_20220823230837153391525980.xml
-rw-r----- 1 oracle asmadmin 71835 Aug 23 23:35 tstswdb_m001_26746_20220823231131072612622140.xml

---------------------------------------------------------------------------------------------------
Sample content is as follows.
cat tstswdb_m002_27009_20220823231434832968917395.xml
<?xml version="1.0" encoding="UTF-8"?>
<Audit xmlns="http://xmlns.oracle.com/oracleas/schema/dbserver_audittrail-19_1.xsd"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://xmlns.oracle.com/oracleas/schema/dbserver_audittrail-19_1.xsd">
<Version>19.1</Version>
<AuditRecord><Audit_Type>4</Audit_Type><Session_Id>0</Session_Id><StatementId>0</StatementId><EntryId>1</EntryId><Extended_Timestamp>2022-08-23T17:44:34.833334Z</Extended_Timestamp><DB_User>/</DB_User><Userhost>tstswdb19c</Userhost><OS_Process>27009</OS_Process><Terminal>UNKNOWN</Terminal><Instance_Number>0</Instance_Number><Returncode>0</Returncode><Scn>0</Scn><OSPrivilege>NONE</OSPrivilege><DBID>3282172273</DBID><Current_User>SYS</Current_User>
<Sql_Text>BEGIN
sys.prvt_hdm.auto_execute(
db_id => :bind_dbid,
inst_id => :bind_inst,
end_snap => :bind_snap,
time_left_in_secs => :bind_time);
END;</Sql_Text>
</AuditRecord>
</Audit>

I want to know what are the m00* audit files and how to disable only them.

Comments

Post Details

Added on Aug 23 2022
#database-security, #database-security-general
2 comments
435 views