Hi, tearing my ever decreasing quantity of hair out here!
I am working somewhere short term with some old Oracle versions. I am experiencing this so far on versions 7.3.4, 9.2.0.8 and 10.2.0.4.
I haven't tried any other versions yet.
All of these databases are running on Solaris 5.8 for the 7.3.4 and 9i through to Solaris 5.10 for the 10g database.
I am just looking to audit logon/logoff times.
I enable auditing via AUDIT_TRAIL=DB for the 9 and 10 and AUDIT_TRAIL=TRUE for the version 7.
I restart the databases.
I issue the command
AUDIT SESSION BY ACCESS ;
I then login as another user in another session (user SCOTT)
and i see this logon record in DBA_AUDIT_SESSION
USERNAME TERMINAL TIMESTAMP ACTION_NAME
SCOTT unknkown 23-APR-15 LOGON
I then disconnect from the session and the LOGON entry disappears and all we have now is a LOGOFF entry
USERNAME TERMINAL TIMESTAMP ACTION_NAME
SCOTT unknown 23-APR-15 LOGOFF
I would expect to see both the LOGON and LOGOFF entries in the audit trail.
Obviously i have done something wrong somewhere as the same behaviour is being experienced across a number of versions.
I presume it must be my audit statement (AUDIT SESSION BY ACCESS) but the docs seem to suggest that is what i am after.
Can someone put me out of my misery?
Thanks