Skip to Main Content

Database Software

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Interested in getting your voice heard by members of the Developer Marketing team at Oracle? Check out this post for AppDev or this post for AI focus group information.

No audit in sys.aud$

AmiWJun 8 2016 — edited Jun 10 2016

Oracle 11.2.0.4

I am new to Oracle and was reading Oracle documentation- Auditing Database Activity. Planning to do some auditing.

Did some testing in my dev environment:

1. Changed audit_trail

SQL> show parameter audit_trail

NAME                                 TYPE        VALUE

------------------------------------ ----------- ------------------------------

audit_trail                          string      DB, EXTENDED

SQL>

2. Got to page 7-6 and was excited to see undoaud.sql and secconf.sql

I ran noaudit all; , noaudit all privileges; , noaudit exempt access policy;

3. Then I ran just the following to turn audit on:

Audit alter any table by access;

Audit create any table by access;

Audit drop any table by access;

Audit Create any procedure by access;

Audit Drop any procedure by access;

Audit Alter any procedure by access;

Audit Grant any privilege by access;

Audit grant any object privilege by access;

Audit grant any role by access;

Audit create external job by access;

Audit create any job by access;

Audit create any library by access;

Audit create public database link by access;

Audit alter user by access;

Audit create user by access;

Audit create session whenever not successful;

Audit drop user by access;

Audit alter database by access;

Audit alter system by access;

Audit alter profile by access;

Audit drop profile by access;

Issue:

Now when I create and drop table; I'm not getting a record in sys.aud$. (Audit create any table by access; and Audit drop any table by access;)

I know audit is on because when I intentionally try log in with incorrect password, a record is created in sys.aud$ (Audit create session whenever not successful;)

Question

What am I doing wrong / missing?

Thank you.

This post has been answered by Vlad Visan-Oracle on Jun 9 2016
Jump to Answer
Comments
Locked Post
New comments cannot be posted to this locked post.
Post Details
Locked on Jul 8 2016
Added on Jun 8 2016
7 comments
4,107 views