Skip to Main Content

Database Software

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

One audit to rule them all

meyrevivedNov 27 2018 — edited Dec 5 2018

Hi everybody!

I'm working on an12.1.0.2 oracle on linux - unified audit NOT set. I'm trying to audit everything that happens on the database, from whenever, by whoever. I see everything that sysdba does when I connect via sql*plus locally on the machine, but if I try to run any commands remotely, from any client (I tried sql*plus installed on my computer, I tried SQL Developer, and DBeaver set on Oracle) I only see the login audited - none of the queries. This happens with a regular "simple" user that I created, and with SYSTEM, a sysdba user.

Here are the settings that I ran:

  1. alter system set AUDIT_TRAIL=xml, extended scope=spfile; (though it didn't matter if I set the audit trail to 'db, extended')
  2. alter system set AUDIT_SYS_OPERATIONS = TRUE scope=spfile;
  3. restarted the database instance.
  4. Audit all;

What am I doing wrong or am missing?

Thanks a bunch!

Comments
Post Details
Added on Nov 27 2018
10 comments
612 views