Hi everybody!
I'm working on an12.1.0.2 oracle on linux - unified audit NOT set. I'm trying to audit everything that happens on the database, from whenever, by whoever. I see everything that sysdba does when I connect via sql*plus locally on the machine, but if I try to run any commands remotely, from any client (I tried sql*plus installed on my computer, I tried SQL Developer, and DBeaver set on Oracle) I only see the login audited - none of the queries. This happens with a regular "simple" user that I created, and with SYSTEM, a sysdba user.
Here are the settings that I ran:
- alter system set AUDIT_TRAIL=xml, extended scope=spfile; (though it didn't matter if I set the audit trail to 'db, extended')
- alter system set AUDIT_SYS_OPERATIONS = TRUE scope=spfile;
- restarted the database instance.
- Audit all;
What am I doing wrong or am missing?
Thanks a bunch!