Hi,
I have a 12c database with unified audit enabled and everything works fine, except there is a record in UNIFIED_AUDIT_TRAIL view which I can't get rid of
Has anyone experienced something like that? Any idea how to delete it?
Thanks,
Julius
SQL> select * from v$version;
BANNER CON_ID
-------------------------------------------------------------------------------- ----------
Oracle Database 12c Enterprise Edition Release 12.1.0.2.0 - 64bit Production 0
PL/SQL Release 12.1.0.2.0 - Production 0
CORE 12.1.0.2.0 Production 0
TNS for Solaris: Version 12.1.0.2.0 - Production 0
NLSRTL Version 12.1.0.2.0 - Production 0
SQL> SELECT parameter, value FROM v$option WHERE parameter = 'Unified Auditing';
PARAMETER VALUE
---------------------------------------------------------------- ----------------------------
Unified Auditing TRUE
SQL> select * from DBA_AUDIT_MGMT_LAST_ARCH_TS order by last_archive_ts;
AUDIT_TRAIL RAC_INSTANCE LAST_ARCHIVE_TS DATABASE_ID CONTAINER_GUID
-------------------- ------------ ----------------------------------- ----------- ---------------------------------
UNIFIED AUDIT TRAIL 0 14-OCT-15 12.18.29.796493 PM +00:00 1266577451 1EEADE2833DD51A4E05468B599CCF09C
STANDARD AUDIT TRAIL 0 14-OCT-15 02.07.00.374060 PM +00:00 1266577451 1EEADE2833DD51A4E05468B599CCF09C
SQL> select audit_type,event_timestamp,action_name from UNIFIED_AUDIT_TRAIL order by event_timestamp desc;
AUDIT_TYPE EVENT_TIMESTAMP ACTION_NAME
------------ -------------------- ------------------------------
Standard 14.10.15 14:18:29 EXECUTE
Standard 14.10.15 14:17:15 EXECUTE
Standard 14.10.15 14:07:00 CALL METHOD
Standard 14.10.15 14:07:00 CALL METHOD
Standard 14.10.15 14:07:00 DELETE
Standard 14.10.15 13:07:00 CALL METHOD
Standard 14.10.15 13:07:00 DELETE
Standard 14.10.15 12:42:31 EXECUTE
Standard 14.10.15 12:42:25 EXECUTE
Standard 14.10.15 12:41:30 EXECUTE
Standard 07.10.15 14:51:34 LOGOFF BY CLEANUP
11 rows selected.
SQL> exec sys.DBMS_AUDIT_MGMT.CLEAN_AUDIT_TRAIL(sys.DBMS_AUDIT_MGMT.AUDIT_TRAIL_UNIFIED, true);
PL/SQL procedure successfully completed.
SQL> select audit_type,event_timestamp,action_name from UNIFIED_AUDIT_TRAIL order by event_timestamp desc;
AUDIT_TYPE EVENT_TIMESTAMP ACTION_NAME
------------ -------------------- ------------------------------
Standard 14.10.15 14:20:26 EXECUTE
Standard 07.10.15 14:51:34 LOGOFF BY CLEANUP
SQL> exec sys.DBMS_AUDIT_MGMT.CLEAN_AUDIT_TRAIL(sys.DBMS_AUDIT_MGMT.AUDIT_TRAIL_UNIFIED,false);
PL/SQL procedure successfully completed.
SQL> select audit_type,event_timestamp,action_name from UNIFIED_AUDIT_TRAIL order by event_timestamp desc;
AUDIT_TYPE EVENT_TIMESTAMP ACTION_NAME
------------ -------------------- ------------------------------
Standard 14.10.15 14:29:35 EXECUTE
Standard 07.10.15 14:51:34 LOGOFF BY CLEANUP
SQL> exec sys.DBMS_AUDIT_MGMT.CLEAN_AUDIT_TRAIL(sys.DBMS_AUDIT_MGMT.AUDIT_TRAIL_AUD_STD, true);
PL/SQL procedure successfully completed.
SQL> select audit_type,event_timestamp,action_name from UNIFIED_AUDIT_TRAIL order by event_timestamp desc;
AUDIT_TYPE EVENT_TIMESTAMP ACTION_NAME
------------ -------------------- ------------------------------
Standard 14.10.15 14:34:15 EXECUTE
Standard 14.10.15 14:29:35 EXECUTE
Standard 07.10.15 14:51:34 LOGOFF BY CLEANUP
SQL>