The timestamps on records captured by Oracle Audit Vault 12.1.1.3 do not reflect actual time of session events on monitored database servers. The Oracle Audit Vault server is an out of the box Oracle Linux installation on a virtual machine, installed by Oracle Premium Services. How can we change their configuratoin to reflect the preferred time from our NTP server? Our /etc/ntp.conf file on the Oracle Audit Vault currently shows:
# Permit time synchronization with our time source, but do not
# permit the source to query or modify the service on this system.
restrict default kod nomodify notrap nopeer noquery
# Permit all access over the loopback interface. This could
# be tightened as well, but to do so would affect some of
# the administrative functions.
restrict 127.0.0.1
# NTP Servers.
# Undisciplined Local Clock. This is a fake driver intended for backup
# and when no outside source of synchronized time is available.
server 127.127.1.0 # local clock
fudge 127.127.1.0 stratum 10
# Drift file. Put this in a directory which the daemon can write to.
# No symbolic links allowed, either, since the daemon updates the file
# by creating a temporary in the same directory and then rename()'ing
# it to the file.
driftfile /var/lib/ntp/drift
# Key file containing the keys and key identifiers used when operating
# with symmetric key cryptography.
keys /etc/ntp/keys