OS Audit trail - Page 2
DBAsupport.com Forums - Powered by vBulletin
Page 2 of 2 FirstFirst 12
Results 11 to 17 of 17

Thread: OS Audit trail

  1. #11
    Join Date
    Jun 2002
    Location
    Longmont, Colorado
    Posts
    174

    What?

    what your saw is exactly what pando is referring to
    I can see that database startup is audited to the OS. But Pando also stated that the OS audit record would include whether Auditing was disabled or enabled at database startup.


    So Again, I repeat...

    Where in the audit record (as I previously listed) does it indicate whether Auditing was enabled OR disabled at database startup???

  2. #12
    Join Date
    Aug 2000
    Location
    Jolo, Sulu
    Posts
    639
    ur confuzing me

  3. #13
    Join Date
    Jun 2002
    Location
    Longmont, Colorado
    Posts
    174
    I can see and read the OS audit file that Oracle produces.

    What I am asking is.....

    WITHIN THE OS AUDIT FILE...where does it say whether database auditing was turned on OR off during database startup???

    Again, here's an example of an entry in the OS Audit file:

    ....
    Wed Jan 5 12:34:24 2005
    ACTION : 'STARTUP'
    DATABASE USER: '/'
    PRIVILEGE : SYSDBA
    CLIENT USER: jsmith
    CLIENT TERMINAL: Not Available
    STATUS: 0
    ...

    Where in this entry does it say that database auditing is enabled OR disabled?????

    From what I can see, it DOES NOT indicate the state of database auditing. Pando seems to be referencing an Oracle document that I am trying to validate.

    Is my question more clear now?

  4. #14
    Join Date
    Aug 2000
    Location
    Jolo, Sulu
    Posts
    639
    AFAMKIC, the fact that the OS file got some messages written, it
    shows that auditing is active. If you set AUDIT_TRAIL=OS you will
    see a lot more messages depending on what objects you have audited.

  5. #15
    Join Date
    Jun 2002
    Location
    Longmont, Colorado
    Posts
    174
    NO, I believe that assumption wrong.

    Oracle says regardless of whether database auditing is on or off, an OS audit file will always by generated upon server startup or shutdowns. REGARDLESS!

    As a matter of fact, I have turned of database auditing (AUDIT_TRAIL=NONE) and an OS audit file continues to be generated whenever I login as sysdba. At this point, it only audits that I logged in as sysdba, and nothing else, but nonetheless, it audits even with database auditing off.

    So again, the question remains unanswered....

    "Where in thr OS audit trail does it state whether database auditing was on or off on startup???"

  6. #16
    Join Date
    Sep 2002
    Location
    England
    Posts
    7,333
    that os file is nothing to do with database auditing, so why should it say whether normal auditing is turned on or off?

  7. #17
    Join Date
    Jun 2002
    Location
    Longmont, Colorado
    Posts
    174
    The Oracle Document titled, Oracle9i Database Administrator's Guide Release 2 (9.2), Part Number A96521-01, says that it does. See the following link for the exact text:
    http://www.stanford.edu/dept/itss/do...udit.htm#13370

    if you read the text, it DOES make sence as to why you would want to have the OS audit file determine is database auditing is ON or OFF.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  



Click Here to Expand Forum to Full Width