I am doing audit in our db.i caught all the events by the user in sys.aud$.Now the problem is i want to see the changed values in the particular update transaction.I tried with XID but its not give the proper answer at all time.I am trying v$LOGMNR_contents
I queried the v$logmnr_contents by using table_name. It shows records.
But, the sql_undo value of the column name shows streamstatus=null like this.
When I connect to sql next time,The query did not show any records. Why this mismatch? How can I find?