RE: audit_sys_operations apparently not working

From: Chandra Pabba <>
Date: Wed, 18 Mar 2009 18:41:22 -0600
Message-id: <00b401c9a82b$6d04a1d0$470de570$_at_net>


On windows, the audit trace information is written to Event Viewer. See if you can find the audit traces written to Event viewer.  

HTH   Thanks

From: [] On Behalf Of Jared Still
Sent: Wednesday, March 18, 2009 5:29 PM
To: Oracle-L Freelists
Subject: audit_sys_operations apparently not working  

Platform: Windows 23k Server SP2 64bit
Oracle: EE

I have two databases for which both audit_file_dest and audit_sys_operations are set.

NAME                      VALUE

------------------------- --------------------------------------------------
  • ---- ---- audit_file_dest D:\ORACLE\ORCL\102\RDBMS\AUDIT Y N D audit_sys_operations TRUE N N N audit_trail DB N N N

3 rows selected.

Yet I don't find any audit files in audit_file_dest.

Obvious possible problems:
  permissions - Local System user runs the Oracle service, and has full control of the directory
  full file system - it is not full, 40G free

Even without audit_sys_operations=true, audit logs showing logons by SYS/SYSDBA should
appear in the audit_file_dest directory.

Checking a linux database, I find that it works as expected.

Before OYASR (Opening Yet Another Service Request) I thought it would be a good
idea to ask here first. For low priority issues, Oracle-L is usually faster. :)

So, is there something I am missing, or is it just broke on Windows?

I did search MetaLink^H^H^H^H^H^H^H^HMy Oracle Support, but didn't find anything useful.

Jared Still
Certifiable Oracle DBA and Part Time Perl Evangelist

-- Received on Wed Mar 18 2009 - 19:41:22 CDT

Original text of this message