Re: audit_trail=os
From: Nuno Souto <dbvision_at_iinet.net.au>
Date: Fri, 21 Jun 2013 20:38:07 +1000
Message-ID: <51C42D0F.9010204_at_iinet.net.au>
On 21/06/2013 4:41 AM, Jay Hostetter wrote:
> For those of you who send your audit records to the OS, what tool(s) do you
> use to mine/monitor/parse the data? I've inherited some databases that send
> it to the syslog. The data is then loaded via a custom Perl script into a
> central database. This seems like we're reinventing the wheel. I just
> wanted to see what other folks are doing (outside of using Audit Vault).
> We're running mostly 11gR2 on SUSE Linux.
>
Date: Fri, 21 Jun 2013 20:38:07 +1000
Message-ID: <51C42D0F.9010204_at_iinet.net.au>
On 21/06/2013 4:41 AM, Jay Hostetter wrote:
> For those of you who send your audit records to the OS, what tool(s) do you
> use to mine/monitor/parse the data? I've inherited some databases that send
> it to the syslog. The data is then loaded via a custom Perl script into a
> central database. This seems like we're reinventing the wheel. I just
> wanted to see what other folks are doing (outside of using Audit Vault).
> We're running mostly 11gR2 on SUSE Linux.
>
I use good old grep but I'm after specific information. My logs are also sent to an auditing company that does God only knows what with them...
-- Cheers Nuno Souto dbvision_at_iinet.net.au -- http://www.freelists.org/webpage/oracle-lReceived on Fri Jun 21 2013 - 12:38:07 CEST