Re: Oracle Auditing with SYSLOG

We are doing it for security reasons. It is, however, next to impossible to get the kind of information I used to get from querying AUD$. I put in an enhancement request to Oracle years ago to allow auditing to both OS and DBA simultaneously. This would allow security and querying. Never heard anything back about this.

Maybe you will have better luck.

Henry

On Tue, Nov 5, 2013 at 12:44 PM, Andy Klock <andy_at_oracledepot.com> wrote:

> There is an option to persist audit records via the syslog rather than
> directly to the OS or DB. My experience with audit records has always
> been with AUD$. Very simple and useful (albeit sometimes slow) to
> find the information I need to report on.
> I can see the benefit though with locking audit info to syslog (root
> only access and no longer having to deal with purging AUD$ for
> example) but I also see that parsing information out of syslogs to be
> incredibly cumbersome.
>
> I'm interested in hearing if anybody is using syslog for auditing and
> how you are managing and dealing with the data.
>
> Thanks!
>
> Andy Klock
> --
> http://www.freelists.org/webpage/oracle-l
>
>
>

--
http://www.freelists.org/webpage/oracle-l