Re: userhost of unified_audit_trail shown as cryptic string
From: Yong Huang <"Yong>
Date: Mon, 30 Apr 2018 15:23:23 +0000 (UTC)
Message-ID: <1041064939.2442458.1525101803289_at_mail.yahoo.com>
Date: Mon, 30 Apr 2018 15:23:23 +0000 (UTC)
Message-ID: <1041064939.2442458.1525101803289_at_mail.yahoo.com>
Thanks Stefan. The "cryptic" string turned out to be the docker container ID. It has nothing to do with Oracle's audit trail or Oracle version. It's in the machine column of v$session as well, as you suspected. And I'm told sending out the container ID as hostname is the default behavior of docker if the container's hostname is not set.
Since there's no way to "decrypt" the string, I just use one of the two ways to identify the host: Oracle audit trail (comment_text of dba_audit_trail or authentication_type of unified_audit_trail); OS level network connection (netstat -anp | grep <spid of v$process>, or lsof -p ...).
Yong Huang
--
http://www.freelists.org/webpage/oracle-l
Received on Mon Apr 30 2018 - 17:23:23 CEST