Re: SYSTEM Tablespace is FULL

Hi Brian,

You mention moving sys.aud$ to another tablespace, whilst this is common sense Oracle no longer support doing this as some poor customer could not recover when this had been done. I don't believe Oracle have changed advice on this as yet. There is a note on Metalink about it. The solution if it is moved is probably to switch audit off whilst recovering. Jonathan discussed the following with me some time back:

<snip>
I haven't done any tests on the theory - it was just a surmise that when the complainant was trying recovery, they needed to recover the tablespace with the aud$ table in it, but were running with audit on, so the recovery processes couldn't log themselves until after the recovery had completed.
</snip>

kind regards

Pete

>should not be in SYSTEM, and that if auditing is being done that
>SYS.AUD$ should be moved to a different tablespace, I feel that saying

-- 
Pete Finnigan
email:pete_at_petefinnigan.com
Web site: http://www.petefinnigan.com - Oracle security audit specialists
Book:Oracle security step-by-step Guide - see http://store.sans.org for details.