Re: Auditing "alter session" - is it possible?
From: ddf <oratune_at_msn.com>
Date: Thu, 17 May 2012 13:16:03 -0700 (PDT)
Message-ID: <3a3536b6-f382-4140-b032-d59f39032235_at_t2g2000pbl.googlegroups.com>
On May 15, 6:59 am, "Phill W." <p-.-a-.-w-a-r..._at_-o-p-e-n-.-a-c-.-u-k> wrote:
> Greetings All;
>
> Is it possible to audit the "alter session" statement?
>
> I /think/ I've turned auditing on (to both file and database table) and
> have asked the database to audit the "alter session" privilege but
> nothing turns up in the trace or audit logs.
>
> I'm running a mix of 11.1.0.7.0 and 11.2.0.1.0 databases and OEM
> 11.1.0.1.0.
>
> The little I've found on the web /hints/ that this doesn't actually work
> and never produces any log output, but I thought a direct question (to
> Them What Knows) might elicit a more direct answer.
>
> TIA,
> Phill W.
Date: Thu, 17 May 2012 13:16:03 -0700 (PDT)
Message-ID: <3a3536b6-f382-4140-b032-d59f39032235_at_t2g2000pbl.googlegroups.com>
On May 15, 6:59 am, "Phill W." <p-.-a-.-w-a-r..._at_-o-p-e-n-.-a-c-.-u-k> wrote:
> Greetings All;
>
> Is it possible to audit the "alter session" statement?
>
> I /think/ I've turned auditing on (to both file and database table) and
> have asked the database to audit the "alter session" privilege but
> nothing turns up in the trace or audit logs.
>
> I'm running a mix of 11.1.0.7.0 and 11.2.0.1.0 databases and OEM
> 11.1.0.1.0.
>
> The little I've found on the web /hints/ that this doesn't actually work
> and never produces any log output, but I thought a direct question (to
> Them What Knows) might elicit a more direct answer.
>
> TIA,
> Phill W.
It appears to work n 11.2.0.3 as I get records for ALTER SESSION in DBA_AUDIT_TRAIL:
wombat_wally BING smelba smelba 17-MAY-12 104 SYSTEM AUDIT ALTER SESSION
(it is a somewhat abbreviated version of the complete record).
David Fitzjarrell Received on Thu May 17 2012 - 15:16:03 CDT