Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: Stopping Oracle's Event Logging in Win2000

Re: Stopping Oracle's Event Logging in Win2000

From: Niall Litchfield <n-litchfield_at_audit-commission.gov.uk>
Date: Mon, 13 Jan 2003 09:08:30 -0000
Message-ID: <3e22820f$0$245$ed9e5944@reading.news.pipex.net>


"Pete Sharman" <peter.sharman_at_oracle.com> wrote in message news:avprjm0efl_at_drn.newsguy.com...
> In article <PzGT9.20728$jM5.56917_at_newsfeeds.bigpond.com>, "Howard says...
> >
> >[to continue!]
> >
> >Regardless of the fact that
> >
> >audit_sys_operations is FALSE
> >audit_trail is NONE
> >transaction_auditing is FALSE
> >
> >So, no, I don't know how to stop it recording to the event log either.
> >
> >Regards
> >HJR
> >
>
> I believe this is the same as the audit files located under
> $ORACLE_HOME/rdbms/audit (typing from memory so the directory might be
wrong).
> Any connection as SYS (which is what "/ as sysdba" basically does) is
logged.
> The logging cannot be turned off.

The docs suggest that AUDIT_SYS_OPERATIONS=FALSE will turn off logging of connections under the sys account. (Which I guess is why Howard mentions the value he has). Strictly it says (9.2) " value of FALSE, which is the default, disables SYS auditing." however it goes on to refer to auditing in terms of auditing SQL statements issued by such connections eg ALTER SYSTEM FLUSH SHARED POOL; By observation For each startup I get 11 entries in the event log. These are

1 auditing the CONNECT action
1 auditing the STARTUP action
1 to initialize the SGA
1 for each process that starts as part of startup (LGWR,DBWR,PMON,SMON,CKPT,RECO,CJQ0,QMN0) Because I had to look them up it may interest others that the last two processes are for the Job Queue and Advanced Queueing.

So all we appear to be doing is noting process startup success/failure and auditing connects and STARTUP/SHUTDOWN and we end up with 11 events. Obviously ina production system I wouldn't expect to see many of these events but in a test/home environement... Well put it this way I have 300 Oracle messages in my event log.(all of which were ignored until yesterday.)

--
Niall Litchfield
Oracle DBA
Audit Commission UK
*****************************************
Please include version and platform
and SQL where applicable
It makes life easier and increases the
likelihood of a good answer

******************************************
Received on Mon Jan 13 2003 - 03:08:30 CST

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US