On Apr 9, 3:00 pm, "fitzjarr..._at_cox.net" <fitzjarr..._at_cox.net> wrote:
> On Apr 9, 1:23 pm, "GABJOS" <siky..._at_comcast.net> wrote:
>
> > Is there a way within Oracle that you can configure the type of
> > information that you want to appear in Operating System audit logs. I
> > know the audit_actions parameter lists the action codes and their
> > definitions. I see that in my audit logs only the action code appears.
> > This information is not useful because I have to refer back to the
> > definitions. I would like the definitions to appear in my audit logs.
> > Does anyone know how I can do that?
>
> You cannot. Per the Oracle documentation:
>
> "Operating System Audit Records
> The operating system audit trail is encoded, but it is decoded in data
> dictionary files and error messages.
>
> Action code describes the operation performed or attempted. The
> AUDIT_ACTIONS data dictionary table describes these codes.
>
> Privileges used describes any system privileges used to perform the
> operation. The SYSTEM_PRIVILEGE_MAP table describes all of these
> codes.
>
> Completion code describes the result of the attempted operation.
> Successful operations return a value of zero, and unsuccessful
> operations return the Oracle error code describing why the operation
> was unsuccessful."
>
> Even though the O/S audit log content cannot be modified it is
> possible to use that log as an external table and write a query to
> return the codes and the 'missing pieces' from the data dictionary
> views/tables.
>
> David Fitzjarrell
Thanks!
Received on Mon Apr 09 2007 - 14:22:41 CDT
