11g: Audit Session Not Recording Any Logoff By Cleanup Actions In SYS.AUD$
(Doc ID 1087380.1)
Last updated on AUGUST 04, 2018
Applies to:Oracle Database - Enterprise Edition - Version 126.96.36.199 to 188.8.131.52 [Release 11.1 to 11.2]
Information in this document applies to any platform.
Checked for relevance on 08-APR-2013
In 10g with session auditing turned on, when a sqlplus session was closed abruptly, it would record a log-off in the DBA_AUDIT_TRAIL view with an action of Logoff by Cleanup (102). It would also record various session statistics like logoff_time, logoff_lread etc.
In 11g these 'logoff by cleanup' audit records are not logged in DBA_AUDIT_TRAIL. The connection record remains as 'logon' record. It is not updated to 'logoff by cleanup'. In these cases, the log off information like logoff_time, logoff_lread etc are written to an OS audit file as 'logoff by cleanup' audit record.
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!