11g: Audit Session Not Recording Any Logoff By Cleanup Actions In SYS.AUD$
Last updated on MARCH 16, 2017
Applies to:Oracle Database - Enterprise Edition - Version 22.214.171.124 to 126.96.36.199 [Release 11.1 to 11.2]
Information in this document applies to any platform.
Checked for relevance on 08-APR-2013
In 10g with session auditing turned on, when a sqlplus session was closed abruptly, it would record a log-off in the DBA_AUDIT_TRAIL view with an action of Logoff by Cleanup (102). It would also record various session statistics like logoff_time, logoff_lread etc.
In 11g these 'logoff by cleanup' audit records are not logged in DBA_AUDIT_TRAIL. The connection record remains as 'logon' record. It is not updated to 'logoff by cleanup'. In these cases, the log off information like logoff_time, logoff_lread etc are written to an OS audit file as 'logoff by cleanup' audit record.
Sign In with your My Oracle Support account
Don't have a My Oracle Support account? Click to get started
My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms