11g: Audit Session Not Recording Any Logoff By Cleanup Actions In SYS.AUD$ (Doc ID 1087380.1)

Last updated on MARCH 16, 2017

Applies to:

Oracle Database - Enterprise Edition - Version 11.1.0.6 to 11.2.0.1 [Release 11.1 to 11.2]
Information in this document applies to any platform.
Checked for relevance on 08-APR-2013

Goal

In 10g with session auditing turned on, when a sqlplus session was closed abruptly, it would record a log-off in the DBA_AUDIT_TRAIL view with an action of Logoff by Cleanup (102). It would also record various session statistics like logoff_time, logoff_lread etc.

In 11g these 'logoff by cleanup' audit records are not logged in DBA_AUDIT_TRAIL. The connection record remains as 'logon' record. It is not updated to 'logoff by cleanup'. In these cases, the log off information like logoff_time, logoff_lread etc are written to an OS audit file as 'logoff by cleanup' audit record.

Solution

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms