My Oracle Support Banner

Traditional Audit:Primary Note For Oracle Database Auditing (Doc ID 1299033.1)

Last updated on SEPTEMBER 27, 2023

Applies to:

Gen 1 Exadata Cloud at Customer (Oracle Exadata Database Cloud Machine) - Version N/A and later
Oracle Cloud Infrastructure - Database Service - Version N/A and later
Oracle Database - Enterprise Edition - Version 8.1.7.4 to 12.2.0.1 [Release 8.1.7 to 12.2]
Oracle Database Cloud Exadata Service - Version N/A and later
Oracle Database Cloud Schema Service - Version N/A and later
Information in this document applies to any platform.

Purpose

This Primary Note is intended to provide an index and references to the most frequently used My Oracle Support Notes with respect to Oracle Database Auditing. This Primary Note is subdivided into categories to allow for easy access and reference to notes that are applicable to your area of interest.

NOTE: In the images and/or the document content below, the user information and data used represents fictitious data from the Oracle sample schema(s) or Public Documentation delivered with an Oracle database product. Any similarity to actual persons, living or dead, is purely coincidental and not intended in any manner. 

Scope

This document is meant for use as a guide by those who are configuring or managing/troubleshooting Oracle Database Auditing.

Details

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Purpose
Scope
Details
 Oracle Standard Database Auditing Concepts and Overview
 What auditing will NOT provide
 Oracle Database Auditing Installation
 Oracle Database Auditing Configuration and Administration
 Enabling Standard Auditing
 Configuring what must be audited
 Auditing SQL Statements
 Auditing Privileges
 Auditing Schema Objects
 Auditing Network Activity
 Auditing SYSDBA/SYSOPER activities
 Oracle Database Auditing Performance Overhead
 Frequently Asked Questions
 How do I audit the actions executed by the proxy users on behalf of the real users?
 Why do I have so many audit records ?
 After upgrading my database much more audit records are produced. Why?
 I have declared what must be audited but the audited event produces no audit records. Why?
 I have removed the auditing categories using the NOAUDIT statement yet audit records are still produced. Why?
 Auditing was disabled and the database was restarted yet I see that many audit files are written into the audit file destination directory. Why?
 I want to declare an auditing category for all the users except one. How can I do it?
 I removed all the auditing categories using the script from Note 287436.1 yet I still have audit records created even after restarting the database. Why?
 How do I audit the "alter session set NLS_DATE_FORMAT=..." statements?
 Why do I have messages like "USER xx is being audited for all SELECTS" in the alert.log ? 
 Oracle Database Auditing HOWTOs
 Oracle Database Auditing Troubleshooting
 Auditing related parameters and views
 Scripts
 Oracle Database Auditing Best Practices
 Oracle Database Auditing Documentation
 Using My Oracle Support Effectively
References

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.