A Query Has Generated Multiple Audit Records. Is This Expected ? (Doc ID 2064300.1)

Last updated on OCTOBER 12, 2016

Applies to:

Oracle Database - Enterprise Edition - Version 9.2.0.1 to 12.1.0.2 [Release 9.2 to 12.1]
Information in this document applies to any platform.

Symptoms

You have configured database auditing using Standard Auditing and observe that a query has generated many similar audit records in the view dba_audit_trail. At first glance, these audit records appear to be identical.

For example:

SQL> connect / as sysdba
SQL> grant connect, dba to mark identified by mark;
SQL> AUDIT SELECT TABLE BY MARK BY ACCESS ;

SQL> connect mark/mark
SQL> select username, account_status from dba_users;

SQL> connect / as sysdba
SQL> column username format a15
SQL> column sql_text format a50
SQL> select USERNAME,  SQL_TEXT, to_char(timestamp, 'DD/MM/RRRR HH:MI') from dba_audit_trail where username='MARK' and sql_text like 'select username%';

USERNAME     SQL_TEXT                                                                  TO_CHAR(TIMESTAM
--------------- -------------------------------------------------------           -----------------------
MARK            select username, account_status from dba_users     08/10/2015 01:15
MARK            select username, account_status from dba_users     08/10/2015 01:15
MARK            select username, account_status from dba_users     08/10/2015 01:15
MARK            select username, account_status from dba_users     08/10/2015 01:15
MARK            select username, account_status from dba_users     08/10/2015 01:15
MARK            select username, account_status from dba_users     08/10/2015 01:15
MARK            select username, account_status from dba_users     08/10/2015 01:15
MARK            select username, account_status from dba_users     08/10/2015 01:15
MARK            select username, account_status from dba_users     08/10/2015 01:15

9 rows selected.

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms