Few Audit Action Not In SYS.AUDIT_ACTIONS table. Audit_actions column is NULL in DBA_AUDIT_TRAIL.
Last updated on JUNE 09, 2017
Applies to:Oracle Database - Enterprise Edition - Version 220.127.116.11 to 18.104.22.168 [Release 11.1 to 12.1]
Information in this document applies to any platform.
Audit actions like 'create/alter/drop diskgroup', 'createp/sp file' or 'drop database' gets audited into aud$ with action# like 187,188,189,193,194,195,203,90.
But these action# do not have a corresponding audit action names in dba_audit_trail view.
DBA_AUDIT_TRAIL view is based on different predefined tables including AUDIT_ACTIONS.
The inbuilt table AUDIT_ACTIONS contains the mapping for ACTION against its NAME.
For the ACTION such as 187,188,189,193,194,195,203,90, the entries were missing in AUDIT_ACTIONS table, and thus DBA_AUDIT_TRAIL do not have a corresponding action name.
Sign In with your My Oracle Support account
Don't have a My Oracle Support account? Click to get started
Million Knowledge Articles and hundreds of Community platforms