Few Audit Action Not In SYS.AUDIT_ACTIONS table. Audit_actions column is NULL in DBA_AUDIT_TRAIL.

(Doc ID 2271030.1)

Last updated on JUNE 09, 2017

Applies to:

Oracle Database - Enterprise Edition - Version 11.1.0.7 to 12.1.0.2 [Release 11.1 to 12.1]
Information in this document applies to any platform.

Symptoms

Audit actions like 'create/alter/drop diskgroup', 'createp/sp file' or 'drop database' gets audited into aud$ with action# like 187,188,189,193,194,195,203,90.

But these action# do not have a corresponding audit action names in dba_audit_trail view.

DBA_AUDIT_TRAIL view is based on different predefined tables including AUDIT_ACTIONS.
The inbuilt table AUDIT_ACTIONS contains the mapping for ACTION against its NAME.

For the ACTION such as 187,188,189,193,194,195,203,90, the entries were missing in AUDIT_ACTIONS table, and thus DBA_AUDIT_TRAIL do not have a corresponding action name.

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms