My Oracle Support Banner

Missing Audit Infomation In The Unified Audit Trail Records Sent To SYSLOG (Doc ID 2520613.1)

Last updated on FEBRUARY 20, 2020

Applies to:

Oracle Database - Enterprise Edition - Version 19.1.0.0.0 and later
Information in this document applies to any platform.

Goal

 The following fields are NOT recorded in syslog of Unified Audit Trail:
- OS_USERNAME
- USERHOST
- TERMINAL
- SYSTEM_PRIVILEGE_USED
- SQL_TEXT
- SQL_BINDS

 

We are about to evaluate the Integration of Unified Audit Trail Records to Syslog during our Oracle 19c Beta Tests.
This Syslog integration of Unified Auditing (UA) is described in the Oracle 19c Online Documentation under
https://docs.oracle.com/en/database/oracle/oracle-database/19/dbseg/administering-the-audit-trail.html#GUID-662AA54B-D878-4B78-94D3-733256B3F37C

In this document it is mentioned that only a small portion of UA Trail Fields
(in total 13) of the Unified Audit Trail (columns) is written to the Syslog!
=> Table 26-1 Audit Record Field Names for SYSLOG and the Windows Event Viewer

Solution

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Goal
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.