EM Express does't audit "Log Off" action
(Doc ID 2547697.1)
Last updated on APRIL 03, 2021
Applies to:
Oracle Database - Enterprise Edition - Version 12.1.0.2 and laterInformation in this document applies to any platform.
Symptoms
OS : Windows platform
DB : Oracle Database 12.1.0.2
When you click the "Log Out" button in EM Express, It seems there is no "LOGOFF" line in audit record.
It's easy to reproduce this symptom by the following steps.
1. Create test user for EM Express.
conn / as sysdba
grant dba to <user> identified by ***;
2. Open the EM Express URL, then "Log In" via <user> without "as sysdba" check.
eg: https://<host>:<port>/em/
3. Check the DBA_AUDIT_TRAIL view for user "TEST".
col USERNAME form a10
col TIMESTAMP form a20
col ACTION_NAME form a10
col LOGOFF_TIME form a20
col COMMENT_TEXT form a30
col PRIV_USED form a20
set lin 120 pages 999
alter session set nls_date_format='mm/dd hh24:mi:ss';
select USERNAME,TIMESTAMP,ACTION_NAME,LOGOFF_TIME,SESSIONID
from DBA_AUDIT_TRAIL
where USERNAME='<user>'
order by TIMESTAMP desc;
USERNAME TIMESTAMP ACTION_NAM LOGOFF_TIME SESSIONID
---------- -------------------- ---------- -------------------- ----------
<user> 05/27 12:25:15 LOGON <session ID>
4. Click "Log Out" button and quit EM Express.
5. Check the DBA_AUDIT_TRAIL view again, there is no "LOGOFF" in audit record.
Changes
None
Cause
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
Symptoms |
Changes |
Cause |
Solution |
References |