Upgrade From 12.2.0.1 To 19.8.0.0 Changed An Audit Policy From AUDIT ALL To AUDIT NONE. (Doc ID 2705860.1)

Last updated on JULY 20, 2024

Applies to:

Symptoms

In 12.2.0.1, there is audit policy with the statement:
CREATE AUDIT POLICY UNIFIED_AUDIT_TRAIL_POLICY ACTIONS ALL on SYS.UNIFIED_AUDIT_TRAIL WHEN 'UID NOT IN (&USER_ID)' EVALUATE PER STATEMENT;

After an upgrade from 12.2.0.1 to 19.8.0.0,  the policy’s audit_option changed from ALL to NONE.

12.2:
SQL> select * from audit_unified_policies where policy_name = 'UNIFIED_AUDIT_TRAIL_POLICY';

POLICY_NAME                        AUDIT_CONDITION CONDITION AUDIT_OPTION AUDIT_OPTION_TYPE OBJECT_SCHEMA OBJECT_NAME OBJECT_TYPE COM INH
------------------------------   ----------------      ---------     ------------ ------------------ --------------- ----------------------------------- ------------ --- ---
UNIFIED_AUDIT_TRAIL_POLICY UID NOT IN (287) STATEMENT ALL                  OBJECT              ACTION           SYS                          UNIFIED_AUDIT_TRAIL VIEW
           
19.8:
SQL> select * from audit_unified_policies where policy_name = 'UNIFIED_AUDIT_TRAIL_POLICY';

POLICY_NAME AUDIT_CONDITION CONDITION AUDIT_OPTION AUDIT_OPTION_TYPE OBJECT_SCHEMA OBJECT_NAME OBJECT_TYPE COM INH AUD
------------------------------ ---------------- --------- ------------ ------------------ --------------- ----------------------------------- ------------ --- --- ---
UNIFIED_AUDIT_TRAIL_POLICY UID NOT IN (295) STATEMENT NONE NONE NONE NONE NONE NO

Why did the policy’s definition change with the upgrade? What would be the best course of action to restore the policy to AUDIT ALL?

Changes

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.