How To Use AVCLI To Stop And Start UNIFIED_AUDIT_TRAIL
(Doc ID 3054901.1)
Last updated on NOVEMBER 22, 2024
Applies to:
Oracle Audit Vault and Database Firewall - Version 20.4.0.0.0 and laterInformation in this document applies to any platform.
Symptoms
Unable to stop unified audit trail via AVCLI
AVCLI> LIST TRAIL FOR SECURED TARGET secured_target_name;
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
| AUDIT_TRAIL_TYPE | HOST | LOCATION | STATUS | REQUEST_STATUS | AUTO_START_STATUS | AUTOSTART_ATTEMPTS | LAST_START_TIME | ERROR_MESSAGE |
============================================================================================================================================================================================
| TABLE | host_name | UNIFIED_AUDIT_TRAIL | IDLE | | ENABLED | 0 | 2024-10-16 08:10:32.673207 GMT+13:00 | |
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
1 row(s) selected.
The command completed successfully.
AVCLI> STOP COLLECTION FOR SECURED TARGET secured_target_name USING HOST host_name FROM TABLE unified_audit_trail;
ERROR:
OAV-47503: Cannot stop trail of type "TABLE" at "unified_audit_trail" for secured target "secured_target_name"; audit trail does not exist.
Changes
Using AVCLI to stop audit collection
Cause
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
| Symptoms |
| Changes |
| Cause |
| Solution |
| Goal |