My Oracle Support Banner

Format Of OS Audit Files Changes Starting with 10.2.0.4 and 11.1.0.7 (Doc ID 731782.1)

Last updated on MARCH 11, 2019

Applies to:

Oracle Database - Enterprise Edition - Version 10.2.0.4 and later
Information in this document applies to any platform.
Information in this document applies to any platform.

Goal

After the upgrade to 10.2.0.4/11.1.0.7, the format of the audit log files changes. The length
of each row data is displayed between brackets:

The audit created automatically for a SYSDBA connection is now:

Tue Aug 12 12:37:43 2008
LENGTH : '137'  <---- note this new LENTGH record
ACTION :[7] 'CONNECT' <---- note that each record displays as well the length of the actual data
DATABASE USER:[1] '/'
PRIVILEGE :[6] 'SYSDBA'
CLIENT USER:[6] 'oracle'
CLIENT TERMINAL:[5] 'pts/1'
STATUS:[1] '0'

Previously, this data did not exist: 

Tue Aug 12 12:38:28 2008
ACTION : 'CONNECT'
DATABASE USER: '/'
PRIVILEGE : SYSDBA
CLIENT USER: oracle
CLIENT TERMINAL: pts/1
STATUS: 0

As seen, there are two main differences:
1. a new LENGTH record.
2. each line has the length of the actual data between brackets, eg: ACTION :[7] 'CONNECT'




Solution

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Goal
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.