Format Of OS Audit Files Changes Starting with 10.2.0.4 and 11.1.0.7 (Doc ID 731782.1)

Last updated on NOVEMBER 04, 2015

Applies to:

Oracle Server - Enterprise Edition - Version: 10.2.0.4
Information in this document applies to any platform.

Goal

After the upgrade to 10.2.0.4/11.1.0.7, the format of the audit log files changes. The length
of each row data is displayed between brackets:

The audit created automatically for a SYSDBA connection is now:

Tue Aug 12 12:37:43 2008
LENGTH : '137'  <---- note this new LENTGH record
ACTION :[7] 'CONNECT' <---- note that each record displays as well the length of the actual data
DATABASE USER:[1] '/'
PRIVILEGE :[6] 'SYSDBA'
CLIENT USER:[6] 'oracle'
CLIENT TERMINAL:[5] 'pts/1'
STATUS:[1] '0'

Previously, this data did not exist: 

Tue Aug 12 12:38:28 2008
ACTION : 'CONNECT'
DATABASE USER: '/'
PRIVILEGE : SYSDBA
CLIENT USER: oracle
CLIENT TERMINAL: pts/1
STATUS: 0

As seen, there are two main differences:
1. a new LENGTH record.
2. each line has the length of the actual data between brackets, eg: ACTION :[7] 'CONNECT'




Solution

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms