My Oracle Support Banner

Format Of OS Audit Files Changes Starting with 10.2.0.4 and 11.1.0.7 (Doc ID 731782.1)

Last updated on FEBRUARY 03, 2019

Applies to:

Oracle Server - Enterprise Edition - Version: 10.2.0.4
Information in this document applies to any platform.

Goal

After the upgrade to 10.2.0.4/11.1.0.7, the format of the audit log files changes. The length
of each row data is displayed between brackets:

The audit created automatically for a SYSDBA connection is now:

Tue Aug 12 12:37:43 2008
LENGTH : '137'  <---- note this new LENTGH record
ACTION :[7] 'CONNECT' <---- note that each record displays as well the length of the actual data
DATABASE USER:[1] '/'
PRIVILEGE :[6] 'SYSDBA'
CLIENT USER:[6] 'oracle'
CLIENT TERMINAL:[5] 'pts/1'
STATUS:[1] '0'

Previously, this data did not exist: 

Tue Aug 12 12:38:28 2008
ACTION : 'CONNECT'
DATABASE USER: '/'
PRIVILEGE : SYSDBA
CLIENT USER: oracle
CLIENT TERMINAL: pts/1
STATUS: 0

As seen, there are two main differences:
1. a new LENGTH record.
2. each line has the length of the actual data between brackets, eg: ACTION :[7] 'CONNECT'




Solution

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
  Goal
  Solution
  References

This document is being delivered to you via Oracle Support's Rapid Visibility (RaV) process, and therefore has not been subject to an independent technical review.

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.