My DB settings:
Connected to:Oracle Database 19c Enterprise Edition Release 19.0.0.0.0 - ProductionVersion 19.12.0.0.0SYS@CDBXXX1>unified_audit_common_systemlog stringunified_audit_sga_queue_size integer 1048576unified_audit_systemlog string LOCAL2.DEBUGAUDIT CONTEXT NAMESPACE userenvATTRIBUTES current_user, db_nameBY SYS;
OS Setup:
# /etc/rsyslog.d/xxxx.conflocal2.* @@xxxxx:xxx# keep a local copy for debugginglocal2.debug /var/log/oracle.log
OS/var/log/oracle.log
..Jul 28 12:34:03 HOSTNAME journal: Oracle Unified Audit[3586]: LENGTH: '204' TYPE:"4" DBID:"3089420649" SESID:"2072094948" CLIENTID:"" ENTRYID:"4" STMTID:"7" DBUSER:"SYS" CURUSER:"SYS" ACTION:"53" RETCODE:"0" SCHEMA:"" OBJNAME:"BITCOIN" PDB_GUID:"A797E1A81DB27E87E053487009B427E5"
DB:
select * from UNIFIED_AUDIT_TRAIL;...sqlplus@HOSTNAME(TNS V1-V3) 4 7 28.07.21 12:34:03,317870000 28.07.21 10:34:03,317870000 DROP USER 0 3586 07001900BD4E0000 58907432 BITCOIN drop user bitcoinBITCOIN drop user bitcoin (USERENV,CURRENT_USER=SYS); (USERENV,DB_NAME= CDBXXX1)...
The DB_NAME is shown in the colum application_context of the UNIFIED_AUDIT_TRAIL trail but not in the OS trail.
Is there a way to get the DB_NAME to the local2 os trail?