Quantcast
Channel: Active questions tagged audit - Database Administrators Stack Exchange
Viewing all articles
Browse latest Browse all 154

How to include the oracle database name to os audit trail?

$
0
0

My DB settings:

Connected to:Oracle Database 19c Enterprise Edition Release 19.0.0.0.0 - ProductionVersion 19.12.0.0.0SYS@CDBXXX1>unified_audit_common_systemlog       stringunified_audit_sga_queue_size         integer 1048576unified_audit_systemlog              string LOCAL2.DEBUGAUDIT CONTEXT NAMESPACE userenvATTRIBUTES current_user, db_nameBY SYS;

OS Setup:

# /etc/rsyslog.d/xxxx.conflocal2.* @@xxxxx:xxx# keep a local copy for debugginglocal2.debug /var/log/oracle.log

OS/var/log/oracle.log

..Jul 28 12:34:03 HOSTNAME journal: Oracle Unified Audit[3586]: LENGTH: '204' TYPE:"4" DBID:"3089420649" SESID:"2072094948" CLIENTID:"" ENTRYID:"4" STMTID:"7" DBUSER:"SYS" CURUSER:"SYS" ACTION:"53" RETCODE:"0" SCHEMA:"" OBJNAME:"BITCOIN" PDB_GUID:"A797E1A81DB27E87E053487009B427E5"

DB:

select * from UNIFIED_AUDIT_TRAIL;...sqlplus@HOSTNAME(TNS V1-V3)              4   7   28.07.21 12:34:03,317870000 28.07.21 10:34:03,317870000 DROP USER   0   3586    07001900BD4E0000    58907432            BITCOIN drop user bitcoinBITCOIN drop user bitcoin (USERENV,CURRENT_USER=SYS); (USERENV,DB_NAME= CDBXXX1)...

The DB_NAME is shown in the colum application_context of the UNIFIED_AUDIT_TRAIL trail but not in the OS trail.

Is there a way to get the DB_NAME to the local2 os trail?


Viewing all articles
Browse latest Browse all 154

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>