AIX下配置将ORACLE数据库audit日志发送到syslog服务器

# more /etc/syslog.conf
aso.notice /var/log/aso/aso.log rotate size 1m files 8 compress
aso.info /var/log/aso/aso_process.log rotate size 1m files 8 compress
aso.debug /var/log/aso/aso_debug.log rotate size 32m files 8 compress

caa.debug /var/adm/ras/syslog.caa rotate size 10m files 10 compress
*.emerg;*.alert;*.crit;*.err;*.warning;*.notice;*.info;*.debug @1.1.1.1

# su - oracle
[YOU HAVE NEW MAIL]
$ sqlplus /nolog

SQL*Plus: Release 11.2.0.4.0 Production on Tue Jun 4 12:42:31 2019

Copyright (c) 1982, 2013, Oracle.  All rights reserved.

SQL> conn / as sysdba
Connected.
SQL> show parameter audit_trail

NAME                                 TYPE        VALUE
------------------------------------ ----------- ------------------------------
audit_trail                          string      NONE

SQL>  alter system set audit_trail=OS scope=spfile;

System altered.

SQL> alter system set audit_sys_operations=TRUE scope=spfile;

System altered.

SQL> show parameter  audit_syslog_level

NAME                                 TYPE        VALUE
------------------------------------ ----------- ------------------------------
audit_syslog_level                   string

SQL>  alter system set audit_syslog_level='local5.info' scope=spfile;

System altered.

SQL> shutdown immediate
Database closed.
Database dismounted.
ORACLE instance shut down.
SQL> startup
ORACLE instance started.

Total System Global Area 1.9241E+10 bytes
Fixed Size                  2254496 bytes
Variable Size            3288336736 bytes
Database Buffers         1.5905E+10 bytes
Redo Buffers               45666304 bytes
Database mounted.
Database opened.
SQL> quit
Disconnected from Oracle Database 11g Enterprise Edition Release 11.2.0.4.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options