Enabling or Disabling the Standard Audit Trail
You enable the standard audit trail by setting the AUDIT_TRAIL initialization
parameter. This setting determines whether to create the audit trail in the database
audit trail, write the audit activities to an operating system file, or to disable auditing.
通过开启audit_trail参数开启审计,这个参数决定了是否以数据库记录审计轨迹、以操作系统文件记录审计内容或是关闭审计
To enable or disable the standard audit trail, log in to SQL*Plus with administrative
privileges, and use the ALTER SYSTEM statement. Afterwards, you need to restart the
database instance
使用alter system命令开启或关闭审计,之后,需要重启实例。
To check the current value of the AUDIT_TRAIL parameter, use the SHOW PARAMETER
command in SQL*Plus
Example 9–1 shows how to check the AUDIT_TRAIL parameter setting.
SHOW PARAMETER AUDIT_TRAIL
NAME TYPE VALUE
------------------------------------ ----------- -------
audit_trail string DB
Example 9–2 shows how to log onto SQL*Plus, enable the standard audit trail, and
then restart the database instance.
Example 9–2 Enabling the Standard Audit Trail
CONNECT SYSTEM
Enter password: password
ALTER SYSTEM SET AUDIT_TRAIL=DB SCOPE=SPFILE;
System altered.
CONNECT SYS/AS SYSOPER
Enter password: password
SHUTDOWN
Database closed.
Database dismounted.
ORACLE instance shut down.
STARTUP
ORACLE instance started.
This example uses the SCOPE clause because the database instance had been started
using a server parameter file (SPFILE). Starting the database with a server parameter
file is the preferred way of starting a database instance. See Oracle Database
Administrator's Guide for information about creating configuring server parameter
files.
AUDIT_TRAIL enables or disables database auditing.
Values:
■ none
Disables standard auditing. This value is the default if the AUDIT_TRAIL parameter
was not set in the initialization parameter file or if you created the database using
a method other than Database Configuration Assistant. If you created the database
using Database Configuration Assistant, then the default is db.
■ os
Directs all audit records to an operating system file. Oracle recommends that you
use the os setting, particularly if you are using an ultra-secure database
configuration.
■ db
Directs audit records to the database audit trail (the SYS.AUD$ table), except for
records that are always written to the operating system audit trail. Use this setting
for a general database for manageability.
If the database was started in read-only mode with AUDIT_TRAIL set to db, then
Oracle Database internally sets AUDIT_TRAIL to os. Check the alert log for details.
■ db, extended
Performs all actions of AUDIT_TRAIL=db, and also populates the SQL bind and SQL
text CLOB-type columns of the SYS.AUD$ table, when available. These two
columns are populated only when this parameter is specified.
If the database was started in read-only mode with AUDIT_TRAIL set to db,
extended, then Oracle Database internally sets AUDIT_TRAIL to os. Check the alert
log for details.
■ xml
Writes to the operating system audit record file in XML format. Records all
elements of the AuditRecord node except Sql_Text and Sql_Bind to the operating
system XML audit file.
■ xml, extended
Performs all actions of AUDIT_TRAIL=xml, and populates the SQL bind and SQL
text CLOB-type columns of the SYS.AUD$ table, wherever possible. These columns
are populated only when this parameter is specified.
You can use the SQL AUDIT statement to set auditing options regardless of the setting
of this parameter.
可以通过表 dba_audit_trail查看审计信息
You enable the standard audit trail by setting the AUDIT_TRAIL initialization
parameter. This setting determines whether to create the audit trail in the database
audit trail, write the audit activities to an operating system file, or to disable auditing.
To enable or disable the standard audit trail, log in to SQL*Plus with administrative
privileges, and use the ALTER SYSTEM statement. Afterwards, you need to restart the
database instance
使用alter system命令开启或关闭审计,之后,需要重启实例。
To check the current value of the AUDIT_TRAIL parameter, use the SHOW PARAMETER
command in SQL*Plus
Example 9–1 shows how to check the AUDIT_TRAIL parameter setting.
NAME TYPE VALUE
------------------------------------ ----------- -------
audit_trail string DB
Example 9–2 shows how to log onto SQL*Plus, enable the standard audit trail, and
then restart the database instance.
Example 9–2 Enabling the Standard Audit Trail
CONNECT SYSTEM
Enter password: password
ALTER SYSTEM SET AUDIT_TRAIL=DB SCOPE=SPFILE;
System altered.
CONNECT SYS/AS SYSOPER
Enter password: password
SHUTDOWN
Database closed.
Database dismounted.
ORACLE instance shut down.
STARTUP
ORACLE instance started.
This example uses the SCOPE clause because the database instance had been started
using a server parameter file (SPFILE). Starting the database with a server parameter
file is the preferred way of starting a database instance. See Oracle Database
Administrator's Guide for information about creating configuring server parameter
files.
AUDIT_TRAIL enables or disables database auditing.
Values:
■ none
Disables standard auditing. This value is the default if the AUDIT_TRAIL parameter
was not set in the initialization parameter file or if you created the database using
a method other than Database Configuration Assistant. If you created the database
using Database Configuration Assistant, then the default is db.
■ os
Directs all audit records to an operating system file. Oracle recommends that you
use the os setting, particularly if you are using an ultra-secure database
configuration.
■ db
Directs audit records to the database audit trail (the SYS.AUD$ table), except for
records that are always written to the operating system audit trail. Use this setting
for a general database for manageability.
If the database was started in read-only mode with AUDIT_TRAIL set to db, then
Oracle Database internally sets AUDIT_TRAIL to os. Check the alert log for details.
■ db, extended
Performs all actions of AUDIT_TRAIL=db, and also populates the SQL bind and SQL
text CLOB-type columns of the SYS.AUD$ table, when available. These two
columns are populated only when this parameter is specified.
If the database was started in read-only mode with AUDIT_TRAIL set to db,
extended, then Oracle Database internally sets AUDIT_TRAIL to os. Check the alert
log for details.
■ xml
Writes to the operating system audit record file in XML format. Records all
elements of the AuditRecord node except Sql_Text and Sql_Bind to the operating
system XML audit file.
■ xml, extended
Performs all actions of AUDIT_TRAIL=xml, and populates the SQL bind and SQL
text CLOB-type columns of the SYS.AUD$ table, wherever possible. These columns
are populated only when this parameter is specified.
You can use the SQL AUDIT statement to set auditing options regardless of the setting
of this parameter.
可以通过表 dba_audit_trail查看审计信息
来自 “ ITPUB博客 ” ,链接:http://blog.itpub.net/29802484/viewspace-2071918/,如需转载,请注明出处,否则将追究法律责任。
转载于:http://blog.itpub.net/29802484/viewspace-2071918/