06:48:20 SQL> alter system set unified_audit_systemlog='local7.info' scope=spfile;
System altered.
Elapsed: 00:00:00.07
如果是rac环境,需要在多个node上都设置
[root@scaqai06adm07 log]
local7.info /var/log/vault1audit.log
如果是rac环境,需要在多个node上都重启该service
重启rsyslog service
[root@scaqai06adm07 log]
Redirecting to /bin/systemctl restart rsyslog.service
[root@scaqai06adm07 log]
Oct 21 06:37:59 scaqai06adm07 journal: Oracle Unified Audit[339117]: LENGTH: '197' TYPE:"4" DBID:"4222300165" SESID:"4236070957" CLIENTID:"" ENTRYID:"2" STMTID:"7" DBUSER:"SYS" CURUSER:"SYS" ACTION:"49" RETCODE:"0" SCHEMA:"" OBJNAME:"" PDB_GUID:"B1934BAC41113D74E0537885E50A3DD5"