Where Are Standard Audit Activities
Recorded?
Oracle Database records audit activities in audit records. Audit records provide information about the
operation that was audited, the user performing the operation, and the date and time of the operation.
Audit records can be stored in either a data dictionary table, called the database audit trail, or in
operating system files, called an operating system audit trail. Oracle Database also provides a set of
data dictionary views that you can use to track suspicious activities. See Oracle Database Security
Guide for more information about these views.
When you use standard auditing, Oracle Database writes the audit records to either
to DBA_AUDIT_TRAIL (the SYS.AUD$ table), the operating system audit trail, or to
the DBA_COMMON_AUDIT_TRAIL view, which combines standard and fine-grained audit log records.
In addition, the actions performed by administrators are recorded in the syslog audit trail when
the AUDIT_SYSLOG_LEVEL initialization parameter is set.
Auditing General Activities Using Standard
Auditing
This section explains how to use standard auditing to audit activities performed on SQL statements,
privileges, schema objects, and network or multitier activities.
This section contains:
About Standard Auditing
Enabling or Disabling the Standard Audit Trail
Using Default Auditing for Security-Relevant SQL Statements and Privileges
Individually Auditing SQL Statements
Individually Auditing Privileges
Using Proxies to Audit SQL Statements and Privileges in a Multitier Environment
Individually Auditing Schema Objects
Auditing Network Activity
Using Proxies to Audit SQL Statements and Privileges in a Multitier Environment
Tutorial: Creating a Standard Audit Trail
See Also:
Oracle Database Security Guide for detailed information about managing the standard audit
trail
About Standard Auditing
In standard auditing, you enable auditing of SQL statements, privileges, schema objects, and network or
multitier activities. You can audit a specific schema table if you want. To perform this type of audit, you
use Database Control.
You can view the standard audit trail by querying
the DBA_AUDIT_TRAIL and DBA_COMMON_AUDIT_TRAIL data dictionary views.