数据库版本：11g r2
操作系统：linux as5.3
问题：我使用dbca建的库，没更改审计设置。查初始化参数：
SQL> show parameter audit
NAME
TYPEVALUE
------------------------------------ ----------- ------------------------------
audit_file_dest
string/usr/app/oracle/admin/bjhtgddb/adump
audit_sys_operations
boolean FALSE
audit_syslog_level
string
audit_trail
stringDB
从中可以看到，我使用的是db审计方式，可在 /usr/app/oracle/admin/bjhtgddb/adump目录中有大量跟踪记录。可按理不应该在里边有记录吧。为什么会产生？
文档中是这样描述的：If AUDIT_TRAIL is set to OS, the audit records are stored in the operating system’s audit system. In a Windows environment, this is the event log. In a UNIX or Linux environment, audit records are stored in a file that is specified with the AUDIT_FILE_DEST parameter.
If the AUDIT_TRAIL parameter is set to DB or DB, EXTENDED, you can review audit records in the DBA_AUDIT_TRAIL view, which is part of the SYS schema.
If AUDIT_TRAIL is set to XML or to XML,EXTENDED, the audit records are written to XML files in the directory to which the AUDIT_FILE_DEST parameter points. The V$XML_AUDIT_TRAIL view allows you to view all the XML files in this directory. |
