For example, auditing every table in the database is not practical, but auditing tables with columns that contain sensitive data, such as :,salaries, is
With both unified and fine-grained auditing, there are mechanisms you can use to design audit policies that focus on specific activities to audit
Purging the audit trail: ,You can perform purge operations for both the root and individual PDBs
Auditing is site autonomous in that a database instance audits only the statements issued by directly connected users
A local Oracle Database node cannot audit actions that take place in a remote database
The SET_AUDIT_TRAIL_PROPERTY procedure allows you to set the maximum size and/or age of the OS audit trail files. The procedure can set parameters for several purposes, but I will restrict the discussion to only those relevant to this section. A full list of the constants available can be found here. The procedure accepts three parameters.
1) AUDIT.
The SET_AUDIT_TRAIL_LOCATIONprocedure allows you to alter the location of the standard and/or fine-grained database audit trail. It does not currently allow the alteration of the OS audit trail, although the documentation suggests this may happen in future. The procedure accepts two parameters.
1) AUDIT_TRAIL_TYPE: They type of audit trail that is .
For example, if an error occurred during an INSERT statement, standard auditing can indicate the error number and the SQL that was executed
Oracle Database Vault-specific information can indicate whether this error happened because of a command rule violation or realm violation
Note that there will be two audit records with a distinct AUDIT_TYPE
Unified Auditing is the strategic Oracle Database audit framework and should be used to audit activity in Oracle Database 12
2 or greaterFor best performance results, turn ON Pure Unified Auditing after migrating your existing scripts to use unified auditing
Auditing is enabled by default, but you can control when audit records are written to disk
You can archive the traditional operating system, unified database, and traditional database audit trails
The DBMS_AUDIT_MGMT PL/SQL package can schedule automatic purge jobs, manually purge audit records, and perform other audit trail operations
Oracle database auditing has minimal impact on performance even for very high audit trail loads
For optimal performance, Oracle recommends writing database audit records to the operating system (OS) and setting larger file sizes for the OS audit files
Auditing is the monitoring and recording of configured database actions, from both database users and nondatabase users
Why Is Auditing Used? You typically use auditing to monitor user activity
You should follow best practices guidelines for auditing
What Is Unified Auditing?