Question: What is the purpose of
the adump directory and how is it used with Oracle
audit records go to the filesystem (in UNIX) or Event Log
(in Windows), not to the database tables, even if the
parameter audit_trail is set to DB
Only the users who connected as
SYSDBA, SYSOPER are audited.
A user who has the SYSDBA
privilege, but connects normally, is not audited in this
setup. For the auditing to be triggered, the user has to
connect as SYSDBA.
The user SYS is audited. In Oracle
9i, the user SYS can connect only as SYSDBA; so there is
no possibility of user SYS connecting normally.
The location in UNIX is the filesystem specified by the
initialization parameter audit_file_dest, which
defaults to $ORACLE_HOME/rdbms/audit.
The default value is: ORACLE_BASE /
admin/ ORACLE_SID/adump. This create files with
the name xxx.aud to audit operations.
If you set audit_sys_operations=true. there is a
separate file for every session that connects as SYSDBA.
SQL> show parameter audit
----------------------- ----------- --------------
Also see my notes on
There are other ways to perform
DDL auditing with