I want to know how the audit_trail parameter works. Can I
use the audit_trail parameter for all types of auditing, or does
audit_trail work with the audit table command?
The audit_trail parameter is used to enable
system-level auditing, which is only one type of Oracle
auditing used with the
audit command. The values for the audit_trail
parameter can be any of these values:
The value of "none" disables database auditing. So if use
use AUDIT SELECT TABLE while this parameter is null then no
auditing actually will do.
• os: When
database auditing directs all audit records to the operating
system's audit trail. The audit information will be
populated in the OS file.
When audit_trail=db auditing sends all audit
records to the database audit trail. The audit information
will be populated in SYS.AUD$ table.
• db,extended (or
db_extended in 10gr2): According with db auditing
which populate information in SYS.AUD$ table. In addition,
populates the SQLBIND and SQLTEXT CLOB columns of the
xml: Enables database auditing and writes all audit
records to XML format OS files.
Enables database auditing and prints all columns of the
audit trail, including SqlText and SqlBind values and writes
all audit records to XML format OS files.
When the os, xml and xml and extended options are used
fir audit_trail, you need to set the audit_trail_dest
parameter to specify the OS file location for the audit