Tuesday, February 23, 2010

audit_trail = 'xml,extened' + DB user audit all by access error..

We have enabled auditing for SYS user by
1- audit_file_dest string D:\ORACLE\PRODUCT\10.2.0\ADMIN\ICPORA\ADUMP
2- audit_sys_operations = TRUE
3- audit_trail = XML, EXTENDED

The sys user was being audited properly, later we wanted to audit ERP (db users). so we set auditing for erp_live user:

1-AUDIT ALL BY erp_live BY ACCESS;
2-AUDIT SELECT TABLE, UPDATE TABLE, INSERT TABLE, DELETE TABLE BY erp_live BY ACCESS;

after that we faced below issues
-The export of ERP_LIVE schema aborts, and ERP users application hangs and users complain that their sessions are automatically logging off. When I disabled auditing for ERP users, everything works fine.
later we found that there is bug in oracle 10g.2 with parameter 'xml, extended' and audit db user with by access.
To resolve the problem I disabled auditing for DB users and export and ERP application works fine, check my post at oracle forums.

http://forums.oracle.com/forums/thread.jspa?messageID=4094724&#4094724

Now our requirement is audit database users first and SYS user later.
In my next post I will write all the steps to audit db users.