Purge of the SYS. AUD$

Similar Questions

• Audit of the SYS. AUD$ in Oracle 10g

  We have created a new 10g database and imported from our Database 9i inside scheme. One of our application teams, used to run reports on the SYS. AUD$ table in Oracle 9i.
  
  Currently in the new 10g database, they said that they get an error saying table does not exist, which is probably to do with privileges and to easily sort.
  
  However, when I checked the SYS. AUD$ table, there is no record in the table. When I then did a CHECK of PARAMETER SHOW, I got the following result

  SQL> show parameter audit
  
  NAME                                 TYPE        VALUE
  ------------------------------------ ----------- ------------------------------
  audit_file_dest                      string      /Oracle10/admin/hpmslive/adump
  audit_sys_operations                 boolean     FALSE
  audit_syslog_level                   string
  audit_trail                          string      DB

  I checked the/Oracle10/admin/hpmslive/adump directory and that it contains a lot of files .aud. So basically I think it's where audit data is going. However why he goes to the operating system, in spite of having told me clearly AUDIT_TRAIL is DB. I checked the AUDIT_FILE_DEST parameter and it is said that audit_file_dest specifies the operating system directory in which the audit trail is written when the AUDIT_TRAIL initialization parameter has extended os, xml, or xml.
  
  Considering that the AUDIT_TRAIL is set to DB, why the audit was written for the AUDIT_FILE_DEST?
  
  Concerning
  
  S diallo

  You have probably no option defined audit. Try: -.

  Select * from dba_stmt_audit_opts
  Union
  Select * from dba_priv_audit_opts;

• GoldenGate extract on sys.aud$

  Hi all

  I have a silly question, can I create a snippet to capture transactions from a SYS table?

  The plan is to create a snippet on the table of sys.aud$ for easy maintenance of the AUDIT table.

  Thank you very much

  Best regards

  KVM

  Thank you Vicky for your time...

  Best regards

  KVM

• Automatic purge of the OS check files older than 30 days

  Running Oracle 11.2.0.4. We are trying to purge audit records from the OS (.aud) in this case on an AIX system.

  By using this command:

  Start

  () dbms_audit_mgmt.create_purge_job

  audit_trail_type = > dbms_audit_mgmt.audit_trail_OS,

  audit_trail_purge_interval = > 24,

  audit_trail_purge_name = > 'OS_PURGE ',.

  use_last_arch_timestamp = > TRUE

  );

  end;

  /

  
  I managed to delete files > 30 days, you use this command to create a timestamp:

  Start

  () dbms_audit_mgmt.set_last_archive_timestamp

  audit_trail_type = > dbms_audit_mgmt.audit_trail_OS,

  last_archive_time = >

  TO_TIMESTAMP ('2015-03-14 00:00:00 ',' YYYY-MM-DD HH24:MI:SS'),

  rac_instance_number = > null

  );

  end;

  /

  The way it's Setup, I can get it to delete all files before March 14, every 24 hours, which is good for April 14, 2015. However, we must somehow this automatically.

  Is anyway either have alternative use "use_last_arch_timestamp = > false" so that it does not use a time stamp, but also does not remove everything?

  Or is it possible to automate the creation of a timestamp that would create something 30 days before?

  In addition, I apologize if I don't put this in the right place, I wasn't sure at all where I should put this.

  Please follow the link below. Automated control section purge it is well described.

  ORACLE-BASE - audit (DBMS_AUDIT_MGMT) improvements in Oracle Database 11g Release 2

• Sys.AUD$

  Hi all

  11.2.0.3

  AIX 6.1

  What data dictionary is the best to use to generate audit reports?

  1 Sys.aud$

  2 Dba_audit_trail

  3 Dba_audit_session

  Thank you very much

  zxy

  If it comes to no - EBS database, ignore the first link referenced above and the rest should be applicable.

  Thank you

  Hussein

• Delete records from sys.aud$ stored procedure

  We have a stored procedure that attempts to move the records from the table of sys.aud$ to a history table (in order to keep sys.aud$ to a more reasonable size, I guess - full disclosure, I have not written this proc). Base flow is:
  Select count (*) in the number of lines of sys.aud$
  If {(rowcount > 1000)
  copy all rows in sys.aud$ in the history table
  remove from sys.aud$
  }
  
  I says this proc used to work perfectly in a troubled past (I'm new on the client) but now has not worked for a while. When we try to compile the proc, we get the error
  "table or view does not exist", and the line is the "deletion of sys.aud$. The line "select count (*) from sys.aud$ ' seems to cause no problems, but the proc does not compile as is. If I comment out the line "remove from sys.aud$", however, the proc compiles very well.
  
  Confusingly, if I log in as the same account that owns this proc, I can run both the count (*) select from sys.aud$ AND remove clauses sys.aud$ with no complaint at all (by modifying slightly to work with 1 single record at a time, of course), but I can't seem the same to compile in a stored proc.
  
  I guess that it is related permissions? Can someone point me to the permissions of the owner needs to be able to remove from sys.aud$ in a stored procedure? Or is there something else that needs to be done here? Pointers much appreciated.
  
  Thank you.

  956928 wrote:
  We have a stored procedure that attempts to move the records from the table of sys.aud$ to a history table (in order to keep sys.aud$ to a more reasonable size, I guess - full disclosure, I have not written this proc). Base flow is:
  Select count (*) in the number of lines of sys.aud$
  If (rowcount 1000 >) {}
  copy all rows in sys.aud$ in the history table
  remove from sys.aud$
  }

  I says this proc used to work perfectly in a troubled past (I'm new on the client) but now has not worked for a while. When we try to compile the proc, we get the error
  "table or view does not exist", and the line is the "deletion of sys.aud$. The line "select count (*) from sys.aud$ ' seems to cause no problems, but the proc does not compile as is. If I comment out the line "remove from sys.aud$", however, the proc compiles very well.

  Confusingly, if I log in as the same account that owns this proc, I can run both the count (*) select from sys.aud$ AND remove clauses sys.aud$ with no complaint at all (by modifying slightly to work with 1 single record at a time, of course), but I can't seem the same to compile in a stored proc.

  I guess that it is related permissions? Can someone point me to the permissions of the owner needs to be able to remove from sys.aud$ in a stored procedure? Or is there something else that needs to be done here? Pointers much appreciated.

  Thank you.

  acquired through ROLE privileges are NOT applicable within the named PL/SQL procedures.

  GRANT DELETE ON SYS. AUD$ ;

• No line in sys.aud$

  Salvation Group
  
  I have a doupt, why no lines are inserted into the table sys.aud$, if the configuration is apparently ok. I am connected with the sys user.
  
  SQL > SELECT * FROM SYS. AUD$;
  
  no selected line
  
  SQL > see the parameter checking
  
  VALUE OF TYPE NAME
  ------------------------------------ ----------- ------------------------------
  audit_file_dest channel? / rdbms/audit
  audit_sys_operations Boolean TRUE
  AUDIT_TRAIL DB string
  transaction_auditing boolean FALSE
  
  
  Thank you very much

  Hello

  You may need to activate the option to audit by using the following statement:

  audit {statement_option|privilege_option} [by user] [by
  {session|access}] [ whenever {successful|unsuccessful}]
  

  For example, for the session of the audit:

  audit create session;
  

  After you enable the check option, you can check the setting with the following query:

  select audit_option,success,failure
  from dba_stmt_audit_opts
  union
  select privilege,success,failure
  from dba_priv_audit_opts;
  

  Hope this helps.
  Best regards
  Jean Valentine

• my air ipad storage is almost full. How do I purge of the less important items? Y at - it app to serve the music and pictures in double?

  My air ipad storage is almost full.

  How do I purge of the less important items?

  Y at - it app to serve the music and pictures in double?

  How can I keep on my ipad apps that are shared by other devices?

  First, have you checked when most of the storage used for?

  Check your storage space on your iPhone, iPad and iPod touch - Apple Support

• Error blue screen STOP: 0x0000007e. I powercycled the sys, unable to choose for sure (keys do not work when you try to select a mode) sys is trying just to go back to the blue screen. Help, please

  STOP: 0x0000007e (0xc000001d, ox8537008 0xba4c3508 0xba4c3204) and the system would not come to the top.

  Error blue screen STOP: 0x0000007e. I powercycled the sys, unable to choose for sure (keys do not work when you try to select a mode) sys is trying just to go back to the blue screen. Help, please

  Symptoms: Booted computer, loaded the raid drivers and showed at the start screen XP for half a second then to BSOD with a Stop error Code 0x0000007E - see also a lot of users (0xC0000001D, 0 x-, etc.) as well.

  Solution:

  1 boot from your Windows XP CD and start the recovery console. You may need to press F6 while RC loads in order to load the SATA drivers. you will have a prompt c:\WINDOWS to the console.

  2. type: CD $NtUninstallKB977165$ \spuninst (it's the update, I had to uninstall to get out of the boot loop, other updates can be uninstalled by changing the name of the directory to $NtUninstallKBCODE$, where KBCODE is the code KB)

  3. type: BATCH spuninst.txt

  4. type: exit

  Don't forget to configure your system to boot from the HD before resuming. I hope this helps. Saved me a lot of hassle today.

  -Tom Steele
  http://www.hawkandtom.com Tom Steele

• Need help with Vista not recognizing the .sys file

  Please help me!  I am trying to load a driver USB 2wire on Vista and it does not recognize the .sys file.  Can I convert this easily to .exe, or y at - it another way to achieve this... I am a novice at best here.  Thank you!

  Can you check it out here:

  http://support.2Wire.com/?page=view&article=545

  just to see that you found the driver for the right adapter. It turns out that there are two.

  I won't be able to respond for a while.

• Laptop does not detect the DVD drive, the .sys files deleted

  Hi I have an acer aspire laptop 4752-6861, there his factory DVD player, here are the details of the DVD player:

  --------------------------------------------------------------------------------
  SlimType DVD A DS8A5SH ATA Device
  UNKNOWN media type

  SlimType DVD to name a DS8A5SH ATA Device

  Availability during the performance/power

  Direct access to the features, removable media

  Configuration Manager User Config FALSE

  DriveIntegrity TRUE

  Media loaded FALSE

  State error

  10462 KB/S transfer rate
  --------------------------------------------------------------------------------
  NOTE: (I use speccy software for more information)
  A few days ago I had created a virtual drive but could not manage to remove it later, so I tried to delete his
  the files that were the .sys files, after deleting these files he had not yet gone, but just today, I noticed when I clicked on computer, the D:
  drive was not showing (from the DVD) IV ' e tried install and reinstallin, deactivation, activation and reboot but no luck.
  in Device Manager it gives me this error status:
  Windows cannot load the driver for this hardware device. The driver may be corrupted or missing. (Code 39)
  well I guess it has something to do with these .sys files that I deleted, I do not remember where the files were nore can
  I get back them, is possible to reinstall drivers or something, thanks in advanced for any ideas.   :)

  Hello

  This can be happen due to upper and lower case system registry settings.

  http://support.Microsoft.com/kb/894730

  http://answers.Microsoft.com/en-us/Windows/Forum/Windows_7-hardware/my-computer-cannot-detect-my-DVD-drive-in-Windows/3e232ab4-1a4c-425d-96DC-4f4dac074c60

  http://answers.Microsoft.com/en-us/Windows/Forum/Windows_7-windows_install/a-required-CDDVD-drive-device-driver-is-missing/51ecd2ed-b678-E011-9b4b-68b599b31bf5

  http://support.Microsoft.com/kb/314060

• Cannot connect the sys user remotely

  Hello

  Oracle Version: 11.2.0.4

  OS: Win Server 2008 R2

  Despite the creation of password for the file and modify the init.ora for exclusive use.

  Remote_login_passwordfile string EXCLUSIVE

  I am still unable to connect the user sys.

  869855 wrote:

  Sincere apologies, I forgot to share the error

  SQL > conn nwbackup@ucmdb as sysdba

  Enter the password:

  ERROR:

  ORA-01017: name of user and password invalid. connection refused

  P.S: Connectivity works very well with other users.

  So how about you change the password for the SYS user and try to connect again?

  Aman...

• start of 12 DB in the configuration of multithreading without knowing the sys password

  
  Hello

  I have a test of 12cR1 (12.1.0.2) oracle database in an AIX environment. I wanted to try the Unix 'multi-threading' on the machine architecture, so I did everything excpet creating the password file before you shut down the database where the init.ora file has been modified (by adding threaded_execution = TURE).

  NOW I'm stuck, because once you enable multi-threading OS authentication not working anymore.

  You must provide the password for SYS explicitly, the problem I know not the SYS password and now cannot start the database!

  any suggestion or help?

  The problem is solved by following the guide in the following link: http://www.dbi-services.com/index.php/blog/entry/multithreaded-12c-and-connect-as-sysdba

  Kind regards

• Using the SYS account

  Dear all,

  My database is Oracle 10 g on Windows platform.

  Due to certain requirements (DBAs) checks must use our accounts indivisual instead of SYS.

  I want to confirm if I assign SYSDBA, s/n, RESOURCES, CONNECT to a user it will get all the privileges that the SYS user have? I think I will be fine.

  The second condition is now, if I get all the privileges in my own account who is saying "IMRAN" than will be using the SYS account. It can be disabled?

  Thank you and best regards.

  SYS cannot be disabled.  Cannot delete SYSDBA privilege.  Any person who is granted the SYSDBA privilege and made a connection with "AS SYSDBA" actually connects under the SYS, not his named account account.

  Therefore,.

  a: I would not grant SYSDBA to named users

  b. I would lock in a safe accessible only by a manager the "oracle" account (and any other account in the OSDBA group)

  c. ask the DBA using the DBA role (or a custom, more restrictive role)

  d. to request the account 'oracle' only for STARTUP, SHUTDOWN, RESTORE/RECOVERY and patch.  (assuming backups are automated scripted jobs)

  Hemant K Collette

• use of the SYS database user

  Not a question, I can me asking, but I'm looking for a complete as a possible answer to this question:

  Where maintenance of eBS, upgrade,... is clogging, the SYS password?

  Reason for asking is: database administrator - who is not a Director of the eBS - asks if it is possible that the SYS password is maintained by DBA only, not by Apps DBA.

  For clarity; It is database SYS user, no SYSTEM.

  Thank you

  Tony

  An Apps DBA, I want access to the SYS account for various reasons:

  -Grant/revoke privileges on schema objects (esp for the customer drawings)

  -Maintain the database (change data files, storage spaces,... etc)

  Start/stop of the database

  .. etc.

  If you have two different groups on your team (Apps DBA and Core DBA) who maintain the database/application so he can take care of the above. However, if your Apps DBA are the only ones who take care of all the components of EBS, then having access to SYS is required.

  Thank you

  Hussein