Syslog Audit Trail format [message #535187] |
Mon, 12 December 2011 13:37 |
![](http://www.gravatar.com/avatar/357781bc4c46b1c346a2a7f84ab0fac9?s=64&d=mm&r=g) |
bvamos
Messages: 1 Registered: December 2011 Location: Hungary
|
Junior Member |
![bvamos@zuriel.net](/forum/theme/orafaq/images/google.png)
|
|
Hi,
There are two audit trails from the same session:
<60>Dec 12 14:01:52 oraclehost Audit[4886698]: LENGTH: "156"
SESSIONID: "16854972" ENTRYID: "1" ACTION: "101" RETURNCODE: "0"
LOGOFF$PREAD: "1" LOGOFF$LREAD: "827" LOGOFF$LWRITE: "5" LOGOFF$DEAD:
"0" SESSIONCPU: "2"
<60>Dec 12 14:01:52 oraclehost Audit[4886698]: LENGTH: "315"
SESSIONID:[8] "16854972" ENTRYID:[3] "167" STATEMENT:[2] "85" USERID:[9]
"LEKERDEZO" USERHOST:[18] "DOMAIN\HOST" TERMINAL:[7] "HOST"
ACTION:[3] "103" RETURNCODE:[1] "0" OBJ$CREATOR:[3] "SYS" OBJ$NAME:[16]
"DBMS_TRANSACTION" SES$ACTIONS:[16] "------------S---" SES$TID:[4]
"4378" OS$USERID:[7] "user"
The format of the 2 entry is different.
SESSIONID: "16854972"
SESSIONID:[8] "16854972"
Does anyone know why?
I guess this is just a mistake of the programmer. Am I right?
|
|
|