Scribd Logo
Upload

Welcome to Scribd!

  • SOC OracleAuditTrailActivation

    Uploaded by

    Famara Bodian
    12 views1 page
    This document provides instructions for enabling database auditing in Oracle and configuring the audit logs to be sent to syslog. The key steps are to set the audit trail to OS, enable auditing for system users, configure the syslog facility and severity level, restart the database, edit rsyslog.conf to forward audit logs, and restart rsyslog to load the configuration.

    Original Description:

    Collect Oracle Audit Trail

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    This document provides instructions for enabling database auditing in Oracle and configuring the audit logs to be sent to syslog. The key steps are to set the audit trail to OS, enable auditing for system users, configure the syslog facility and severity level, restart the database, edit rsyslog.conf to forward audit logs, and restart rsyslog to load the configuration.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    12 views1 page

    SOC OracleAuditTrailActivation

    Uploaded by

    Famara Bodian
    This document provides instructions for enabling database auditing in Oracle and configuring the audit logs to be sent to syslog. The key steps are to set the audit trail to OS, enable auditing for system users, configure the syslog facility and severity level, restart the database, edit rsyslog.conf to forward audit logs, and restart rsyslog to load the configuration.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    of 1

    Procedure :

    1. Connect to SQLplus and log in as sysdba


    2. Set audit trail to OS :
    SQL> alter system set audit_trail=OS;
    3. Enable auditing for system users :
    SQL> alter system set audit_sys_operations=TRUE;
    4. Set rsyslog facility and severity :
    SQL> alter system set audit_syslog_level=local5.info scope=spfile sid='*';
    5. Restart database :
    SQL> shutdown immediate;
    SQL> startup;
    6. Edit syslog configuration file: /etc/rsyslog.conf
    7. Add the following line :
    local5.info @10.138.8.10
    8. Save and exit the file.
    9. type the following commands to reload the syslog configuration:
    service rsyslog status
    service rsyslog restart
    service rsyslog status

    You might also like