Audit setting issues

Hi All,
I am trying to set the database auditing to OS and totally confused by now.....
Following are the steps i followed -
i have set all the audit parameters -
SQL> show parameter audit
NAME TYPE VALUE
audit_file_dest string /home/oracle/oracle/product/10
.2.0.4.0/admin/unicode/audit_t
est
audit_sys_operations boolean TRUE
audit_syslog_level string LOCAL1.WARNING
audit_trail string OS
I have set the audit_file_dest for auditing, Now if i coonect as sysdba and create a user, its not getting any audit file for that -
SQL> create user tt1 identified by tt1;
User created.
bash-3.00$ pwd
/home/oracle/oracle/product/10.2.0.4.0/admin/unicode/audit_test
bash-3.00$ ls -lrt
total 0
bash-3.00$
Did i miss any parameter in setting up the sys operations' audit?
Thanks
Abhinav

I have the same problem on Windows XP Pro with Oracle 10.2.0.4, AUDIT_SYS_OPERATIONS is set to TRUE and AUDIT_FILE_DEST directory is empty but I have audit entries in Windows Event Log. Maybe you have audit entries in Linux syslog ?

Similar Messages

Images appear fine in Photoshop cs6 and cc, but print too dark, and also show too dark in Windows picture viewer. How can I correct this? Is this a Photoshop setting issue or what?

Images appear fine in Photoshop cs6 and cc, but print too dark, and also show too dark in Windows picture viewer. How can I correct this? Is this a Photoshop setting issue or what?

Ok, look at your files in Photoshop. What is the profile assigned to them? You can find this out by going to the Status bar at the bottom, clicking on the right-pointing triangle and choosing document Profile from the list.
Then in Windows, go to your Control Panel > Color Management and add sRGB (if it isn't there) and select it as your default profile.
I hope that will work.

How to check audit setting and read audit data?

I enable auditing for ase and then check information for sysaudits_xx table like:
select * from sysaudits_02 order by eventtime desc
and got same data like:
event
eventmod
spid
eventtime
sequence
suid
dbid
objid
xactid
loginname
dbname
objname
objowner
extrainfo
16
45
1
130
05/15/2014 1:49:03.353 PM
1
38
5
[NULL]
[NULL]
mylogin
mydb
[NULL]
[NULL]
; ; ; ; myhost, 192.168.1.17; ; mylogin/ase;
17
45
1
170
05/15/2014 1:49:03.320 PM
1
38
5
[NULL]
[NULL]
mylogin
mydb
[NULL]
[NULL]
; ; ; ; myhost, 192.168.1.17; ; mylogin/ase;
18
45
1
84
05/15/2014 1:49:03.283 PM
1
38
5
[NULL]
[NULL]
mylogin
mydb
[NULL]
[NULL]
; ; ; ; myhost, 192.168.1.17; ; mylogin/ase;
19
45
1
82
05/15/2014 1:49:03.243 PM
1
38
5
[NULL]
[NULL]
mylogin
mydb
[NULL]
[NULL]
; ; ; ; myhost, 192.168.1.17; ; mylogin/ase;
20
45
1
141
05/15/2014 1:49:03.210 PM
1
38
5
[NULL]
[NULL]
mylogin
mydb
[NULL]
[NULL]
; ; ; ; myhost, 192.168.1.17; ; mylogin/ase;
21
45
1
80
05/15/2014 1:49:03.170 PM
1
38
5
[NULL]
[NULL]
mylogin
mydb
[NULL]
[NULL]
; ; ; ; myhost, 192.168.1.17; ; mylogin/ase;
22
45
1
71
05/15/2014 1:49:03.133 PM
1
38
5
[NULL]
[NULL]
mylogin
mydb
[NULL]
[NULL]
; ; ; ; myhost, 192.168.1.17; ; mylogin/ase;
23
45
1
52
05/15/2014 1:49:03.096 PM
1
38
5
[NULL]
[NULL]
mylogin
mydb
[NULL]
[NULL]
; ; ; ; myhost, 192.168.1.17; ; mylogin/ase;
what kind of event monitored for with this data? how to stop monitoring on this event?
Also how to check all auditing setting is on. For example, if I turn on audit on disk like:
sp_audit "disk", "all", "all", "on"
then how to know how many auditing event is on in the future(maybe set by someone else)?

Hi Kent,
In general sp_displayaudit will show you what audit options are currently on.
The function audit_event_name will help you decode the audit event numbers.
1>
2> select audit_event_name(45)
3> go
Login
(1 row affected)

My nano Gen 6 just loses volume for no reason, one minute I hear the music the other it's gone, I have to raise the volume manually. Is it a setting issue or a defect? Thanks

My nano 6g just loses volume for no reason, one minute I hear the music the other it's gone, I have to raise the volume manually. Is it a setting issue or a defect? Thanks

If your ipod gets wet, it can cause the buttons to activate all by themselves. This can cause the volume to go up, down.
If you have a headset with buttons on the wire, check there first. Try a different set of headphones and see what the result is.
Finally, if the volume is changing a huge amount but only for certain tracks, there is an adjustment you can make on individual tracks in iTunes. Do a get info on one of the tracks doing this, then click the Options tab. Note that there is a volume adjustment slider. Make sure it is set to none.
i

When some one calls the caller ID shows the name twice as we'll as when I receive texts it shows up twice. I'm sure it's a simple setting issue. Any thoughts ???

When some one calls the caller ID shows the name twice as we'll as when I receive texts it shows up twice. I'm sure it's a simple setting issue. Any thoughts ???

have the same issue on my 9630 after upgrading to 624 version. It momentarily shows the previously callers information before showing the new caller's info.

When trying to logout, I keep getting "the application safari canceled logout" even though I am not in Safari. This only recently started happening and I'm wondering if it is a setting issue or bug. Can someone tell me what to do?

When trying to logout, I keep getting "the application safari canceled logout" even though I am not in Safari. This only recently started happening and I'm wondering if it is a setting issue or bug. Can someone tell me what to do?

You don't have to be "in" Safari for it to cancel logout.
You have several different Applications open, and any one of them may cancel logout if conditions are just right.
Quit the Applications you are no longer using and your Mac will run better and faster. And it will logout instead of cancelling.

Auditing set to "Failure" only but Success 4985 still being logged

Hello,
We've configured a domain wide policy to only audit "Failure" events in the Audit Policy.
This has successfully applied to all our servers but we're finding that Success Event IDs 4985 (The State of a Transaction has changed) are still being logged. It does seem to be only this event ID which is being logged.
I believe that this event comes under Audit Object Access, but cannot understand why these "success" events are still being logged when this audit setting is definitely set to "failure".
Thanks

Hi,
Here is my understanding: You would like to only log Failure events in Event log. However even with all Success options unchecked in Audit policy, Audit Success (event 4985) still exists in Event Viewer.
For the event 4985, it is triggered by the Transactional NTFS (TxF), when the file state is changed.
TxF is a new featured introduced in Windows 2008 / Vista, and allows file operations on an NTFS file system volume to be performed in a transaction. TxF transactions increase application reliability by protecting data integrity across failures and simplify
application development by greatly reducing the amount of error handling code.
For more information about TxF, please refer to the following web page:
http://msdn.microsoft.com/en-us/library/aa363764(v=VS.85).aspx
You can find more information about the audit events from the below articles:
Description of security events in Windows 7 and in Windows Server 2008 R2
http://support.microsoft.com/kb/977519
Advanced Security Audit Policy Settings
http://technet.microsoft.com/en-us/library/dd772712(WS.10).aspx
Specifically please check Computer Configuration - Policies - Windows Settings - Security Settings - Advanced Audit Policy Configuration - Audit Policies - Object Access: Audit File System. Test to set with only Failure is checked.
TechNet Subscriber Support in forum |If you have any feedback on our support, please contact [email protected]

GoldenGate + Auditing = Performance issue ?

Hello people,
we are running GG on Solaris for the replication part. Since we set AUDIT TRAIL = TRUE we had an increase from 5% to 30% in CPU.
Is it possible that the combination of GG + Auditing is responsible for this increase? Please note that I just change the parameter. No auditing on objects enabled.
Please for your opinions.
Thank you in advance.
Edited by: drbiloukos on 26 Ιουν 2012 3:13 μμ

drbiloukos wrote:
CPU increased immediately after seting AUDIT TRAIL and remained as such.
I do not say that the combination of GG and Audit is definetely the one to blame. I just need to know if there is an known issue, and your opinion on my suspicion.
It might be just an effect of Auditing, although Oracle claims aprox 5% of CPU overhead.
I will disable Auditing on first chance.The CPU change depends on what is being audited, and to where it is being audited (database, os file). Afaik, setting it to "true" isn't a valid value? Don't you have to specify what is to be audited (e.g., db vs. extended) and to where? (e.g., db, os file, xml, ...) By default it could have already been enabled (audit_trail=db) -- depending on your version of oracle & how the db was created (e.g, dbca). I'm not sure what the result of setting it to "true" would be...?
In theory, if enabling auditing on the target DB, then "replicat" -- as just a normal SQL client -- will increase load on the target when the volume of replication is high (just like any other sql client). If enabling auditing on the source, you have the exact same issue as the target (additional sql clients increase load) -- plus, if your audit info is written to the database, at the very least, "extract" has to parse through and ignore the audit info from the logs. (Worst case would be if your "extract" may inadvertently be picking up these records - but I don't think that will happen if logged to a "sys" table.)

Oracle 10g db character set issue

I have a database 10g with database character set western
european "WE8ISO8859P1" and we are receiving data from source
database with database character set as "UTF8" during data load
for one of the tables we receive the following error "ORA-29275:
partial multibyte character" I understand this might be due to
the fact western european character set is not a subset/superset
of UTF8 .Am i right ? What would be the way around this ?

It is certainly possible that the issue is that your database characterset is a subset of UTF8.
How are you getting the data? Are we talking about a flat file? A query over a database link? Something else?
Does the data you're getting contain characters that cannot be represented in the ISO-8859 1 character set? It is quite common to send UTF-8 encoded files even when the underlying data is representable in other 8-bit character sets (like ISO-8859 1).
What are you trying to do with the data? Are you trying to load it into a CHAR/ VARCHAR2 column? A CLOB? A BLOB? An NCHAR/ NVARCHAR2? Something else?
Justin

Language setting issue with Xcelsius 2008 - Web Service NW BI

French language is set during Xcelsius installation.
In Xcelsius, English is always set as the preference language.
With Web Service NW BI, I get text data returned in French.
English is also defined as default language in SAP BW BI .
I would like to get text data in English.
I don't get this situation when executing the same dashboard in an another PC with only english installation.
Can someone could explain to me how to solve this issue ?
Thanks in advance
Mai

Hi Sana,
You might be using Flex 3 sdk library files.
Just check in Properies of your Flex project -> Flex Build Path -> Library Path .
You might get the library files as Flex 3.*
If it is the case then change it to Flex 2.0.1 Hotfix 3.
now create a new project and compile your application and use the same swf.
Otherwise try to import any existing Flex 2 project folder with compiler flex 2 ver. then try the same swf in your xcelsius application.
Regards,
Vivek

Lost ability to move items between spaces with gestures after 10.7 download. Setting issue or glitch?

I downloaded OSX 10.7.2 like the rest of the world and besides icloud conversion issues I noticed that I could not move items (files, jpg's, etc.,) from one "Space" (desktop) to another. I've gone through all the "gesture" settings in the System prefs and there's nothing to do with it. Using the key fuctions (Control + 1, 2, 3) still allows for moving objects while you have it selected, however if you select any object with the trackpad no gestures work. Anyone else seen this issue? Is there a setting that I've missed?

I have absolutely the same problem since the last update. However I really think it is a glitch, because after stubbornly trying dragging a file while using the multi gestures I discovered the following:
• It works only if you grab the file in the moment you use the multi gesture. It’s like a cat and mice game :D, I wouldn’t say it is a workaround, but just a proof that probably they will fix it.

9i Character Set Issues

Hi All,
I have a done a search through the forums on this topic, and revealed many answers to my question, however I need some more information to help me resolve an Issue.
Here goes...
Our company has a French/Canadian client that has installed 9i with the characterset of WE8DEC. The software that we wrote and provided them with does not support this characterset, and in turn they are seeing inverted question marks in place of some characters (Usually accented characters).
Basically, I want to understand the options that our client has in terms of possible solutions.
I understand that the characterset can only be altered in the database to a superset of the current characterset, so this affords us no option in this regard.
My suggestions so far, is to create a new database and transfer the data accross, however will this actually cure the issue? Will the data transfer accross and convert into it's correct character? or will it just transfer as an inverted "?".
Would an upgrade to 10g help them? Or would the issue remain?
Is there anything that can be done on the O/S or Client level to rectify this?
All help greatly appreciated!
Thanks.

user10498503 wrote:
Hi All,
I have a done a search through the forums on this topic, and revealed many answers to my question, however I need some more information to help me resolve an Issue.
Here goes...
Our company has a French/Canadian client that has installed 9i with the characterset of WE8DEC. The software that we wrote and provided them with does not support this characterset, and in turn they are seeing inverted question marks in place of some characters (Usually accented characters).
Basically, I want to understand the options that our client has in terms of possible solutions.
I understand that the characterset can only be altered in the database to a superset of the current characterset, so this affords us no option in this regard.
My suggestions so far, is to create a new database and transfer the data accross, however will this actually cure the issue? Will the data transfer accross and convert into it's correct character? or will it just transfer as an inverted "?".Your issue has a client side component (the NLS_LANG setting already mentioned here) and a potential server side component (corrupted/invalid data in the database), depending on what happened so far.
The client side issue could lead to corrupted data in the database, and there is no way of "correcting" this automatically, even if you move to a new database using a different character set on 9i, or upgrade to 10g.
If a client that writes into the database uses a wrong NLS_LANG setting, you're potentially ending up with corrupted data in the database.
If a client that reads data from the database uses a wrong NLS_LANG setting, you're potentially ending up with corrupted data on the front end application (the typical "?" question mark).
All this has nothing to do yet if your database character set is actually capable of storing the characters you attempt to store from the client side.
So I think you first need to determine if your database contains invalid data using the "CSSCAN" utility. For more information, check the manuals and MetaLink:
http://download.oracle.com/docs/cd/B10501_01/server.920/a96529/ch11.htm
Depending on your findings you'll find the possible actions on MetaLink.
Then you should determine if your client NLS_LANG is appropriate. There is a very good FAQ available here how to check the current setting and determine the correct setting:
http://www.oracle.com/technology/tech/globalization/htdocs/nls_lang%20faq.htm
Regards,
Randolf
Oracle related stuff blog:
http://oracle-randolf.blogspot.com/
SQLTools++ for Oracle (Open source Oracle GUI for Windows):
http://www.sqltools-plusplus.org:7676/
http://sourceforge.net/projects/sqlt-pp/

German character set issues on Solaris

Hi,
I am facing an issue with German character settings with my Java application on a solaris box.
When I run my application on the box, and I pass an input file with German special characters they get converted as ?. However, other normal English characters are formed properly.
When I run the same application on another Solaris box with a different JRE, the German characters are formed properly.
I understand that there is a difference in the archiecture between the 2 boxes ie.e
64 bit SPARC machine v/s 32 bit x86 machine
the JRE
1.4.2_03(64bit) v/s 1.4.1_01
I am tryinbg to evaludate further differences between the 2 environments to pinpoint the issue, and get this resolved on the 1st box.
Can anyone provide me any inputs?
Lavin

When you read the file, please point out what character set using. For example:
FileInputStream fstream = new FileInputStream(url.getFile());
DataInputStream in = new DataInputStream(fstream);
BufferedReader br = new BufferedReader(new InputStreamReader(in, Charset.forName("ISO-8859-1")));
br.readLine();
This link possibly can help you.
http://www.velocityreviews.com/forums/t126128-jdk-14-character-set-change.html

Getting NLS setting issues when calling procedure

Hi,
Can anybody suggest me what could the problem in the below issue?.
i am invokeing procedure using DBAdapter. My soa version is 11.1.1.5. When i am calling procedure first time it is working fine. But when i am invoke second time
it is showing below error. I observed that i am getting error alternativly. So kinldy advice me what could be the issue.
Error:
Cause: java.sql.SQLException: ORA-20001: Oracle error -20001: ORA-20001: Oracle error -2074: ORA-02074: cannot SET NLS in a distributed transaction has been detected in fnd_global.set_nls.set_parameter('NLS_LANGUAGE','AMERICAN'). has been detected in fnd_global.set_nls. ORA-06512: at "APPS.APP_EXCEPTION", line 72 ORA-06512: at "APPS.FND_GLOBAL", line 240 ORA-06512: at "APPS.FND_GLOBAL", line 1410 ORA-06512: at "APPS.FND_GLOBAL", line 1655 ORA-06512: at "APPS.FND_GLOBAL", line 2171 ORA-06512: at "APPS.FND_GLOBAL", line 2313 ORA-06512: at "APPS.FND_GLOBAL", line 2251 ORA-06512: at
Regards,
Adhi

Hi:
Another way to avoid this, is to use an Non-XA Datasource.
Hope this helps
best

Urgent :SQL Loader Arabic Character Set Issue

HI all,
I am loading arabic characters into my database using SQL Loader using a fixed length data file. I had set my characterset and NLS_LANG set to UTF8.When I try to load the chararacter 'B' in arabic data i.e. ' لا ' , it gets loaded as junk in the table. All other characters are loaded correctly. Please help me in this issue and its very urgent.
Thanks,
Karthik

Hi,
Thanks for the responses.
Even after setting the characterset to arabic and the problem continues to persist. This problem occurs only with the character "b".
Please find my sample control file,input file and nls_parameters below:
My control file
LOAD DATA
characterset UTF8
LENGTH SEMANTICS CHAR
BYTEORDER little endian
INFILE 'C:\sample tape files\ARAB.txt'
replace INTO TABLE user1
TRAILING NULLCOLS
name POSITION(1:2) CHAR(1),
id POSITION (3:3) CHAR(1) ,
salary POSITION (4:5) CHAR(2)
My Input file - Fixed Format
?a01
??b02
?c03
The ? indicates arabic characters.Arabic fonts must be installed to view them.
NLS_PARAMETERS
PARAMETER     VALUE
NLS_LANGUAGE     ARABIC
NLS_TERRITORY     UNITED ARAB EMIRATES
NLS_CURRENCY     ?.?.
NLS_ISO_CURRENCY     UNITED ARAB EMIRATES
NLS_NUMERIC_CHARACTERS     .,
NLS_CALENDAR     GREGORIAN
NLS_DATE_FORMAT     DD/MM/RR
NLS_DATE_LANGUAGE     ARABIC
NLS_SORT     ARABIC
NLS_TIME_FORMAT     HH12:MI:SSXFF PM
NLS_TIMESTAMP_FORMAT     DD/MM/RR HH12:MI:SSXFF PM
NLS_TIME_TZ_FORMAT     HH12:MI:SSXFF PM TZR
NLS_TIMESTAMP_TZ_FORMAT     DD/MM/RR HH12:MI:SSXFF PM TZR
NLS_DUAL_CURRENCY     ?.?.
NLS_COMP     BINARY
NLS_LENGTH_SEMANTICS     CHAR
NLS_NCHAR_CONV_EXCP     FALSE

Audit setting issues

Similar Messages

Maybe you are looking for