Trying to configure syslog process,to write the database audit logs

Folks,
Running Oracle 10g R2 on Sun Solaris v 10.
I am trying to configure my database environment, so it will write all the database audit logs to a location, where Oracle userid on unix cannot modify/delete it.
To accomplish my goal, so far I have done the following:
I have set the following parameter with these values
audit_file_dest /flood/u01/app/oracle/product/10.2.0/db_1/rdbms/audit
audit_sys_operations TRUE
audit_trail OS
Also I asked my system administrator , to make an entry in the syslog.conf file at location /etc
He made the following entry
local3.notice /var/log/oraaudit.log
and restarted the syslog process
I also made the following entry
alter system set audit_syslog_level='LOCAL3.NOTICE' scope=spfile and bounced the database.
But after starting the database, i will don't see any oraaudit.log file at the location /var/log
Any help will be much appreciated.
Regards
Ashish

Hello Srini,
I mentioned in my posting , that I already set AUDIT_SYSLOG_LEVEL=LEVEL3.NOTICE value.
Also the permission on /var/log is such the Oracle unix userid cannot write to it and that is what I want. Since if Oracle userid can write, it can modify/delete the audit log also , which we are trying to prevent.
Thanks
Ashish

Similar Messages

  • Trying to configure syslog process, for Oracle auditing, Oracle 10gR2

    Folks,
    I am trying to use the OS (UNix Sun Solaris 10), syslog process. So I can write my Oracle db 10gR2 audit logs to a location, where Oracle userid on unix cannot modify/delete.
    For that I have set following values in the Oracle 10gR2 parameters :
    audit_file_dest string /flood/u01/app/oracle/product/
    10.2.0/db_1/rdbms/audit
    audit_sys_operations boolean TRUE
    audit_syslog_level string USER
    audit_trail string OS
    Actually I have set audit_syslog_level = 'user.notice' value in the database
    Also made following entry in the syslog.conf file
    ## oracle audit records
    user.notice /var/log/oraaudit.log
    # if a non-loghost machine chooses to have authentication messages
    # sent to the loghost machine, un-comment out the following line:
    #auth.notice ifdef(`LOGHOST', /var/log/authlog, @loghost)
    mail.debug ifdef(`LOGHOST', /var/log/syslog, @loghost)
    # non-loghost machines will use the following lines to cause "user"
    # log messages to be logged locally.
    ifdef(`LOGHOST', ,
    user.err /dev/sysmsg
    user.err /var/adm/messages
    user.alert `root, operator'
    user.emerg *
    It is still not logging the audit logs in that location.
    What am I missing here
    Thanks for your help.
    Ashish

    By chance did you restart the database and syslogd? ( I think that a "kill -1 syslogd" will work for that.)
    Your configuration looks very similar to what I did - and mine is working ok. One difference I noticed: when I do the "show parameter audit", I get the whole string of "audit_syslog_level string LOCAL5.NOTICE"
    Greg

  • Hi, I've been trying to configure my MacBook Air to the iCloud and for the last 3 days it's still uploading my calender. Also a few entries made to the calender in the last few days seem to have gone missing. Is this normal? How long will the upload take?

    Hi, I've been trying to configure my MacBook Air to the iCloud and for the last 3 days it's still uploading my calender. Also a few entries made to the calender in the last few days seem to have gone missing. Is this normal? How long will the upload take?

    Since the maximum OS X version for an eMac is 10.5, how are you running OS X 10.7.5 on the eMac?
    http://support.apple.com/kb/TS1591

  • How to open MSWORD using JAVA/JNI and write the database entries into WORD

    Hi..
    I am searching for java codes that uses JAVA NATIVE INTERFACE (JNI) for opening MSWORD 2003.
    To be brief.
    I created HTML form called Employee_data.
    if i click on Submit button a word document should be opened.This should be using JNI.
    I have also created a servlet in jsp to process the form data and store it into database(mysql).;
    Please help me to find the codes to open MSWORD on submit click and to write the database entries into word file.Can i get the full code for that.This is so urgent.
    Thanks in advance.

    Hi Suresh,
    The easest solution I can think of is to copy the math equation from the PowerPoint then paste in the Word document directly, there's actually no way to convert it to plain text, some equation is very complext, String variable is not suitable in this case.
    For example, this code works fine:
    var powerPoint = new Application { WindowState = PpWindowState.ppWindowMinimized };
    var oPresSet = powerPoint.Presentations;
    Microsoft.Office.Interop.PowerPoint._Presentation oPres = oPresSet.Open(@"C:\test.pptx", MsoTriState.msoFalse, MsoTriState.msoFalse, MsoTriState.msoFalse);
    var strObj = oPres.Slides[1].NotesPage.Shapes[2].TextFrame2.TextRange.MathZones.get_MathZones();
    strObj.Copy();
    Microsoft.Office.Interop.Word.Application wordApp = new Microsoft.Office.Interop.Word.Application();
    wordApp.Visible = true;
    Microsoft.Office.Interop.Word.Document doc = wordApp.Documents.Add();
    doc.Range(0, 0).Paste();
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • The database alert log has errors. Please help me

    Hi all
    I have an Oracle 8i Database that seams to be functioning well but when I
    Checked the Database alert Log I realized that something is not fine
    Part of the alert log content is here under. What can be problem and how can I
    Resolve it. Please I need you assistance...
    Thu Feb 07 08:50:37 2008
    Thread 1 advanced to log sequence 266
    Thu Feb 07 08:50:37 2008
    Current log# 11 seq# 266 mem# 0: E:\ORACLE\ORADATA\MUKREC\LOGS\REDO11.LOG
    Thu Feb 07 08:50:38 2008
    ARC0: Beginning to archive log# 10 seq# 265
    Thu Feb 07 08:51:07 2008
    ARC0: Completed archiving log# 10 seq# 265
    Thu Feb 07 09:23:22 2008
    Errors in file E:\Oracle\admin\MUKREC\udump\ORA03976.TRC:
    Thu Feb 07 09:23:23 2008
    Errors in file E:\Oracle\admin\MUKREC\udump\ORA04092.TRC:
    ................................................................................................................

    I'll just throw a shameless copy-paste from Metalink note : 164839.1 , hope you can use it to get further ? :
    Subject: FATAL ERROR IN TWO-TASK SERVER: error = 12571 Found in Alert File
    Doc ID: Note:164839.1 Type: PROBLEM
    Last Revision Date: 17-DEC-2007 Status: PUBLISHED
    fact: Oracle Server - Enterprise Edition
    symptom: Errors appear in alert file
    symptom: FATAL ERROR IN TWO-TASK SERVER:
    symptom: ERROR = 12571
    symptom: trace file generated
    symptom: Database operations continue successfully
    cause: The most common cause for the above error is an ungraceful
    disconnection of a session from the oracle db while the db is currently running
    a dml statement issued by that session. The error is recorded when oracle
    attempts to reply back to the session with the results of the dml and cannot
    access the session. Overall database operations are usually not affected.
    An ungraceful disconnection could cause by but is not limited to any of the
    following:
    - the client machine crashed
    - the network connection crashed
    - the user exited the session improperly (not issuing the 'exit' command)
    - the user application allows the user to exit the application without properly
    terminating the session.
    The above can cause problems with corrupted rollback segments if occurring on a
    regular basis and is not addressed. This would require db recovery and
    possibly a db rebuild (not a light matter)
    PMON will usually rollback most transactions in the rollback segments for a
    session if it finds that the session has been ungracefully disconnected, but
    there is always a chance that it cannot and this will lead to rollback segment
    corruption.
    fix:
    The dml and the user that issued the dml can be determined from the trace file.
    The current dml is in the tracefile header section. The user can be found in
    the process state dump of the trace. The process state shows the machine,
    o/suser, and user for the session.
    The DBA can use this information to determine what the user was doing at the
    time and if there was an ungraceful exit from the session the user was
    utilizing.
    The DBA should then address the cause of the ungraceful exit to reduce the
    possibility of recurrence.

  • Problem with the XI-Audit log entries in the table "XI_AF_MSG_AUDIT"

    Hi,
    I have an async-szenarios for PO:
    We send Idoc's from SAP ERP to a WebService via SOAP. And we take Ack's. We use Integrationsprocess with deadline block to catche the errors after the retrying (three times) and to send they via e-mail.
    Our problem is, the number of the audit logs in the table "XI_AF_MSG_AUDIT":
    In the RTW only we see one audit log (with three retries) in an error case. But in the table XI_AF_MSG_AUDIT there are about 76 entries for the same audit log in the error case and about 20 entries in the case of the succuessfull processing.
    This number of the entries in the table causes problem with the size of the redo log file and delete job of cours the large size of the table and therefore problem on the data base. The table can not be controlled. The delete job can not run and cancels every time due this redo log problems
    What can cause that?
    How can it be prevented, that so much entries are not be made in the  table "XI_AF_MSG_AUDIT".
    Best regards
    Gueltekin

    Hi Gueltekin,
    I am only aware of the general property auditLogEnabled of J2EE Engine Service SAP XI AF Core, which controls in general (default = true) that entries in the AF Message Audit log are written at all.
    (see [http://help.sap.com/saphelp_nw70/helpdata/en/5c/22ee41c334c717e10000000a155106/frameset.htm|http://help.sap.com/saphelp_nw70/helpdata/en/5c/22ee41c334c717e10000000a155106/frameset.htm])
    I assume that your scenarios in the error case is sending up to three messages and for each message the number of audit log infos are created. You might want to check the detailed entries in the log and see from where they are comming, you might use customer modules etc. as well.
    Best regards,
    Silvia

  • Exchange 2013 SP1 - The attempt to search the administrator audit log failed.

    During migration process from Exchange 2010 to 2013, after moving Arbitration mailbox from Exchange 2010 database to Exchange 2013 SP1 database, cmdlet Search-AdminAuditLog fails with following error.
    The attempt to search the administrator audit log failed. Please try again later.
    + CategoryInfo : NotSpecified: (:) [Search-AdminAuditLog], AdminAuditLogSearchException
    + FullyQualifiedErrorId : [Server=EX2013,RequestId=517873e3-a623-4363-bfdc-e5aa23595c33,TimeStamp=29. 4. 2014
    8:38:37] [FailureCategory=Cmdlet-AdminAuditLogSearchException] 2774D0CF,Microsoft.Exchange.Management.SystemConfig
    urationTasks.SearchAdminAuditLog
    + PSComputerName : ex2013.domainname.local

    Hi,
    First, please make sure the Microsoft Exchange Search and the Microsoft Exchange Search Host Controller service are running and please run the get-mailbox -arbitration cmdlet to check the result.
    Besides, please check the properties of the DiscoverySearchMailbox and verify that the homeMDB attribute is set to a mounted database.
    If the steps above don't work, please try to re-create a new Discovery System Mailbox to check the result. You can refer to the following article.
    Re-Create the Discovery System Mailbox
    http://technet.microsoft.com/en-gb/library/gg588318(v=exchg.150).aspx
    Best regards,
    Belinda
    Belinda Ma
    TechNet Community Support

  • Trying to configure Portal to run off the network

    Hi all,
    I am trying to configure Oracle Portal 3.0.9.8.2 to run off the network. I have taken all of the recommended steps in terms of configuring hostname, using a static IP, running and checking the ssoodatan script, updating the hosts file, and configuring a loopback adapter, but can still not make it work. The Portal works and functions fine when connected to the network, but as soon as disconnected from the network Portal returns
    Error: Timeout occurred whilst retrieving page meta data 0 ms.
    or
    Sometimes it will display the banner, but the Portlets and the Providers will instantly timeout. I have cranked up the timeout levels of JServ and the Providers but to no avail. I have put the recommended timeout, stall, requesttime, buffer, minStall, minTimeout in the zone.properties file, but no luck.
    I have noticed within the jserv.log the error message below. The link that jumps out at me is UnknownHostException: www-proxy.us.oracle.com. I did have my proxy server set at one time, but I erased it from the global settings page, and I ran the procedure I found somewhere on this discussion board to make sure it was set back to null. When I run the diag.cmd program it shows my proxy server being empty. Where could this be picking this up from, I also have proxy servers turned off in my browsers. Any suggestions or help??
    13/02/2002 16:04:08:752 PST] page/JNI: Exception when trying to connect in 1.
    [13/02/2002 16:04:08:752 PST] page/Timeout occurred, label=147 url=http://jstrada-lap.us.oracle.com/pls/portal30/!PORTAL30.wwpro_app_provider.execute_portlet time=10ms
    [13/02/2002 16:04:08:762 PST] page/ContentFetcher Unexpected Exception, name=content-fetcher0
    java.net.UnknownHostException: www-proxy.us.oracle.com
         at java.net.InetAddress.getAllByName0(InetAddress.java:575)
         at java.net.InetAddress.getAllByName0(InetAddress.java:544)
         at java.net.InetAddress.getAllByName(InetAddress.java:537)
         at HTTPClient.HTTPConnection$EstablishConnection.run(HTTPConnection.java, Compiled Code)

    I think you must add an entry to your /etc/hosts file, as follows:
    127.0.0.1 noa noa
    and create a vhost entry on /etc/httpd/conf/extra/httpd-vhosts
    <VirtualHost *:80>
    ServerName noa
    DocumentRoot "/srv/http/"
    <Directory "/src/http/">
    Options Indexes FollowSymLinks
    AllowOverride None
    Require all granted
    </Directory>
    </VirtualHost>
    Although I'm not sure if the vhost is actually necesary, but it won't harm.
    pd: if you use vhosts, remember to uncomment "Include conf/extra/httpd-vhosts.conf" con /etc/httpd/conf/httpd.conf and restart apache
    # systemctl restart httpd

  • Slow Processing - reconnecting to the database

    The response time for SQL Developer for our developers in India is very slow. One observation I've had is that each activity reconnects to the database. Is there a way to establish the connection once and continue working within that connection. That may help the response time for the India developers. Is there other suggestions that might help improve the connectivity and response time for India developers?

    I will gather more information from those in India to address your question. From my own experience, whenever I open a new SQL Worksheet to pull in a new procedure which I've typed in text, I get a message of 'Connecting to database'. Then when I close this and go to look at a table, I again get 'Connecting to database'. From my experience, with each new activity I was getting that message. I feel I may have something not set correctly which might be forcing this or I'm not doing a transition from one process to another correctly. I am processing each as the same user.
    I am connecting to Oracle 10.2.0.2, operating system of Windows XP, SQL Developer 1.5.2, and JDK or 1.5.0_06, Hardware Intel(R) Core(TM)2Duo CPU, 2.53GHz, 1.99GB of Ram.

  • Write Back - Database update logs user out

    Hi All,
    I have implemented write back functionality on a single varchar field in one of my reports. Everything appears to be setup correctly (permissions are set at the presentation and rpd layer to allow for the write back and the write back template appears to have no issues). When a user logs in they are able to see the editable fields and the Update button is enabled. When a user then changes a field value and hits the update button, everything again appears to complete without any error and checking the database side the update shows up correctly.
    The issue is that after the Update button is pressed and the database changes are committed successfully, the users session keeps getting logged out. Once they hit the update button and then try to click anywhere else within OBIEE, they are automatically hit with the logged out page and need to log back in. This happens everytime and the changes do take to the database.
    Has anyone ever seen this before? I have tried shutting down all windows and clearing browser cache and then coming in fresh but keeps happening.
    Thanks,
    k

    Hi,
    though this thread is closed i just want to put some note.
    try playing with the Isolation Levels.
    If you used Toad, you might have come across a functionality when your logging off...which is to commit your transactions before logging off.
    Envisioning this functionality i presume there should be some db level property that might be causing this in that particular environment.
    thanks
    -nag
    http://www.obinotes.com

  • Need details of people logged on when the Security audit log was deactive

    Respected Guru's,
    Security audit log was deactivated, i have activated it recently in sm19.
    Now, i should get the details of people logged on when the audit log was deactive.
    What are the posibilities of Security audit being deactivated.
    Regards,
    Daya.

    Dear Alex,
    Please let me know how to check in ST03N.
    Further, how to retrive user logon data which is not recorded in the audit files.
    Edited by: Dayananadan Anandan on Nov 12, 2009 10:03 AM

  • I am trying to configure iMessage and I get the infamous "email address already in use".

    I use this emaill address as my Apple ID.  I am able to use iMessage for my AOL email address but I hardly ever use that email and want to use my GMail acct.  I am ready to throw this iPod in the garbage and start using a Droid device.  I certainly won't be buying an iPad with issues like this.  I love my MacBook Pro and I am trying to embrace the Apple World.  Just the whole Apple ID password security is giving me fits.  Who the heck wants to have to have such unique passwords?

    Try:
    iOS: FaceTime is 'Unable to verify email because it is in use'
    https://discussions.apple.com/message/18264361#18264361
    https://discussions.apple.com/message/18502891#18502891
    https://discussions.apple.com/message/16513824#16513824
    https://discussions.apple.com/message/16503340#16503340

  • How to include processing time in the  LogFormat in httpd.conf of OAS

    Hi,
    I want to add processing time parameter in the LogFormat of the HTTP requests in Application server logs file.
    i tried to edit the httpd.conf file which orginally is as below
    LogFormat "%h %l %u %t \"%r\" \"%{Cache-Control}i\" CC \"%{Cache-Control}o\" %>s %b" common
    to
    LogFormat "%h %l %u %t *%T* \"%r\" \"%{Cache-Control}i\" CC \"%{Cache-Control}o\" %>s %b" common
    But doing so, did not add the Processing time in the GET and POST requests.Although same works for Apache HTTP server.
    I want to know how do i add the Processing time attribute in the LOGFormat.
    By Default the LogFormat is Common, what are the other possibilities fpr LogFormat.
    Please revert.
    Regards
    Ak

    Hi,
    1. To reduce the processing time for JMS -> IDOC scenario, try to get the Average processing time taken by JMS adapter, IE, IDOC adapter for the messages that are processed so far by going thro the Adapter Audit logs, SXMB_MONI race and Time in WE02 in R/3 system. Calculate this for 5 - 10 messages at different time to get the clear idea of which step is consuming more time. Then it will be helpful to focus on tuning that specific step.  If you are using BPM, check the processing time taken by PE.
    2. Check the Inbound and Outbound queues used by this interface, if required try to configure Prioritized Queue with more time allocated for this interface in Integration Engine.
    3. Check the load on the Integration Server when this Interface messages are getting processed, to understand/ isolate the interfaces which are consuming more processing time and system resources.
    4. If this is not in Production try to perform the Mapping/ transformation in graphical mapping itself, it will be helpful to minimise use of XSLT mapping to get better performance.
    5. Check if the Archive and Delete jobs are running successfully in the Integration Server, since this will free up the occupied resources in the system.
    6. If possible post seperate Forum questions for issues in different Interface scenarios, it will be easy to understand the problem for all of us.
    Hope this will be helpful,
    Regards,
    S.Santhosh Kumar

  • How to write the JTables Content into the CSV File.

    Hi Friends
    I managed to write the Database records into the CSV Files. Now i would like to add the JTables contend into the CSV Files.
    I just add the Code which Used to write the Database records into the CSV Files.
    void exportApi()throws Exception
              try
                   PrintWriter writing= new PrintWriter(new FileWriter("Report.csv"));
                   System.out.println("Connected");
                   stexport=conn.createStatement(ResultSet.TYPE_SCROLL_INSENSITIVE, ResultSet.CONCUR_UPDATABLE);
                   rsexport=stexport.executeQuery("Select * from IssuedBook ");
                   ResultSetMetaData md = rsexport.getMetaData();
                   int columns = md.getColumnCount();
                   String fieldNames[]={"No","Name","Author","Date","Id","Issued","Return"};
                   //write fields names
                   String rec = "";
                   for (int i=0; i < fieldNames.length; i++)
                        rec +='\"'+fieldNames[i]+'\"';
                        rec+=",";
                   if (rec.endsWith(",")) rec=rec.substring(0, (rec.length()-1));
                   writing.println(rec);
                   //write values from result set to file
                    rsexport.beforeFirst();
                   while(rsexport.next())
                        rec = "";
                         for (int i=1; i < (columns+1); i++)
                             try
                                    rec +="\""+rsexport.getString(i)+"\",";
                                    rec +="\""+rsexport.getInt(i)+"\",";
                             catch(SQLException sqle)
                                  // I would add this System.out.println("Exception in retrieval in for loop:\n"+sqle);
                         if (rec.endsWith(",")) rec=rec.substring(0,(rec.length()-1));
                        writing.println(rec);
                   writing.close();
         }With this Same code how to Write the JTable content into the CSV Files.
    Please tell me how to implement this.
    Thank you for your Service
    Jofin

    Hi Friends
    I just modified my code and tried according to your suggestion. But here it does not print the records inside CSV File. But when i use ResultSet it prints the Records inside the CSV. Now i want to Display only the JTable content.
    I am posting my code here. Please run this code and find the Report.csv file in your current Directory. and please help me to come out of this Problem.
    import javax.swing.*;
    import java.util.*;
    import java.io.*;
    import java.awt.*;
    import java.awt.event.*;
    import javax.swing.table.*;
    public class Exporting extends JDialog implements ActionListener
         private JRadioButton rby,rbn,rbr,rbnore,rbnorest;
         private ButtonGroup bg;
         private JPanel exportpanel;
         private JButton btnExpots;
         FileReader reading=null;
         FileWriter writing=null;
         JTable table;
         JScrollPane scroll;
         public Exporting()throws Exception
              setSize(550,450);
              setTitle("Export Results");
              this.setLocation(100,100);
              String Heading[]={"BOOK ID","NAME","AUTHOR","PRICE"};
              String records[][]={{"B0201","JAVA PROGRAMING","JAMES","1234.00"},
                               {"B0202","SERVLET PROGRAMING","GOSLIN","1425.00"},
                               {"B0203","PHP DEVELOPMENT","SUNITHA","123"},
                               {"B0204","PRIAM","SELVI","1354"},
                               {"B0205","JAVA PROGRAMING","JAMES","1234.00"},
                               {"B0206","SERVLET PROGRAMING","GOSLIN","1425.00"},
                               {"B0207","PHP DEVELOPMENT","SUNITHA","123"},
                               {"B0208","PRIAM","SELVI","1354"}};
              btnExpots= new JButton("Export");
              btnExpots.addActionListener(this);
              btnExpots.setBounds(140,200,60,25);
              table = new JTable();
              scroll=new JScrollPane(table);
              ((DefaultTableModel)table.getModel()).setDataVector(records,Heading);
              System.out.println(table.getModel());
              exportpanel= new JPanel();
              exportpanel.add(btnExpots,BorderLayout.SOUTH);
              exportpanel.add(scroll);
              getContentPane().add(exportpanel);
              setVisible(true);
          public void actionPerformed(ActionEvent ae)
              Object obj=ae.getSource();
              try {
              PrintWriter writing= new PrintWriter(new FileWriter("Report.csv"));
              if(obj==btnExpots)
                   for(int row=0;row<table.getRowCount();++row)
                             for(int col=0;col<table.getColumnCount();++col)
                                  Object ob=table.getValueAt(row,col);
                                  //exportApi(ob);
                                  System.out.println(ob);
                                  System.out.println("Connected");
                                  String fieldNames[]={"BOOK ID","NAME","AUTHOR","PRICE"};
                                  String rec = "";
                                  for (int i=0; i <fieldNames.length; i++)
                                       rec +='\"'+fieldNames[i]+'\"';
                                       rec+=",";
                                  if (rec.endsWith(",")) rec=rec.substring(0, (rec.length()-1));
                                  writing.println(rec);
                                  //write values from result set to file
                                   rec +="\""+ob+"\",";     
                                   if (rec.endsWith(",")) rec=rec.substring(0,(rec.length()-1));
                                   writing.println(rec);
                                   writing.close();
         catch(Exception ex)
              ex.printStackTrace();
         public static void main(String arg[]) throws Exception
              Exporting ex= new Exporting();
    }Could anyone Please modify my code and help me out.
    Thank you for your service
    Cheers
    Jofin

  • Shows follwing error when trying to refresh the database?

    Hi All,
    When i try to refresh the database its showing the following error.
    com.hyperion.planning.HspCubeRefreshInProgressException: Cannot complete your request because the database is being refreshed.
    Please let me know ASAP how to reslove the issue.
    Cheers,
    Kittu.

    Looks there is an other process running on the database, you can check from EAS sessions or check logs for other activity running on the application.
    If you think that nothing is running & no users logged in, you can try unlock application from planning/essbase outline and try refresh.
    But pretty sure that some other activity is running on application, like sec refresh or data load or users trying to retrieve/load...etc...hope this helps.

Maybe you are looking for