06:48:20 SQL
> alter system
set unified_audit_systemlog
='local7.info' scope
=spfile
;
System altered.
Elapsed: 00:00:00.07
如果是rac环境,需要在多个node上都设置
[root@scaqai06adm07 log
]
local7.info /var/log/vault1audit.log
如果是rac环境,需要在多个node上都重启该service
重启rsyslog
service
[root@scaqai06adm07 log
]
Redirecting to /bin/systemctl restart rsyslog.service
[root@scaqai06adm07 log
]
Oct 21 06:37:59 scaqai06adm07 journal: Oracle Unified Audit
[339117
]: LENGTH:
'197' TYPE:
"4" DBID:
"4222300165" SESID:
"4236070957" CLIENTID:
"" ENTRYID:
"2" STMTID:
"7" DBUSER:
"SYS" CURUSER:
"SYS" ACTION:
"49" RETCODE:
"0" SCHEMA:
"" OBJNAME:
"" PDB_GUID:
"B1934BAC41113D74E0537885E50A3DD5"