Hi all,
So, just a quick post to clarify once it cost me a few mins to explain this to a client and, indeed, Oracle could have made it easier.
So, facing the info below, doesn’t mean that you don’t have Unified Auditing enabled:
SELECT value FROM v$option WHERE parameter = 'Unified Auditing'; VALUE ----------------- FALSE
It does mean you just don’t have PURE Unified auditing, but a MIXED configuration, where old fashioned Auditing is also accepted.
See, this way, the MIXED Auditing is by default it is enabled in 12c. The idea is that you use apart from traditional auditing all the features of unified auditing. Once we are comfortable with the unified concept, we can migrate exiting audit setup to unified policy , we can enable pure auditing. This serves as a good mediator for an easy and hassle free switch to the preferred Unified auditing.
HOWEVER, let’s agree that Oracle could have made the value column a little bit m ore meaningful, if this was the case. The actual values actually mean:
FALSE – > MIXED AUDTING TRUE –> PURE AUDITING
OK, but what if I want to enable ONLY the PURE Auditing, disabling the ‘Classic’ Auditing and changing this value on v$option to TRUE? Well, then you need to relink library for your instance. Note, for RAC linking need to be done all the nodes.
Steps to Change to PURE Unified Auditing Only:
SELECT value FROM v$option WHERE parameter = 'Unified Auditing'; VALUE ----------------- FALSE sqlplus / as sysdba << shutdown immediate; exit; cd $ORACLE_HOME/rdbms/lib make -f ins_rdbms.mk unaiaud_on ioracle sqlplus / as sysdba<< startup SELECT value FROM v$option WHERE parameter = 'Unified Auditing'; VALUE ----------------- TRUE
Reference: https://docs.oracle.com/database/121/DBSEG/auditing.htm#DBSEG824
Hope it helps, cheers!
