Audit masks and audit instructions

As described in Audit masks, an audit mask specifies a set of events to be audited when a user performs them. Audit events are derived from a combination of user and global masks. Audit event codes and fields lists the set of auditable events. The set of events is fixed, but you use masks to specify only the ones that you are required to audit.

The following table lists four types of audit masks.

Mask Type
Mask Name
Individual user masks
username
Default mask
_default
Global masks
_require and _exclude
Template masks
_maskname

The following section describes the first three kinds of masks. For a description of template masks, see page Template masks.