Creating audit masks

About this task

You can create masks that more closely match the types of activities that individual users perform than do default and global masks.



You specify events in the mask when you create it by using the audit events from the alphabetic listing in the table Audit event codes and fields. You specify events for customized (template and user) audit masks the same way that you do for the _default, _require, and _exclude audit masks.

For example, you might want to create three template masks with different levels of security: _low, _medium, and _high. Alternatively, you might require just two templates for familiar and unfamiliar users that you copy to individual user masks: _guest and _trusted.