Audit-record format
The database server generates the second part of the audit record, with fields that depend on the audit event.
Audit-record format shows the format of the database server audit records.
| ONLN | date and time | hostname or hostname. domain.ext | pid | database server name | user name | errno | event mnemonic | Additional Fields |
|---|---|---|---|---|---|---|---|---|
| ONLN | 2008-07-28 15:43:00.000 | turk | 4549 | khan | jazt | 0 | CRDB | dbsch |
| ONLN | 2008-07-28 15:43:18.000 | turk | 4549 | khan | jazt | 0 | ACTB | dbsch:jazt:v1:103 |
| ONLN | 2008-07-28 15:43:19.000 | turk | 4549 | khan | jazt | 0 | CLDB | dbsh |
| ONLN | 2008-07-28 15:43:21.000 | turk | 4549 | khan | jazt | 0 | ALFR | local:109:-:-:4:4: |
| ONLN | 2008-07-28 15:43:28.000 | turk | 4549 | khan | jazt | 0 | ALFR | local:109:aa5x:-: |
| ONLN | 2008-07-28 15:43:29.000 | turk | 4549 | khan | jazt | 0 | STDS | 2:- |
| ONLN | 2008-07-28 15:43:29.000 | turk | 4549 | khan | jazt | 0 | STPR | 100 |
| . . . | . . . | . . . | . . . | . . . | . . . | . . . | . . . | . . . |
- ONLN
- A fixed field used to identify events
- date and time
- Indicates when the audit event was recorded
- hostname
- The name of the UNIX™ host computer of the client application that executes the audit event
- hostname.domain.ext
- The name of the Windows™ host computer, domain, and extension of the client application that executes the audit event
- pid
- The process ID of the client application that causes the database server to run the audit event
- database server name
- The name of the database server on which the audit event is run
- user name
- The login name of the user who requests the event
- errno
- The event result that contains the error number that the event returns, indicating success (0) or failure
- event mnemonic
- Database server audit event that the database server ran, such as ALFR (Alter Fragment)
- additional fields
- Any fields that identify databases, tables, and so on. These additional
fields are audit-event fields that contain information captured in
tabular form by the onshowaudit utility for audit
analysis.
For operating-system-managed auditing on UNIX, the database server audit record is an additional field for the operating-system audit record. Audit event codes and fields lists the audit-event fields.