Oracle 参数 AUDIT_SYS_OPERATIONS 官方解释，作用，如何配置最优化建议
本站中文解释
AUDIT_SYS_OPERATIONS参数控制对系统操作的审核，当它被设置为TRUE时，对CREATE SESSION，ALTER SYSTEM，ALTER DATABASE，ALTER SESSION和ALTER USER等系统操作将被审计。
设置AUDIT_SYS_OPERATIONS参数的正确方式是：
ALTER SYSTEM SET AUDIT_SYS_OPERATIONS=TRUE;
更改此参数的配置需要重新启动数据库，以便更改参数生效。
官方英文解释
AUDIT_SYS_OPERATIONS enables or disables the auditing of directly issued user SQL statements with SYS authorization. These include SQL statements directly issued by users when connected with the SYSASM, SYSBACKUP, SYSDBA, SYSDG, SYSKM, or SYSOPER privileges, as well as SQL statements that have been executed with SYS authorization using the PL/SQL package DBMS_SYS_SQL.
| Property | Description |
|---|---|
|
Parameter type |
Boolean |
|
Default value |
|
|
Modifiable |
No |
|
Modifiable in a PDB |
No |
|
Range of values |
|
|
Basic |
No |
Note:
This parameter is effective when using traditional auditing. Traditional auditing is deprecated in Oracle Database 21c. Oracle recommends that you instead use unified auditing, which enables selective and more effective auditing inside Oracle Database.
-
See Oracle Database Security
Guide for more information about unified auditing. -
See Oracle Database Upgrade
Guide for more information about migrating to unified auditing.
In an Oracle database that has migrated to unified auditing, the setting of this parameter has no effect.
The audit records are written to the operating system’s audit trail. The audit records will be written in XML format if the AUDIT_TRAIL initialization parameter is set to xml or xml, extended
On UNIX platforms, if the AUDIT_SYSLOG_LEVEL parameter has also been set, then it overrides the AUDIT_TRAIL parameter and SYS audit records are written to the system audit log using the SYSLOG utility.
In a CDB, the scope of the settings for this initialization parameter is the CDB. Although the audit trail is provided per PDB in a CDB, this initialization parameter cannot be configured for individual PDBs.
