[Oracle] Auditoria Usuário Oracle 10g e 11g

PROMPT> sqlplus / as sysdba
SQL> show parameter AUDIT_TRAIL;
Se o resultado diferente de ‘DB’, execuatar:
SQL> ALTER SYSTEM SET audit_trail=DB SCOPE=SPFILE;
SQL> shutdown immediate;
SQL> startup;
SQL> show parameter AUDIT_TRAIL;
Novo resultado tem que ser igual ‘DB’
SQL> audit session whenever not successful;
SQL> audit session whenever successful;

SQL>
Select Username, Userhost, To_Char(Timestamp, ‘DD/MM/YYYY HH24:MI:SS’) Timestamp, Returncode, Action_Name
From Dba_Audit_Trail
Where Action_Name In (‘LOGON’, ‘LOGOFF’);

SQL> noaudit session whenever not successful;
SQL> noaudit session whenever successful;

SQL> ALTER SYSTEM SET audit_trail=DB SCOPE=SPFILE;

DBA_AUDIT_EXISTS
DBA_AUDIT_OBJECT
DBA_AUDIT_SESSION
DBA_AUDIT_STATEMENT
DBA_AUDIT_TRAIL
DBA_OBJ_AUDIT_OPTS
DBA_PRIV_AUDIT_OPTS
DBA_STMT_AUDIT_OPTS

PROMPT> sqlplus / as sysdba
SQL> Delete From aud$;
SQL> commit;