Auditing in Oracle

Auditing can be disabled (audit_trail=false), or enabled. If auditing is enabled, the audit information can either go to a table in the database (aud$) or to the operating system trail. This can be determined by audit_trail. If it is set to db (or true), it goes to aud$, if it is set to os, it is written to a file which is specified by audit_file_dest.

There are three levels that can be audited:

• Statement level
  Statements that can be audited are found in stmt_audit_option_map
• Object level
  These objects can be audited: tables, views, sequences, packages, stored procedures, stored functions.
• Privilege level
  All system privileges that are found in system_privilege_map.

See also dba_stmt_audit_opts and the audit statement.

Oracle stores information that is relevant to auditing in its data dictionary. See audit views and audit related init parameters.