Enable Unified audit for Datapump operations in Oracle

1. Identified the actions done for the datapump.

SQL> SELECT name FROM auditable_system_actions WHERE component = 'Datapump';
NAME
----------
EXPORT
IMPORT
ALL


2. Create the Audit policy for IMPORT or EXPORT or BOTH Process.

--- For Import process
CREATE AUDIT POLICY dp_import_policy
ACTIONS COMPONENT = datapump IMPORT;
--For Export Process
CREATE AUDIT POLICY db_export_policy
ACTIONS COMPONENT = datapump EXPORT;
--For Both Process
CREATE AUDIT POLICY dp_impexp_policy
ACTIONS COMPONENT = datapump ALL;


3. Enable or disable the created Unified policy.

-- For enable the policy
audit policy dp_import_policy;
--For disable the policy
Noaudit policy dp_import_policy;


4. Verified the Audit policy is listed in enabled.

select distinct policy_name from AUDIT_UNIFIED_ENABLED_POLICIES where policy_name='DP_IMPORT_POLICY';


5. View the audit data if you run the import job for datapump.

COLUMN event_timestamp FORMAT A30
COLUMN dbusername FORMAT A10
COLUMN DP_TEXT_PARAMETERS1 FORMAT A25
select event_timestamp,DBUSERNAME,DP_TEXT_PARAMETERS1 from UNIFIED_AUDIT_TRAIL where DP_TEXT_PARAMETERS1
is not null;