Tag Archives: Enable unified audit

Enable or disable Unified audit in Oracle

Enable or disable Unified audit in Oracle

Enable the Unified Audit in Oracle Database

1. Check the unified audit is disable.

select parameter, value from v$option where parameter = 'Unified Auditing';

PARAMETER            VALUE
-------------------- ----------
Unified Auditing     FALSE

2. Shutdown and stop all the services related to Oracle Binaries.

sqlplus / as sysdba
shutdown immediate
exi
t

lsnrctl stop


cd /u01/app/oracle/product/middleware/oms
export OMS_HOME=/u01/app/oracle/product/middleware/oms
$OMS_HOME/bin/emctl stop oms

3. Enable the Unified auditing from Oracle Binaries.

cd $ORACLE_HOME/rdbms/lib
make -f ins_rdbms.mk uniaud_on ioracle

4. Start the database

Startup

lsnrctl start
emctl start oms

5. Check the auditing is enabled

select parameter,value from v$option where parameter = 'Unified Auditing';
PARAMETER VALUE
-------------------- ----------
Unified Auditing TRUE

Disable the Unified audit in Oracle 12c

1. Check Unified auditing is enabled.

select parameter,value from v$option where parameter = 'Unified Auditing';

PARAMETER            VALUE
-------------------- ----------
Unified Auditing     TRUE

2. Checked the enabled policies present in Oracle Database.
select user_name,policy_name,enabled_opt,success,failure from audit_unified_enabled_policies;

3. Disable that enabled policies by running output of the following query.

select 'noaudit policy '||policy_name||';' from audit_unified_enabled_policies;

4. Shutdown and stop all related oracle Services.

-- Shutdown the database
sqlplus / as sysdba
shutdown immediate
exit
--Stop the listener
lsnrctl stop
--- stop the OMS service
cd /u01/app/oracle/product/middleware/oms
export OMS_HOME=/u01/app/oracle/product/middleware/oms
$OMS_HOME/bin/emctl stop oms

5. Disable the unified audit with libraries from Oracle Binaries.
cd $ORACLE_HOME/rdbms/lib
make -f ins_rdbms.mk uniaud_off ioracle

6. Start the database

--Start the database
Startup
--Start the listener
lsnrctl start
--Start the OMS service
emctl start oms

7. Verify the unified audit is disabled

select parameter,value from v$option where parameter = 'Unified Auditing';

PARAMETER            VALUE
-------------------- ----------
Unified Auditing FALSE