Quantcast
Channel: SCN: Message List
Viewing all articles
Browse latest Browse all 3548

Re: AUDIT_LOG got purged

$
0
0

If the audit log was deleted then there would be an entry similar to this:

TIMESTAMP            HOST        PORTSERVICE_NAMECONNECTION_IDCLIENT_HOST                      CLIENT_IP    CLIENT_PIDCLIENT_PORTUSER_NAMEAPPLICATION_USER_NAMEAUDIT_POLICY_NAME  EVENT_STATUSEVENT_LEVELEVENT_ACTION  SCHEMA_NAMEOBJECT_NAMEPRIVILEGE_NAMEROLE_NAMEGRANTEEGRANTABLEFILE_NAMESECTIONKEYPREV_VALUEVALUESTATEMENT_STRING                                          COMMENT
2015-10-28 02:58:29.0xxxxx30703indexserver207655      xxxx.corp.sap10.42.134.17714728    60521      ADMIN    I028297              MandatoryAuditPolicySUCCESSFUL  CRITICAL  CLEAR AUDIT LOG?          ?          ?            ?        ?      ?        ?        ?      ?        ?    alter system clear audit log until '2015-10-09 06:26:08.0'?     

 

The audit log table cannot be  "just empty" once the auditing had been activated at one point in time as operations managing the auditing are also logged (at least in the SP 10 version I'm using).

 

You haven't commented so far on where the audit stream is written to on your system.


Viewing all articles
Browse latest Browse all 3548

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>