sqlplus "/ as sysdba"
SQL*Plus: Release 10.2.0.3.0 - Production on Thu Jun 18 09:51:28 2009
Copyright (c) 1982, 2006, Oracle. All Rights Reserved.
Connected to:
Oracle Database 10g Release 10.2.0.3.0 - 64bit Production
SQL> show parameter audit
NAME TYPE VALUE
------------------------- ----------- -----------------------
audit_file_dest string /data/SID/admin/adump
audit_sys_operations boolean FALSE
audit_syslog_level string
audit_trail string NONE
1.打开审计
SQL> alter system set audit_sys_operations=TRUE scope=spfile;
SQL> alter system set audit_trail=XML scope=spfile;
2.重启实例
3.SQL> show parameter audit
NAME TYPE VALUE
------------------------------------ ----------- ------------------------------
audit_file_dest string /data/SIDadmin/adump
audit_sys_operations boolean TRUE
audit_syslog_level string
audit_trail string XML
4.检查日志文件
在adump目录下的日志文件里面,可以看到你的操作都记录在案了。
关闭审计
SQL> conn ‘/as sysdba’
SQL> show parameter audit
SQL> alter system set audit_sys_operations=FALSE scope=spfile;
SQL> alter system set audit_trail = none scope=spfile;
重启实例