DBA_COMMON_AUDIT

4.161 DBA_COMMON_AUDIT_TRAIL

DBA_COMMON_AUDIT_TRAIL displays all standard and fine-grained audit trail entries, mandatory and SYS audit records written in XML format.

Note:

This view is populated only in an Oracle Database where unified auditing is not enabled. When unified auditing is enabled in Oracle Database, the audit records are populated in the new audit trail and can be viewed from UNIFIED_AUDIT_TRAIL.

See Oracle Database Security Guide for more information about unified auditing.
See Oracle Database Upgrade Guide for more information about migrating to unified auditing.

Column	Datatype	Description
`AUDIT_TYPE`	`VARCHAR2(22)`	Audit trail type: `Standard Audit` `Standard XML Audit` `Fine Grained Audit` `Fine Grained XML Audit` `SYS XML Audit` `Mandatory XML Audit`
`SESSION_ID`	`NUMBER`	Numeric ID for the Oracle session
`PROXY_SESSIONID`	`NUMBER`	Proxy session serial number, if an enterprise user has logged in through the proxy mechanism
`STATEMENTID`	`NUMBER`	Numeric ID for the statement run; a statement may cause multiple audit records
`ENTRYID`	`NUMBER`	Numeric ID for the audit trail entry in the session
`EXTENDED_TIMESTAMP`	`TIMESTAMP(6) WITH TIME ZONE`	Timestamp of the audited operation (timestamp of user login for entries created by `AUDIT SESSION`) in the session's time zone
`GLOBAL_UID`	`VARCHAR2(32)`	Global user identifier for the user, if the user has logged in as an enterprise user
`DB_USER`	`VARCHAR2(128)`	Database user name of the user whose actions were audited
`CLIENT_ID`	`VARCHAR2(128)`	Client identifier in the Oracle session
`ECONTEXT_ID`	`VARCHAR2(64)`	Application execution context identifier
`EXT_NAME`	`VARCHAR2(4000)`	User external name
`OS_USER`	`VARCHAR2(255)`	Operating system login user name of the user whose actions were audited
`USERHOST`	`VARCHAR2(128)`	Client host machine name
`OS_PROCESS`	`VARCHAR2(16)`	Operating system process identifier of the Oracle process
`TERMINAL`	`VARCHAR2(255)`	Identifier of the user's terminal
`INSTANCE_NUMBER`	`NUMBER`	Instance number as specified by the `INSTANCE_NUMBER` initialization parameter
`OBJECT_SCHEMA`	`VARCHAR2(128)`	Owner of the audited object
`OBJECT_NAME`	`VARCHAR2(128)`	Name of the object affected by the action
`POLICY_NAME`	`VARCHAR2(128)`	Name of the Fine-Grained Auditing Policy
`NEW_OWNER`	`VARCHAR2(128)`	Owner of the object named in the `NEW_NAME` column
`NEW_NAME`	`VARCHAR2(128)`	New name of the object after a `RENAME` or the name of the underlying object
`ACTION`	`NUMBER`	Numeric action type code. The corresponding name of the action type is in the `STATEMENT_TYPE` column.
`STATEMENT_TYPE`	`VARCHAR2(28)`	Name of the action type corresponding to the numeric code in the `ACTION` column
`AUDIT_OPTION`	`VARCHAR2(40)`	Auditing option set with the `AUDIT` statement
`TRANSACTIONID`	`RAW(8)`	Transaction identifier of the transaction in which the object was accessed or modified
`RETURNCODE`	`NUMBER`	Oracle error code generated by the action (`0` if the action succeeded)
`SCN`	`NUMBER`	System change number (SCN) of the query
`COMMENT_TEXT`	`VARCHAR2(4000)`	Text comment on the audit trail entry, providing more information about the statement audited Also indicates how the user was authenticated: `DATABASE` - Authentication was done by password `NETWORK` - Authentication was done by Oracle Net Services or the Advanced Networking Option `PROXY` - Client was authenticated by another user. The name of the proxy user follows the method type.
`SQL_BIND`	`NVARCHAR2(2000)`	Bind variable data of the query
`SQL_TEXT`	`NVARCHAR2(2000)`	SQL text of the query
`OBJ_PRIVILEGE`	`VARCHAR2(16)`	Object privileges granted or revoked by a `GRANT` or `REVOKE` statement
`SYS_PRIVILEGE`	`VARCHAR2(40)`	System privileges granted or revoked by a `GRANT` or `REVOKE` statement
`ADMIN_OPTION`	`VARCHAR2(1)`	Indicates whether the role or system privilege was granted with the `ADMIN` option
`OS_PRIVILEGE`	`VARCHAR2(7)`	Operating privilege (`SYSDBA` or `SYSOPER`), if any, used in the session. If no privilege is used, it will be `NONE`.
`GRANTEE`	`VARCHAR2(128)`	Name of the grantee specified in a `GRANT` or `REVOKE` statement
`PRIV_USED`	`VARCHAR2(40)`	System privilege used to execute the action
`SES_ACTIONS`	`VARCHAR2(19)`	Session summary (a string of 16 characters, one for each action type in the order `ALTER`, `AUDIT`, `COMMENT`, `DELETE`, `GRANT`, `INDEX`, `INSERT`, `LOCK`, `RENAME`, `SELECT`, `UPDATE`, `REFERENCES`, and `EXECUTE`). Positions 14, 15, and 16 are reserved for future use. The characters are: `-` - None `S` - Success `F` - Failure `B` - Both
`LOGOFF_TIME`	`DATE`	Timestamp of user log off
`LOGOFF_LREAD`	`NUMBER`	Number of logical reads in the session
`LOGOFF_PREAD`	`NUMBER`	Number of physical reads in the session
`LOGOFF_LWRITE`	`NUMBER`	Number of logical writes for the session
`LOGOFF_DLOCK`	`VARCHAR2(40)`	Number of deadlocks detected during the session
`SESSION_CPU`	`NUMBER`	Amount of CPU time used by the Oracle session
`OBJ_EDITION_NAME`	`VARCHAR2(128)`	Name of the edition containing the audited object
`DBID`	`NUMBER`	Database identifier of the audited database
`RLS_INFO`	`CLOB`	Stores virtual private database (VPD) policy names and predicates separated by delmiter
`COMMON_USER`	`VARCHAR2(128)`	Effective user for the statement execution

Note:

The SQL_BIND and SQL_TEXT columns are only populated if the AUDIT_TRAIL initialization parameter is set to db, extended or xml, extended or if the AUDIT_SYS_OPERATIONS initialization parameter is set to TRUE.