Skip to Main Content
  • Questions
  • Unified Audit on 12.2 - partitioning

Breadcrumb

Question and Answer

Chris Saxon

Thanks for the question, Mette.

Asked: September 21, 2018 - 11:07 am UTC

Last updated: September 24, 2018 - 3:37 pm UTC

Version: 12.2

Viewed 1000+ times

You Asked

Hi there

We have a customer on 12.2 and is about use Unified Audit, since we have alot of FGA audit due to GDPR (450 G in 3½ mth) - we chose UA because of its partitioning capabilites, thus beeing able to delete offload.

Questions:

1 I know there is an internal change request for export of an UA partition
ENH 12628359 - SUPPORT EXPORT / IMPORT OF UNIFIED AUDIT TRAIL
(now I have to use CTAS of 150 G of data - loads of UNDO (we have force loggin due to standby)

Will the ability of export of single partitions of UA be backported to 12.2 ?

2 We would like to make a list subpartition on AUDIT_TYPE
enabling us to track the few logon/logoff , priviliges rows

Is this possible on the aud$unified read/&only table ?

we create about 5-7 mio FGA audit rows a day - and we are required to have 1 mth + current mth online. It is quite impossible to read through approx 300 G of data (takes time)

PS 18.3 is not in the customers pipeline at the moment.

best regards
Mette

and Chris said...

1. I'm not aware of any plans to backport this.

2. Again, I don't know of a way to list subpartition the table. But you can change the partition interval with:

 DBMS_AUDIT_MGMT.ALTER_PARTITION_INTERVAL(
   interval_number       => 2,
   interval_frequency    => 'MONTH');


This will create a partition every N intervals. So the above is one every two months. You could change to daily with:

 DBMS_AUDIT_MGMT.ALTER_PARTITION_INTERVAL(
   interval_number       => 1,
   interval_frequency    => 'DAY');


Is this answer out of date? If it is, please let us know via a Comment

More to Explore

Security

All of the vital components for a secure database are covered in the Security guide.