When the AAO turns on auditing, the AAO can set the ADTMODE parameter in the ADTCFG file to specify the type and level of auditing.
Sections that follow briefly describe the types of auditing on UNIX and on Windows. For details, see Changing the Audit Configuration and see Appendix B. The ADTCFG File. For more information on auditing administration, see Administrative Roles and Role Separation.
If you act as the AAO, when you turn on auditing on UNIX, you can specify that either the database server or the operating system manage audit records. You set the ADTMODE configuration parameter to a number from 0 through 8 to specify the type and level of auditing.
For example, if you set the ADTMODE configuration parameter to 1 in your ADTCFG file on UNIX, database server-managed auditing turns on automatically when the database server initializes shared memory. After you turn on auditing, only the audit events defined in audit masks are recorded. (If you specify mandatory auditing for the DBSSO or the DBSA or both when you turn on auditing, audit records are generated for all events that are executed by the specified roles.)
The AAO sets the ADTMODE configuration parameter and specifies an error mode, in case an error occurs when an audit record is stored. The AAO must ensure that the operating-system audit facility is enabled if it is to manage the audit trail.
The OSA administers operating-system auditing and can configure auditing to monitor from single-user to system-wide events. Audit events are recorded in files in an audit trail. For the database server to use an audit trail that the operating system manages, all of the following criteria must be met:
If the operating-system audit facility manages audit records, the amount of database server auditing must also be acceptable to the operating-system administrator.
When you turn on auditing on Windows, you can set the ADTMODE parameter to 0, 1, 3, 5, or 7 in the ADTCFG file to specify the type and level of auditing.
For example, if you set the ADTMODE configuration parameter to 1 in your ADTCFG file, auditing is turned on automatically during database server initialization. After you turn on auditing, the database server records only the audit events defined in the audit masks.
The AAO configures auditing and specifies an error mode, in case an error occurs when an audit record is stored.