AUD: Audit Commit&nbsp…
来源:互联网 发布:seo技术可以自学吗 编辑:程序博客网 时间:2024/06/07 18:44
--------------------------------------------------------------------------------
修改时间:2012-6-12类型:PROBLEM状态:PUBLISHED优先级:3 注释(0)
In this Document
--------------------------------------------------------------------------------
Applies to:
Oracle Server - Enterprise Edition - Version 10.2.0.3 to 11.2.0.1[Release 10.2 to 11.2]
Information in this document applies to any platform.
Checked for relevance on 17-Sep-2011
Symptoms
You see the following messages appear in your alert.log:
AUD: Audit Commit Delay exceeded, written a copy to OS AuditTrail
Changes
You have applied the Audit Cleanup Patch or any superceding patchas referenced from note 731908.1.
Cause
This is a change that was introduced within the audit functionalityto support Audit Vault, these messages can appear in your alert.logoccasionally
even if this database is not a source of Audit Vault, the reasonis as follows:
The database will guarantee that the transaction writing theaudit record will commit within a pre-defined maximum allowedinterval which
is called the Audit Commit Delay interval. If the transactiontakes more than Audit Commit Delay to commit the audit record,
the Database will write the same record to the OS audit trail.This is a fallback mechanism to make sure there's always writtenevidence
of an audited action within the defined timeframe, a such it isa feature to enhance audit security.
The commit delay is fixed at 5 seconds and cannot be tuned.
Solution
The problem is happening because the audit functionality was notable to commit an audit record within 5 seconds, this means at thetime the message
was written to the alert.log your database was under stress. Thecause of the problem is not the auditing layer and the messagesseen in the alert.log
are only showing that the auditing is suffering because of thegeneric performance problems of the environment which might
affect other components as well.
These messages are purely informational and no direct action canor should be taken to avoid them. This is most likely because of aresource problem on your database. If this is seen incidental youcan ignore it but if these messages are seen regularly you willlikely have a resource problem and also seeing other symptoms ofthat, you should analyze and solve the generic performance problemfirst and then these messages will also go away.
Update: the fix to unpublished bug 8642202 changes the behaviouras follows:
Audit Commit Delay increased to 15 seconds and enforced onlywhen AUD$ is initialized for cleanup.
So if you have the fix to Bug 8642202, the delay will beincreased to 15 seconds and if you still get these messages and youdon't want them
and you are not using package DBMS_AUDIT_MGMT for cleanup, youcan now disable this security feature by calling:
set serveroutput on
begin
end;
/
This may alleviate the problem in some cases but there can stillbe an underlying performance problem.
Bug 8642202 is fixed in patchset 10.2.0.5, PSU 11.2.0.1.1 andpatchset 11.2.0.2 and future releases.
Merge patches that include this fix:
11.1.0.7: Patch 9821987
On Windows this is fixed in 11.1.0.7 patch bundle 40 and higher,see Note 161549.1 for more info.
References
@ BUG:8642202 - LX64: TOO MANY AUDIT FILES GENERATED, 500,000 AUDFILES AFTER 2 DAYS
NOTE:161549.1 - Oracle Database, Networking and Grid Agent Patchesfor Microsoft Platforms
NOTE:731908.1 - New Feature DBMS_AUDIT_MGMT To Manage And PurgeAudit Information
NOTE:8642202.8 - Bug 8642202 - Lots of audit files due to "AuditCommit Delay exceeded"
- AUD: Audit Commit&nbsp…
- COMMIT WORK AND&…
- svn错误“Commit blocked&nbsp…
- SVN commit:remains in&…
- ORA-28056:Writing audit&nb…
- weibo 登录&nbsp…
- Android edittext&nbsp…
- !!! FAILED BINDER&nbsp…
- OGNL & ValueStack&…
- Microsoft用于High Definition Aud…
- LA 5713 Qin&nbsp…
- Convex Hull Algorithms & general…
- Javascript_DOMContentLoaded&nbsp…
- ApplicationEventMulticaster&nbsp…
- Oracle Audit
- google desktop search&…
- Running Health Checks&…
- script for Tablespace&…
- ORA-16433 The database…
- Oracle数据库event事件与dump文件…
- 产品心理学(1)
- 使用vncviewer连接CENTOS 连…
- 我的GIS入门学习之路(二)
- AUD: Audit Commit&nbsp…
- cannot restore segment…
- 腾讯云服务器Nginx+php+mysql环境搭建
- Linux下查询一个包是32位还是64位
- rpm -ivh elfutils-libe…
- OPP time out 问题
- Troubleshooting and Di…
- 11g: TNS-12532 / …
- tnsping通但无法连接的问题处理