How to create a compressed tar archive of the Oracle audit files in RSA Identity Governance & Lifecycle
Originally Published: 2015-03-27
Last Modified: 2023-10-06
Article Number
Applies To
RSA Version/Condition: All
Platform (DB): Oracle 11.x, 12.x
Issue
Because of certain audit requirements, attempts to archive or purge these files using normal commands may fail. For example, using a typical tar command would result in a too many arguments error. This RSA Knowledge Base Article explains how to use the tar command to create a gzipped tar file of the audit files without error.
Resolution
- Find the location of the .aud files
The .aud files are located in the directory specified by the audit_file_dest parameter.
Login to SQL*Plus as SYSDBA
The default value is $ORACLE_HOME/admin/{SID}/adump. (in this example, $ORACLE_HOME/admin/AVDB/adump.)
NOTE: Audit logs may also be found in $ORACLE_HOME/product/{version}/db_1/rdbms/audit.
Login to SQL*Plus as SYSDBA
$ sqlplus / as sysdba SQL> show parameter audit;
The default value is $ORACLE_HOME/admin/{SID}/adump. (in this example, $ORACLE_HOME/admin/AVDB/adump.)
NOTE: Audit logs may also be found in $ORACLE_HOME/product/{version}/db_1/rdbms/audit.
- Go to the directory with the audit files.
As the oracle or root user
cd $ORACLE_HOME/admin/AVDB/adump
- Execute this command to create the tar file:
tar zcvf audit_`date +%Y%m%d_%H%M%S`.tar.gz --remove-files --exclude=*.tar.gz . 2> /dev/null
- The command will begin to echo each file that is being archived.
- As it archives each file, it will remove it from the folder.
- The exclude statement in the command ensures that subsequent runs will not include the previous archive file in the current archive
- The 2> omits an expected error at the end of the command completion where it attempts to remove (rmdir) the current non-empty directory.
- A gzipped tar file is created in the format: <date and time>.tar.gz
Related Articles
AWS IAM Identity Center S3 - SAML Relying Party Configuration - RSA Ready Implementation Guide Number of Views AWS Workspaces - SAML My Page SSO Configuration - RSA Ready Implementation Guide Number of Views Amazon Web Services - SAML IDR SSO Configuration - RSA Ready Implementation Guide Number of Views How many incorrect password entries are permitted before being locked out of a Luna token? Number of Views Audit event REVIEW_DEFNITION is misspelled in RSA Identity Governance & Lifecycle Number of Views
Trending Articles
How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device RSA MFA Agent 2.3.6 for Microsoft Windows Installation and Administration Guide Unable to login to RSA Authentication Manager Security Console as super admin Authentication Manager Security Console and Operations Console Inaccessible After Certificate Update RSA Governance & Lifecycle Integration: Microsoft Azure Active Directory AD Summary
Don't see what you're looking for?
