VIEW: SYS.UNIFIED_AUDIT_TRAIL

Source

View Text - Preformatted

select
         act.component,
         sessionid,
         proxy_sessionid,
         os_user,
         host_name,
         terminal,
         instance_id,
         dbid,
         authentication_type,
         userid,
         proxy_userid,
         external_userid,
         global_userid,
         client_program_name,
         dblink_info,
         xs_user_name,
         xs_sessionid,
         entry_id,
         statement_id,
         cast(event_timestamp as timestamp with local time zone),
         act.name,
         return_code,
         os_process,
         transaction_id,
         scn,
         execution_id,
         obj_owner,
         obj_name,
         sql_text,
         sql_binds,
         application_contexts,
         client_identifier,
         new_owner,
         new_name,
         object_edition,
         system_privilege_used,
         spx.name,
         aom.name,
         object_privileges,
         role,
         target_user,
         excluded_user,
         excluded_schema,
         excluded_object,
         additional_info,
         unified_audit_policies,
         fga_policy_name,
         xs_inactivity_timeout,
         xs_entity_type,
         xs_target_principal_name,
         xs_proxy_user_name,
         xs_datasec_policy_name,
         xs_schema_name,
         xs_callback_event_type,
         xs_package_name,
         xs_procedure_name,
         xs_enabled_role,
         xs_cookie,
         xs_ns_name,
         xs_ns_attribute,
         xs_ns_attribute_old_val,
         xs_ns_attribute_new_val,
         dv_action_code,
         dv_action_name,
         dv_extended_action_code,
         dv_grantee,
         dv_return_code,
         dv_action_object_name,
         dv_rule_set_name,
         dv_comment,
         dv_factor_context,
         dv_object_status,
         ols_policy_name,
         ols_grantee,
         ols_max_read_label,
         ols_max_write_label,
         ols_min_write_label,
         ols_privileges_granted,
         ols_program_unit_name,
         ols_privileges_used,
         ols_string_label,
         ols_label_component_type,
         ols_label_component_name,
         ols_parent_group_name,
         ols_old_value,
         ols_new_value,
         rman_session_recid,
         rman_session_stamp,
         rman_operation,
         rman_object_type,
         rman_device_type,
         dp_text_parameters1,
         dp_boolean_parameters1,
         direct_path_num_columns_loaded
from gv$unified_audit_trail uview, all_unified_audit_actions act,
     system_privilege_map spx, stmt_audit_option_map aom
where   uview.action = act.action   (+)
  and - uview.system_privilege = spx.privilege (+)
  and   uview.audit_option = aom.option#   (+)
  and   uview.audit_type = act.type

View Text - HTML Formatted

SELECT ACT.COMPONENT
, SESSIONID
, PROXY_SESSIONID
, OS_USER
, HOST_NAME
, TERMINAL
, INSTANCE_ID
, DBID
, AUTHENTICATION_TYPE
, USERID
, PROXY_USERID
, EXTERNAL_USERID
, GLOBAL_USERID
, CLIENT_PROGRAM_NAME
, DBLINK_INFO
, XS_USER_NAME
, XS_SESSIONID
, ENTRY_ID
, STATEMENT_ID
, CAST(EVENT_TIMESTAMP AS TIMESTAMP WITH LOCAL TIME ZONE)
, ACT.NAME
, RETURN_CODE
, OS_PROCESS
, TRANSACTION_ID
, SCN
, EXECUTION_ID
, OBJ_OWNER
, OBJ_NAME
, SQL_TEXT
, SQL_BINDS
, APPLICATION_CONTEXTS
, CLIENT_IDENTIFIER
, NEW_OWNER
, NEW_NAME
, OBJECT_EDITION
, SYSTEM_PRIVILEGE_USED
, SPX.NAME
, AOM.NAME
, OBJECT_PRIVILEGES
, ROLE
, TARGET_USER
, EXCLUDED_USER
, EXCLUDED_SCHEMA
, EXCLUDED_OBJECT
, ADDITIONAL_INFO
, UNIFIED_AUDIT_POLICIES
, FGA_POLICY_NAME
, XS_INACTIVITY_TIMEOUT
, XS_ENTITY_TYPE
, XS_TARGET_PRINCIPAL_NAME
, XS_PROXY_USER_NAME
, XS_DATASEC_POLICY_NAME
, XS_SCHEMA_NAME
, XS_CALLBACK_EVENT_TYPE
, XS_PACKAGE_NAME
, XS_PROCEDURE_NAME
, XS_ENABLED_ROLE
, XS_COOKIE
, XS_NS_NAME
, XS_NS_ATTRIBUTE
, XS_NS_ATTRIBUTE_OLD_VAL
, XS_NS_ATTRIBUTE_NEW_VAL
, DV_ACTION_CODE
, DV_ACTION_NAME
, DV_EXTENDED_ACTION_CODE
, DV_GRANTEE
, DV_RETURN_CODE
, DV_ACTION_OBJECT_NAME
, DV_RULE_SET_NAME
, DV_COMMENT
, DV_FACTOR_CONTEXT
, DV_OBJECT_STATUS
, OLS_POLICY_NAME
, OLS_GRANTEE
, OLS_MAX_READ_LABEL
, OLS_MAX_WRITE_LABEL
, OLS_MIN_WRITE_LABEL
, OLS_PRIVILEGES_GRANTED
, OLS_PROGRAM_UNIT_NAME
, OLS_PRIVILEGES_USED
, OLS_STRING_LABEL
, OLS_LABEL_COMPONENT_TYPE
, OLS_LABEL_COMPONENT_NAME
, OLS_PARENT_GROUP_NAME
, OLS_OLD_VALUE
, OLS_NEW_VALUE
, RMAN_SESSION_RECID
, RMAN_SESSION_STAMP
, RMAN_OPERATION
, RMAN_OBJECT_TYPE
, RMAN_DEVICE_TYPE
, DP_TEXT_PARAMETERS1
, DP_BOOLEAN_PARAMETERS1
, DIRECT_PATH_NUM_COLUMNS_LOADED FROM GV$UNIFIED_AUDIT_TRAIL UVIEW
, ALL_UNIFIED_AUDIT_ACTIONS ACT
, SYSTEM_PRIVILEGE_MAP SPX
, STMT_AUDIT_OPTION_MAP AOM WHERE UVIEW.ACTION = ACT.ACTION (+)
AND - UVIEW.SYSTEM_PRIVILEGE = SPX.PRIVILEGE (+)
AND UVIEW.AUDIT_OPTION = AOM.OPTION# (+)
AND UVIEW.AUDIT_TYPE = ACT.TYPE