VIEW: SYS.ALL_AUDITED_SYSTEM_ACTIONS

Source

View Text - Preformatted

select type, component, action, name from auditable_system_actions
/* 2. Some non configurable audited actions */
UNION ALL
select audit_type, component, action, name from
  (select distinct audit_type, component from v$unified_audit_record_format
                                         where component = 'Standard'),
  (select action, name from UNIFIED_MISC_AUDITED_ACTIONS)
/* 3. Non-configurable RMAN actions */
/* We select audit_type and component from v$unified_audit_record_format view
   and as we know all the RMAN's "action_name" are listed as "pl sql execute",
   we are selecting action number as 47 and including it as RMAN ACTION. So
   when we query unified_audit_trail, it would show RMAN ACTION as action_name
   instead of "pl sql execute". */
UNION ALL
select audit_type, component, action, name from
  (select distinct audit_type, component from v$unified_audit_record_format
                                         where component = 'RMAN_AUDIT'),
  (select 47 action, 'RMAN ACTION' name from dual)
/* 4. FGA audit actions */
UNION ALL
select audit_type, component, action, name from
  (select distinct audit_type, component from v$unified_audit_record_format
                                         where component = 'FineGrainedAudit'),
  (select  2 action, 'INSERT'  name from dual UNION ALL
   select  3 action, 'SELECT'  name from dual UNION ALL
   select  6 action, 'UPDATE'  name from dual UNION ALL
   select  7 action, 'DELETE'  name from dual UNION ALL
   select  189 action, 'MERGE' name from dual)

View Text - HTML Formatted

SELECT TYPE
, COMPONENT
, ACTION
, NAME
FROM AUDITABLE_SYSTEM_ACTIONS /* 2. SOME NON CONFIGURABLE AUDITED ACTIONS */ UNION ALL SELECT AUDIT_TYPE
, COMPONENT
, ACTION
, NAME FROM (SELECT DISTINCT AUDIT_TYPE
, COMPONENT
FROM V$UNIFIED_AUDIT_RECORD_FORMAT
WHERE COMPONENT = 'STANDARD')
, (SELECT ACTION
, NAME
FROM UNIFIED_MISC_AUDITED_ACTIONS) /* 3. NON-CONFIGURABLE RMAN ACTIONS */ /* WE SELECT AUDIT_TYPE
AND COMPONENT
FROM V$UNIFIED_AUDIT_RECORD_FORMAT VIEW
AND AS WE KNOW ALL THE RMAN'S "ACTION_NAME" ARE LISTED AS "PL SQL EXECUTE"
, WE ARE SELECTING ACTION NUMBER AS 47
AND INCLUDING IT AS RMAN ACTION. SO WHEN WE QUERY UNIFIED_AUDIT_TRAIL
, IT WOULD SHOW RMAN ACTION AS ACTION_NAME INSTEAD OF "PL SQL EXECUTE". */ UNION ALL SELECT AUDIT_TYPE
, COMPONENT
, ACTION
, NAME FROM (SELECT DISTINCT AUDIT_TYPE
, COMPONENT
FROM V$UNIFIED_AUDIT_RECORD_FORMAT
WHERE COMPONENT = 'RMAN_AUDIT')
, (SELECT 47 ACTION
, 'RMAN ACTION' NAME
FROM DUAL) /* 4. FGA AUDIT ACTIONS */ UNION ALL SELECT AUDIT_TYPE
, COMPONENT
, ACTION
, NAME FROM (SELECT DISTINCT AUDIT_TYPE
, COMPONENT
FROM V$UNIFIED_AUDIT_RECORD_FORMAT
WHERE COMPONENT = 'FINEGRAINEDAUDIT')
, (SELECT 2 ACTION
, 'INSERT' NAME
FROM DUAL UNION ALL SELECT 3 ACTION
, 'SELECT' NAME
FROM DUAL UNION ALL SELECT 6 ACTION
, 'UPDATE' NAME
FROM DUAL UNION ALL SELECT 7 ACTION
, 'DELETE' NAME
FROM DUAL UNION ALL SELECT 189 ACTION
, 'MERGE' NAME
FROM DUAL)