Hello,
I have a technical question concerning the setting of parameter audit_syslog_level:
we are recommended to audit events err, crit, alert and emerg.
But in parameter audit_syslog_level I can only define one combination, for example:
audit_syslog_level=local6.err
This I define in /etc/syslog.conf too:
local6.err /var/log/oraclaudit.log
Will this adjustment log critical, alert and emergency events too or just errors?
Syntax: AUDIT_SYSLOG_LEVEL = 'facility_clause.priority_clause'
facility_clause::=
{ USER | LOCAL[0 | 1 | 2 | 3 | 4 | 5 | 6 | 7] | SYSLOG | DAEMON | KERN | MAIL | AUTH | LPR | NEWS | UUCP | CRON }
priority_clause::=
{ NOTICE | INFO | DEBUG | WARNING | ERR | CRIT | ALERT | EMERG }
Regards,
Julia