Solaris Operating System Audit Events

Solaris operating system audit events can include events such as AUE_AT_CREATE and AUE_AT_DELETE.

This audit event names used in the Solaris Operating System to their equivalent values in the command_class and target_type fields in the audit record. You can use the audit events mapped here to create custom audit reports using other Oracle Database reporting products or third-party tools.

See Also: Database Schemas for data warehouse details that may be useful in designing your own reports.

Table 1 lists the Solaris audit events and the equivalent events.

Table 1 Solaris Audit Events

Source Event Command Class Target Type
AUE_AT_CREATE CREATE AT JOB
AUE_AT_DELETE DELETE AT JOB
AUE_AUDITON_SETSMASK SET AUDIT SESSION
AUE_NDMP_RESTORE RESTORE BACKUP LOCATION
AUE_RSHD EXECUTE COMMAND
AUE_PROCESSOR_BIND BIND CPU
AUE_P_ONLINE CONTROL CPU
AUE_CRON_INVOKE EXECUTE CRON JOB
AUE_CRONTAB_CREATE CREATE CRON JOB
AUE_CRONTAB_DELETE DELETE CRON JOB
AUE_CRONTAB_MOD SET CRON JOB
AUE_IOCTL CONTROL DEVICE
AUE_ATTACH MOUNT DEVICE
AUE_DA_ALLOCATE ALLOCATE DEVICE
AUE_DA_ALLOCATE_FORCED ALLOCATE DEVICE
AUE_DA_DEALLOCATE DEALLOCATE DEVICE
AUE_DA_DEALLOCATE_FORCED DEALLOCATE DEVICE
AUE_DA_LIST_DEVICES LIST DEVICE
AUE_DETACH UNMOUNT DEVICE
AUE_REMOVE EJECT DEVICE
AUE_SMSERVERD CONTROL DEVICE
AUE_TPM_CERTIFYSELFTEST CONTROL DEVICE
AUE_TPM_CONTINUESELFTEST CONTROL DEVICE
AUE_TPM_DISABLEFORCECLEAR CONTROL DEVICE
AUE_TPM_DISABLEOWNERCLEAR CONTROL DEVICE
AUE_TPM_FIELDUPGRADE CONTROL DEVICE
AUE_TPM_FORCECLEAR CONTROL DEVICE
AUE_TPM_OWNERCLEAR CONTROL DEVICE
AUE_TPM_OWNERSETDISABLE CONTROL DEVICE
AUE_TPM_PHYSICALDEACTIVATE CONTROL DEVICE
AUE_TPM_PHYSICALDISABLE CONTROL DEVICE
AUE_TPM_PHYSICALENABLE CONTROL DEVICE
AUE_TPM_PHYSICALPRESENCE CONTROL DEVICE
AUE_TPM_RESETLOCKVALUE CONTROL DEVICE
AUE_TPM_SELFTESTFULL CONTROL DEVICE
AUE_TPM_SETOPERATORAUTH CONTROL DEVICE
AUE_TPM_SETOWNERINSTALL CONTROL DEVICE
AUE_TPM_SETTEMPDEACTIVATED CONTROL DEVICE
AUE_TPM_TAKEOWNERSHIP CONTROL DEVICE
AUE_MKDIR CREATE DIRECTORY
AUE_RMDIR DELETE DIRECTORY
AUE_FT_MKDIR CREATE DIRECTORY
AUE_FT_RMDIR DELETE DIRECTORY
AUE_DOORFS_DOOR_CALL EXECUTE DOOR HANDLER
AUE_DOORFS_DOOR_CREATE CREATE DOOR HANDLER
AUE_DOORFS_DOOR_RETURN EXIT DOOR HANDLER
AUE_DOORFS_DOOR_REVOKE DELETE DOOR HANDLER
AUE_ACCESS CHECK FILE
AUE_ACLSET CONTROL FILE
AUE_CHMOD SET FILE
AUE_CHOWN SET FILE
AUE_CLOSE CLOSE FILE
AUE_CREAT CREATE FILE
AUE_EXEC EXECUTE FILE
AUE_EXECVE EXECUTE FILE
AUE_FACCESSAT CHECK FILE
AUE_FACLSET SET FILE
AUE_FCHMOD SET FILE
AUE_FCHOWN SET FILE
AUE_FCHOWNAT SET FILE
AUE_FCNTL CONTROL FILE
AUE_FSTATAT GET FILE
AUE_FSTATFS GET FILE
AUE_FUSERS GET FILE
AUE_FUTIMESAT SET FILE
AUE_INST_SYNC WRITE FILE
AUE_LCHOWN SET FILE
AUE_LSTAT GET FILE
AUE_MMAP MAP FILE
AUE_OPENAT_R OPEN FILE
AUE_OPENAT_RC OPEN FILE
AUE_OPENAT_RT OPEN FILE
AUE_OPENAT_RTC OPEN FILE
AUE_OPENAT_RW OPEN FILE
AUE_OPENAT_RWC OPEN FILE
AUE_OPENAT_RWT OPEN FILE
AUE_OPENAT_RWTC OPEN FILE
AUE_OPENAT_W OPEN FILE
AUE_OPENAT_WC OPEN FILE
AUE_OPENAT_WT OPEN FILE
AUE_OPENAT_WTC OPEN FILE
AUE_OPEN_E OPEN FILE
AUE_OPEN_R OPEN FILE
AUE_OPEN_RC OPEN FILE
AUE_OPEN_RT OPEN FILE
AUE_OPEN_RTC OPEN FILE
AUE_OPEN_RW OPEN FILE
AUE_OPEN_RWC OPEN FILE
AUE_OPEN_RWT OPEN FILE
AUE_OPEN_RWTC OPEN FILE
AUE_OPEN_S OPEN FILE
AUE_OPEN_W OPEN FILE
AUE_OPEN_WC OPEN FILE
AUE_OPEN_WT OPEN FILE
AUE_OPEN_WTC OPEN FILE
AUE_PATHCONF GET FILE
AUE_PFEXEC EXECUTE FILE
AUE_RENAME RENAME FILE
AUE_RENAMEAT RENAME FILE
AUE_STAT CHECK FILE
AUE_STATFS CHECK FILE
AUE_UNLINK UNLINK FILE
AUE_UNLINKAT UNLINK FILE
AUE_UTIME SET FILE
AUE_UTIMES SET FILE
AUE_WRITE WRITE FILE
AUE_FILE_COPY COPY FILE
AUE_FILE_RELABEL LABEL FILE
AUE_PRINT_REQUEST PRINT FILE
AUE_PRINT_REQUEST_PS PRINT FILE
AUE_PRINT_REQUEST_UNLABELED PRINT FILE
AUE_PRINT_REQUEST_NOBANNER PRINT FILE
AUE_FT_CHMOD SET FILE
AUE_FT_CHOWN SET FILE
AUE_FT_GET RECEIVE FILE
AUE_FT_PUT SEND FILE
AUE_FT_REMOVE DELETE FILE
AUE_FT_RENAME RENAME FILE
AUE_FT_UTIMES SET FILE
AUE_NDMP_BACKUP BACKUP FILE
AUE_PROF_CMD EXECUTE FILE
AUE_SUDO EXECUTE FILE
AUE_VSCAN_QUARANTINE QUARANTINE FILE
AUE_PORTFS_ASSOCIATE BIND FILE PORT
AUE_PORTFS_DISSOCIATE UNBIND FILE PORT
AUE_MOUNT MOUNT FILE SYSTEM
AUE_STATVFS CHECK FILE SYSTEM
AUE_UMOUNT UNMOUNT FILE SYSTEM
AUE_UMOUNT2 UNMOUNT FILE SYSTEM
AUE_MOUNTD_MOUNT MOUNT FILE SYSTEM
AUE_MOUNTD_UMOUNT UNMOUNT FILE SYSTEM
AUE_UADMIN_REMOUNT REMOUNT FILE SYSTEM
AUE_UADMIN_SWAPCTL CONTROL FILE SYSTEM
AUE_FT_START OPEN FILE TRANSFER SESSION
AUE_FT_STOP CLOSE FILE TRANSFER SESSION
AUE_HOTPLUG_SET SET HOTPLUG CONNECTOR
AUE_HOTPLUG_INSTALL INSTALL HOTPLUG PORT
AUE_HOTPLUG_STATE SET HOTPLUG PORT
AUE_HOTPLUG_UNINSTALL UNINSTALL HOTPLUG PORT
AUE_ILB_CREATE_HEALTHCHECK CREATE ILB HEALTHCHECK OBJECT
AUE_ILB_DELETE_HEALTHCHECK DELETE ILB HEALTHCHECK OBJECT
AUE_ILB_CREATE_RULE CREATE ILB RULE
AUE_ILB_DELETE_RULE DELETE ILB RULE
AUE_ILB_DISABLE_RULE DISABLE ILB RULE
AUE_ILB_ENABLE_RULE ENABLE ILB RULE
AUE_ILB_DISABLE_SERVER DISABLE ILB SERVER
AUE_ILB_ENABLE_SERVER ENABLE ILB SERVER
AUE_ILB_REMOVE_SERVER DELETE ILB SERVER
AUE_ILB_ADD_SERVER ADD ILB SERVER GROUP
AUE_ILB_CREATE_SERVERGROUP CREATE ILB SERVER GROUP
AUE_ILB_DELETE_SERVERGROUP DELETE ILB SERVER GROUP
AUE_INETD_CONNECT CONNECT INET SERVICE
AUE_INETD_COPYLIMIT RESTRICT INET SERVICE
AUE_INETD_FAILRATE DISABLE INET SERVICE
AUE_INETD_RATELIMIT RESTRICT INET SERVICE
AUE_PF_POLICY_ADDRULE ADD IPSEC POLICY
AUE_PF_POLICY_ALGS UPDATE IPSEC POLICY
AUE_PF_POLICY_CLONE COPY IPSEC POLICY
AUE_PF_POLICY_DELRULE DELETE IPSEC POLICY
AUE_PF_POLICY_FLIP FLIP IPSEC POLICY
AUE_PF_POLICY_FLUSH CLEAR IPSEC POLICY
AUE_KADMIND_AUTH EXECUTE KERBEROS OPERATION
AUE_KADMIND_UNAUTH EXECUTE KERBEROS OPERATION
AUE_KRB5KDC_AS_REQ EXECUTE KERBEROS SERVICE
AUE_KRB5KDC_TGS_REQ EXECUTE KERBEROS SERVICE
AUE_KRB5KDC_TGS_REQ_2NDTKTMM EXECUTE KERBEROS SERVICE
AUE_KRB5KDC_TGS_REQ_ALT_TGT EXECUTE KERBEROS SERVICE
AUE_MODADDMAJ BIND KERNEL MODULE
AUE_MODDEVPLCY SET KERNEL MODULE
AUE_MODLOAD LOAD KERNEL MODULE
AUE_MODUNLOAD UNLOAD KERNEL MODULE
AUE_CONFIGKSSL CONTROL KERNEL SSL PORT
AUE_LINK CREATE LINK
AUE_READLINK READ LINK
AUE_FT_SYMLINK CREATE LINK
AUE_MEMCNTL CONTROL MEMORY
AUE_MUNMAP UNMAP MEMORY OBJECT
AUE_MSGCTL CONTROL MESSAGE QUEUE
AUE_MSGCTL_RMID DELETE MESSAGE QUEUE
AUE_MSGCTL_SET SET MESSAGE QUEUE
AUE_MSGCTL_STAT CHECK MESSAGE QUEUE
AUE_MSGGET GET MESSAGE QUEUE
AUE_MSGRCV RECEIVE MESSAGE QUEUE
AUE_MSGSND SEND MESSAGE QUEUE
AUE_NDMP_CONNECT CONNECT NDMP CLIENT
AUE_NDMP_DISCONNECT DISCONNECT NDMP CLIENT
AUE_NETCFG_REMOVE DELETE NETCFG PROFILE
AUE_NETCFG_UPDATE SET NETCFG PROFILE
AUE_NWAM_DISABLE DISABLE NETCFG PROFILE
AUE_NWAM_ENABLE ENABLE NETCFG PROFILE
AUE_PIPE CREATE PIPE
AUE_AUDITON_GETCAR GET PROCESS
AUE_AUDITON_GETCWD GET PROCESS
AUE_AUDITON_GETPINFO GET PROCESS
AUE_AUDITON_GETPINFO_ADDR GET PROCESS
AUE_AUDITON_SETPMASK SET PROCESS
AUE_CHDIR SET PROCESS
AUE_CHROOT SET PROCESS
AUE_CORE DUMP PROCESS
AUE_EXIT EXIT PROCESS
AUE_FCHDIR SET PROCESS
AUE_FCHROOT SET PROCESS
AUE_FORK CREATE PROCESS
AUE_FORK1 CREATE PROCESS
AUE_FORKALL CREATE PROCESS
AUE_GETAUDIT GET PROCESS
AUE_GETAUDIT_ADDR GET PROCESS
AUE_GETAUID GET PROCESS
AUE_KILL SIGNAL PROCESS
AUE_NICE SET PROCESS
AUE_SETAUDIT SET PROCESS
AUE_SETAUDIT_ADDR SET PROCESS
AUE_SETAUID SET PROCESS
AUE_SETEGID SET PROCESS
AUE_SETEUID SET PROCESS
AUE_SETGID SET PROCESS
AUE_SETGROUPS SET PROCESS
AUE_SETPGID SET PROCESS
AUE_SETPGRP SET PROCESS
AUE_SETPPRIV SET PROCESS
AUE_SETREGID SET PROCESS
AUE_SETREUID SET PROCESS
AUE_SETSID SET PROCESS
AUE_SETUID SET PROCESS
AUE_SHMAT BIND PROCESS
AUE_SHMDT UNBIND PROCESS
AUE_SIGQUEUE SIGNAL PROCESS
AUE_VFORK CREATE PROCESS
AUE_REXD EXECUTE RPC
AUE_REXECD EXECUTE RPC
AUE_SCREENLOCK LOCK SCREEN
AUE_SCREENUNLOCK UNLOCK SCREEN
AUE_SEMCTL CONTROL SEMAPHORE
AUE_SEMCTL_GETALL GET SEMAPHORE
AUE_SEMCTL_RMID DELETE SEMAPHORE
AUE_SEMCTL_SET SET SEMAPHORE
AUE_SEMCTL_SETALL SET SEMAPHORE
AUE_SEMCTL_SETVAL SET SEMAPHORE
AUE_SEMCTL_STAT CHECK SEMAPHORE
AUE_SEMGET GET SEMAPHORE
AUE_SEMOP CONTROL SEMAPHORE
AUE_SHMCTL CONTROL SHARED MEMORY
AUE_SHMCTL_RMID UNBIND SHARED MEMORY
AUE_SHMCTL_SET SET SHARED MEMORY
AUE_SHMCTL_STAT CHECK SHARED MEMORY
AUE_SHMGET GET SHARED MEMORY
AUE_SMF_ANNOTATION ANNOTATE SMF ACTION
AUE_SMF_MILESTONE ENABLE SMF MILESTONE
AUE_SMF_CREATE_PROP CREATE SMF PROPERTY
AUE_SMF_CREATE_NPG CREATE SMF PROPERTY GROUP
AUE_SMF_CREATE_PG CREATE SMF PROPERTY GROUP
AUE_SMF_CLEAR RESET SMF SERVICE
AUE_SMF_CREATE CREATE SMF SERVICE
AUE_SMF_DEGRADE DEGRADE SMF SERVICE
AUE_SMF_DELCUST DELETE SMF SERVICE
AUE_SMF_DELETE DELETE SMF SERVICE
AUE_SMF_DISABLE DISABLE SMF SERVICE
AUE_SMF_ENABLE ENABLE SMF SERVICE
AUE_SMF_IMMEDIATE_DEGRADE DEGRADE SMF SERVICE
AUE_SMF_IMMEDIATE_MAINTENANCE MAINTAIN SMF SERVICE
AUE_SMF_IMMTMP_MAINTENANCE MAINTAIN SMF SERVICE
AUE_SMF_MAINTENANCE MAINTAIN SMF SERVICE
AUE_SMF_REFRESH REFRESH SMF SERVICE
AUE_SMF_REMOVE DELETE SMF SERVICE
AUE_SMF_RESTART RESTART SMF SERVICE
AUE_SMF_TMP_DISABLE DISABLE SMF SERVICE
AUE_SMF_TMP_ENABLE ENABLE SMF SERVICE
AUE_SMF_TMP_MAINTENANCE MAINTAIN SMF SERVICE
AUE_SMF_UNMASK UNMASK SMF SERVICE
AUE_SMF_REMOVE_BUNDLE DELETE SMF SERVICE BUNDLE
AUE_SMF_CHANGE_PROP SET SMF SERVICE PROPERTY
AUE_SMF_DELCUST_PROP DELETE SMF SERVICE PROPERTY
AUE_SMF_DELETE_PROP DELETE SMF SERVICE PROPERTY
AUE_SMF_READ_PROP READ SMF SERVICE PROPERTY
AUE_SMF_REMOVE_PROP DELETE SMF SERVICE PROPERTY
AUE_SMF_UNMASK_PROP UNMASK SMF SERVICE PROPERTY
AUE_SMF_DELCUST_PG DELETE SMF SERVICE PROPERTY GROUP
AUE_SMF_DELETE_NPG DELETE SMF SERVICE PROPERTY GROUP
AUE_SMF_DELETE_PG DELETE SMF SERVICE PROPERTY GROUP
AUE_SMF_REMOVE_PG DELETE SMF SERVICE PROPERTY GROUP
AUE_SMF_UNMASK_PG UNMASK SMF SERVICE PROPERTY GROUP
AUE_SMF_ATTACH_SNAP ATTACH SMF SNAPSHOT
AUE_SMF_CREATE_SNAP CREATE SMF SNAPSHOT
AUE_SMF_DELETE_SNAP DELETE SMF SNAPSHOT
AUE_ACCEPT ACCEPT SOCKET
AUE_ACCEPT BIND SOCKET
AUE_CONNECT CONNECT SOCKET
AUE_RECV RECEIVE SOCKET
AUE_RECVFROM RECEIVE SOCKET
AUE_RECVMSG RECEIVE SOCKET
AUE_SEMCTL_GETNCNT GET SOCKET
AUE_SEMCTL_GETPID GET SOCKET
AUE_SEMCTL_GETVAL CHECK SOCKET
AUE_SEMCTL_GETZCNT CHECK SOCKET
AUE_SEND SEND SOCKET
AUE_SENDMSG SEND SOCKET
AUE_SENDTO SEND SOCKET
AUE_SETSOCKOPT SET SOCKET
AUE_SHUTDOWN SHUTDOWN SOCKET
AUE_SOCKACCEPT ACCEPT SOCKET
AUE_SOCKCONNECT CONNECT SOCKET
AUE_SOCKET CREATE SOCKET
AUE_SOCKRECEIVE RECEIVE SOCKET
AUE_SOCKSEND SEND SOCKET
AUE_SOCKCONFIG CONTROL SOCKET NAME
AUE_MKNOD CREATE SPECIAL FILE
AUE_GETMSG READ STREAM
AUE_GETPMSG READ STREAM
AUE_PUTMSG SEND STREAM
AUE_PUTPMSG SEND STREAM
AUE_SYMLINK CREATE SYMBOLIC LINK
AUE_SYSTEMBOOT BOOT SYSTEM
AUE_ACCT CONTROL SYSTEM PROPERTY
AUE_ADJTIME SET SYSTEM PROPERTY
AUE_AUDITON_GETAMASK GET SYSTEM PROPERTY
AUE_AUDITON_GETCLASS GET SYSTEM PROPERTY
AUE_AUDITON_GETCOND GET SYSTEM PROPERTY
AUE_AUDITON_GETKAUDIT GET SYSTEM PROPERTY
AUE_AUDITON_GETKMASK GET SYSTEM PROPERTY
AUE_AUDITON_GETSTAT GET SYSTEM PROPERTY
AUE_AUDITON_GPOLICY GET SYSTEM PROPERTY
AUE_AUDITON_GQCTRL GET SYSTEM PROPERTY
AUE_AUDITON_SETAMASK SET SYSTEM PROPERTY
AUE_AUDITON_SETCLASS SET SYSTEM PROPERTY
AUE_AUDITON_SETCOND SET SYSTEM PROPERTY
AUE_AUDITON_SETKAUDIT SET SYSTEM PROPERTY
AUE_AUDITON_SETKMASK SET SYSTEM PROPERTY
AUE_AUDITON_SETSTAT RESET SYSTEM PROPERTY
AUE_AUDITON_SPOLICY SET SYSTEM PROPERTY
AUE_AUDITON_SQCTRL SET SYSTEM PROPERTY
AUE_CLOCK_SETTIME SET SYSTEM PROPERTY
AUE_CRYPTOADM CONTROL SYSTEM PROPERTY
AUE_MODADDPRIV CONTROL SYSTEM PROPERTY
AUE_PRIOCNTLSYS CONTROL SYSTEM PROPERTY
AUE_SETRLIMIT SET SYSTEM PROPERTY
AUE_STIME SET SYSTEM PROPERTY
AUE_SYSINFO CONTROL SYSTEM PROPERTY
AUE_CPU_ONDEMAND SET SYSTEM PROPERTY
AUE_CPU_PERFORMANCE SET SYSTEM PROPERTY
AUE_CPU_THRESHOLD SET SYSTEM PROPERTY
AUE_UADMIN_CONFIG SET SYSTEM PROPERTY
AUE_ENTERPROM ENTER SYSTEM RESOURCE
AUE_EXITPROM EXIT SYSTEM RESOURCE
AUE_NTP_ADJTIME SET SYSTEM RESOURCE
AUE_LABELSYS_TNMLP CONTROL TRUSTED NETWORK MULTI-LEVEL PORT
AUE_LABELSYS_TNRH CONTROL TRUSTED NETWORK REMOTE HOST
AUE_LABELSYS_TNRHTP CONTROL TRUSTED NETWORK REMOTE HOST TEMPLATE
AUE_AUDITON_SETUMASK SET USER
AUE_ADMIN_AUTHENTICATE AUTHENTICATE USER
AUE_FTPD LOGON USER
AUE_FTPD_LOGOUT LOGOFF USER
AUE_LOGIN LOGON USER
AUE_LOGOUT LOGOFF USER
AUE_NEWGRP_LOGIN LOGON USER
AUE_PASSWD SET USER
AUE_RLOGIN LOGON USER
AUE_ROLE_LOGIN LOGON USER
AUE_ROLE_LOGOUT LOGOFF USER
AUE_SMBD_LOGOFF LOGOFF USER
AUE_SMBD_SESSION LOGON USER
AUE_SSH LOGON USER
AUE_SU LOGON USER
AUE_SU_LOGOUT LOGOFF USER
AUE_TELNET LOGON USER
AUE_ZLOGIN LOGON USER
AUE_DLADM_CREATE_SECOBJ CREATE WIFI SECURITY OBJECT
AUE_DLADM_DELETE_SECOBJ DELETE WIFI SECURITY OBJECT
AUE_XCONNECT CONNECT X CLIENT
AUE_XDISCONNECT DISCONNECT X CLIENT
AUE_POOL_EXPORT EXPORT ZFS POOL
AUE_POOL_IMPORT IMPORT ZFS POOL
AUE_BRANDSYS CONTROL ZONE
AUE_ZONE_STATE SET ZONE
AUE_HALT_SOLARIS SHUTDOWN None
AUE_INIT_SOLARIS SET None
AUE_POWEROFF_SOLARIS SHUTDOWN None
AUE_REBOOT_SOLARIS REBOOT None
AUE_SHUTDOWN_SOLARIS SHUTDOWN None
AUE_UADMIN_DUMP DUMP None
AUE_UADMIN_FREEZE SUSPEND None
AUE_UADMIN_FTRACE TRACE None
AUE_UADMIN_REBOOT REBOOT None
AUE_UADMIN_SHUTDOWN SHUTDOWN None
AUE_UADMIN_THAW RESUME None