UNIFIED_AUDIT_TRAIL_EXCLUDE_COLUMNS

UNIFIED_AUDIT_TRAIL_EXCLUDE_COLUMNS controls whether columns containing sensitive data are populated in the UNIFIED_AUDIT_TRAIL view.

Property	Description
Parameter type	String
Syntax	UNIFIED_AUDIT_TRAIL_EXCLUDE_COLUMNS = NONE UNIFIED_AUDIT_TRAIL_EXCLUDE_COLUMNS = column [, column ]... Possible values for column: DP_CLOB_PARAMETERS1 RLS_INFO SQL_BINDS SQL_TEXT
Default value	NONE
Modifiable	ALTER SYSTEM
Modifiable in a PDB	Yes
Basic	No
Oracle RAC	Multiple instances can have different values.

You can use this parameter to prevent the unified audit trail from including certain detailed values that may be sensitive. Administrators should evaluate the trade‐off between data privacy and forensic completeness before setting this parameter.

By default, the value of this parameter is NONE, which instructs the database to populate all columns in UNIFIED_AUDIT_TRAIL.

If you set this parameter to one or more of the following column names, the database will stop populating those columns in UNIFIED_AUDIT_TRAIL:

• DP_CLOB_PARAMETERS1 - Displays parameters used by Data Pump export or import, in JSON format

• RLS_INFO - Displays virtual private database (VPD), Oracle Label Security (OLS), Real Application Security (RAS), and redaction policy names and predicates

• SQL_BINDS - Displays a list of bind variables associated with SQL_TEXT

• SQL_TEXT - Displays the text of the SQL being monitored

Note that column data that is present at the time you set this parameter is retained. Note: This parameter is available starting with Oracle AI Database 26ai, Release Update 23.6.

See Also: “UNIFIED_AUDIT_TRAIL”