2.426 UNIFIED_AUDIT_TRAIL_EXCLUDE_COLUMNS

UNIFIED_AUDIT_TRAIL_EXCLUDE_COLUMNS controls whether columns containing sensitive data are populated in the UNIFIED_AUDIT_TRAIL view.

Property Description

Parameter type

String

Syntax

UNIFIED_AUDIT_TRAIL_EXCLUDE_COLUMNS = NONE

UNIFIED_AUDIT_TRAIL_EXCLUDE_COLUMNS = column [, column ]...

Possible values for column:

  • DP_CLOB_PARAMETERS1

  • RLS_INFO

  • SQL_BINDS

  • SQL_TEXT

Default value

NONE

Modifiable

ALTER SYSTEM

Modifiable in a PDB

Yes

Basic

No

Oracle RAC

Multiple instances can have different values.

You can use this parameter to prevent the unified audit trail from including certain detailed values that may be sensitive. Administrators should evaluate the trade‑off between data privacy and forensic completeness before setting this parameter.

By default, the value of this parameter is NONE, which instructs the database to populate all columns in UNIFIED_AUDIT_TRAIL.

If you set this parameter to one or more of the following column names, the database will stop populating those columns in UNIFIED_AUDIT_TRAIL:

  • DP_CLOB_PARAMETERS1 - Displays parameters used by Data Pump export or import, in JSON format

  • RLS_INFO - Displays virtual private database (VPD), Oracle Label Security (OLS), Real Application Security (RAS), and redaction policy names and predicates

  • SQL_BINDS - Displays a list of bind variables associated with SQL_TEXT

  • SQL_TEXT - Displays the text of the SQL being monitored

Note that column data that is present at the time you set this parameter is retained.

Note:

This parameter is available starting with Oracle AI Database 26ai, Release Update 23.6.

See Also:

"UNIFIED_AUDIT_TRAIL"