oracle sysaux表空间爆满清理unified auditing数据

1、手动清理统一审计记录

exec DBMS_AUDIT_MGMT.SET_LAST_ARCHIVE_TIMESTAMP(AUDIT_TRAIL_TYPE => DBMS_AUDIT_MGMT.AUDIT_TRAIL_UNIFIED, LAST_ARCHIVE_TIME => '10-DEC-21 08.35.33.819144 AM');

exec DBMS_AUDIT_MGMT.CLEAN_AUDIT_TRAIL( AUDIT_TRAIL_TYPE => DBMS_AUDIT_MGMT.AUDIT_TRAIL_UNIFIED);

2、设置清理统一审计记录自动任务

（1）创建每天1点刷新LAST_ARCHIVE_TIME的job（保留审计天数：7天）

exec DBMS_SCHEDULER.create_job(job_name =>'audit_last_archive_time',job_type=>'PLSQL_BLOCK',job_action=>'BEGIN DBMS_AUDIT_MGMT.SET_LAST_ARCHIVE_TIMESTAMP(DBMS_AUDIT_MGMT.AUDIT_TRAIL_UNIFIED,TRUNC(SYSTIMESTAMP)-7);END;',start_date=>SYSTIMESTAMP,repeat_interval => 'freq=daily; byhour=1; byminute=0; bysecond=0;',enabled => TRUE);

查看当前LAST_ARCHIVE_TIME：

select AUDIT_TRAIL,LAST_ARCHIVE_TS from DBA_AUDIT_MGMT_LAST_ARCH_TS;

（2）创建每隔24小时purge审计job：

exec dbms_audit_mgmt.create_purge_job(audit_trail_type=> DBMS_AUDIT_MGMT.AUDIT_TRAIL_UNIFIED,audit_trail_purge_interval=>24,audit_trail_purge_name=>'audit_trail_pj',use_last_arch_timestamp=>TRUE);

查看创建的清理job的属性（默认创建后是enable）

col job_name for a30

col JOB_FREQUENCY for a40

select JOB_NAME,JOB_STATUS,AUDIT_TRAIL,JOB_FREQUENCY from DBA_AUDIT_MGMT_CLEANUP_JOBS;

来源：https://blog.csdn.net/jnrjian/article/details/128253496