When I query theDBA_AUDIT_TRAILtable I only getSESSION RECin theACTION_NAMEcolumen.
I was expectingSELECT,INSERT,DELETEetc.What am I doing wrong?
What doesSESSION RECmean?
This means you setAUDIT .. BY SESSIONinstead ofAUDIT .. BY ACCESS. When you useBY SESSION, theACTION_NAMEcontainsSESSION REC, and the actual actions performed by that session are stored in theSES_ACTIONScolumn as characters. For example the value---------S------means there was a select on the object, as each character represents the following actions in order:
ALTER, AUDIT, COMMENT, DELETE, GRANT, INDEX, INSERT, LOCK, RENAME, SELECT, UPDATE, REFERENCES, and EXECUTE