When an audit record is extracted from the audit log, each
record has one of the formats shown in the following tables. Each
table is preceded by a sample record.
The description of each item in the record is shown one row at
a time in the associated table. Each item is shown in the table in
the same order as it is output in the delimited file after the extract
operation.
Note: - Depending on the audit event, not all fields in the
audit records will have values. When there is no values in the field,
the field will not be shown in the audit output.
- Some fields such as "Access Attempted" are stored in the
delimited ASCII format as bit maps. In this flat report file, however,
these fields appear as a set of strings representing the bit map values.