ORA-09925: Unable to create audit trail fileLinux-x86_64 Error: 28: No space left on deviceAdditional information: 9925ORA-01075: you are currently logged on

While logging to database as sysdba, due to lack of space on a mount point where audit records are stored, the database is unable to write the audit records in disk.

[oracle@dpprod ~]$ sqlplus / as sysdba

SQL*Plus: Release 12.1.0.2.0 Production on Wed Feb 9 21:07:21 2022

Copyright (c) 1982, 2014, Oracle.  All rights reserved.

ERROR:
ORA-09925: Unable to create audit trail file
Linux-x86_64 Error: 28: No space left on device
Additional information: 9925
ORA-01075: you are currently logged on

No files can be deleted from the mount point as all the files are important. In this case, as a quick workaround, i taken tar ball of diag directory to a different location and deleted the existing diag directory to release some space for login

[oracle@dpprod oracle]$ tar -czvf /data01/diag.tar diag/

After release of space, i was able to log in. As we already should be aware that this 12cR1 and sys audit logging cannot be disabled manually.

[oracle@dpprod oracle]$ sqlplus / as sysdba

SQL*Plus: Release 12.1.0.2.0 Production on Wed Feb 9 21:13:06 2022

Copyright (c) 1982, 2014, Oracle.  All rights reserved.


Connected to:
Oracle Database 12c Enterprise Edition Release 12.1.0.2.0 - 64bit Production
With the Partitioning, OLAP, Advanced Analytics and Real Application Testing options

SQL> 

Even if i disable audit, still audit records were generated due to SYS or SYSDBA log auditing on the database

SQL> show parameter audit

NAME                                 TYPE        VALUE
------------------------------------ ----------- ------------------------------
audit_file_dest                      string      /u01/app/oracle/admin/dpprod/a
                                                 dump
audit_sys_operations                 boolean     FALSE
audit_syslog_level                   string
audit_trail                          string      NONE
unified_audit_sga_queue_size         integer     1048576

It is better to keep an eye on the SYS sessions connecting to the database frequently like any automatic jobs from application or RMAN jobs or STATS job etc and clear those sessions to reduce the unnecessary audit generations

Leave a Reply