Querying and Reviewing Audited Activity
This section describes how to use Audit Analyzer to find and review the audited sessions and audit trail events in which you are interested. If you are the Master Auditor or been assigned an audit role, you can use Audit Analyzer to create and store queries that retrieve information from one or more audit stores. When you locate sessions or events of interest, you can review a summary of activity, play back all or part of the session, mark the session for follow-up, or change the status of the session.
The following topics are covered:
Predefined queries for audit sessions
Predefined queries for audit events
Predefined queries for reports
Creating queries for audit eventsOrganizing queries in custom folders
Exporting and importing query definitions
Displaying session information
Adding session reviewers without designating auditing roles
Changing the review status for audited sessions
