Hello
You cannot recover from any table what has not been recorded in log files.
But you audit log should be able to automatically create new files and can only get stuck if file system gets full.
Check your parameters, make sur FN_AUDIT is correctly set and increase
rsau/max_diskspace/local
rsau/max_diskspace/per_day
rsau/max_diskspace/per_file
Regards
FN_AUDIT
The name must include eight (8) '+' in sequence (which the system substitutes with the current date) followed by (6) "#" (which the system replaces with a sequential number).
FN_AUDIT = AUDIT_++++++++_######.AUD
Name | Description |
DIR_AUDIT | Directory for security audit files |
FN_AUDIT | Name of security audit file |
rsau/enable | Enable Security Audit |
rsau/max_diskspace/local | Maximum space for security audit file |
rsau/max_diskspace/per_day | Maximum size of all security audit files per day |
rsau/max_diskspace/per_file | Maximum size of one single security audit file |
rsau/selection_slots | Number of selection slots for security audit |
rsau/user_selection | Defines the user selection method used inside kernel functions |
539404 - FAQ: Answers to questions about the Security Audit Log