Audit masks and audit instructions
As described in Audit masks, an audit mask specifies a set of events to be audited when a user performs them. Audit events are derived from a combination of user and global masks. Audit event codes and fields lists the set of auditable events. The set of events is fixed, but you use masks to specify only the ones that you are required to audit.
The following table lists four types of audit masks.
- Mask Type
- Mask Name
- Individual user masks
- username
- Default mask
- _default
- Global masks
- _require and _exclude
- Template masks
- _maskname
The following section describes the first three kinds of masks. For a description of template masks, see page Template masks.