We have 4 oracle DB PRD servers and 1 UAT. We followed the below steps (the linux part) to config the audit logs.
All 5 servers have the same settings. We have touch the local6.log in /var/log in each server. However, we cannot see anything in the 4 PRD servers in local6.log meanwhile the UAT one could receive few auth logs then stopped by then.
Anyone have clue for troubleshooting? We have already restart the syslog service many times and verified the config.
Thanks a lot.