There were INFO messages from the adminsrvr, recsrvr, distsrvr for each deployment filling up the /var/log/secure file. Editing this file and restarting each deployment have fixed it: /u01/app/ogg/ogg_19c/lib/utl/logging/ogg-audit.xml
Modified from <level value=”info”/> to <level value=”warn”/>
UPDATE: If you want to complete turn off the logging you can do this: <level value=“info”/> to <level value=”off”/>
Issue detected and resolved on version 19c. Make sure to restart the services after altering the file.
Changed from:
<?xml version="1.0"?>
<configuration>
<!--
/- ============================================================= -\
!- o g g - a u d i t . x m l -|
!- -|
!- Logging control file loaded for all OGG applications -|
!- ============================================================= -|
!- This file specifies the destination for audit messages -|
!- generated by all Oracle GoldenGate applications. -|
\- ============================================================= -/
! -->
<appender name="audit" class="SyslogAppender">
<level value="info"/>
<param name="Facility" value="Security"/>
<layout class="PatternLayout">
<param name="Pattern" value="%d{%Y-%m-%dT%H:%M:%S%z} %-5p| %m%n"/>
</layout>
</appender>
<logger name="audit" additivity="false">
<appender-ref name="audit"/>
<level value="info"/>
</logger>
</configuration>
Changed to:
<?xml version="1.0"?>
<configuration>
<!--
/- ============================================================= -\
!- o g g - a u d i t . x m l -|
!- -|
!- Logging control file loaded for all OGG applications -|
!- ============================================================= -|
!- This file specifies the destination for audit messages -|
!- generated by all Oracle GoldenGate applications. -|
\- ============================================================= -/
! -->
<appender name="audit" class="SyslogAppender">
<level value="warn"/>
<param name="Facility" value="Security"/>
<layout class="PatternLayout">
<param name="Pattern" value="%d{%Y-%m-%dT%H:%M:%S%z} %-5p| %m%n"/>
</layout>
</appender>
<logger name="audit" additivity="false">
<appender-ref name="audit"/>
<level value="warn"/>
</logger>
</configuration>
The fix worked Alex .. and we put /var in its own volume for our goldengate jump boxes in aws. Thank you very much
Thank you Anna, I am glad it worked for you.