We are using Oracle 11g standard audit to syslog on a Unix server. I am seeing a small number of Oracle records that don't have trailing quotes in the syslog file, e.g.: 2013 Nov 6 03:00:01 hostname [local7.warning] Audit[30801972]: LENGTH : '203' ACTION :[55] 'alter session set remote_dependencies_mode = signature Note that there is an opening single quote before "alter" but not a closing trailing quote. Our DBA team doesn't know if this is 'normal' for Oracle audit records or not. Is it 'normal' for an audit record to be missing a trailing quote? I have not seen other records (non-Oracle) truncated by our syslog, so I am not suspecting syslog at this point. The records appear to be of differing lengths; i.e. they aren't all getting chopped off at a specific point. ... View more