While reviewing the Oracle Alert log, the following error (or something largely similar) is encountered:
Sun Feb 10 02:50:41 2013 AUD: OS Error = 1717 encountered while writing audit record
opidcl aborting process unknown ospid (7364) as a result of ORA-28056
Sun Feb 10 02:50:41 2013 AUD: OS Error = 1717 encountered while writing audit record
opidcl aborting process unknown ospid (7328) as a result of ORA-28056
AUD: OS Error = 1717 encountered while writing audit record
opidcl aborting process unknown ospid (7328) as a result of ORA-28056
This error typically indicates the Windows Event Logs are full and unable to add the audit events Oracle is generating.
The solution is typically adding additional space for audit logs, and or clearing the Windows Event logs.
Adjust the properties of the event log to allow overwriting, or allocate more space:
or
Windows Oracle Installation
This is an error involving the Windows Event Logging service, and should be corrected but will not impact DLP operation directly.
Microsoft Technet Article discussing how to Configure Windows Event Logs