Audit all does not capture truncate I want to capture truncate and drop operations on my table.

So i executed the following:

SQL&gt; select name, value from v$parameter where name like '%aud%';

NAME           VALUE
----           -----
audit_trail    DB


SQL&gt; create table audit_test (id number);

Table created.


SQL&gt; audit all on audit_test by access;

Audit succeeded.

SQL&gt; create table audit_test (id number);

Table created.


SQL&gt; audit all on audit_test by access;

Audit succeeded.


SQL&gt; truncate table audit_test;

Table truncated.


And the truncate does not exists in the dba_audit_Trail...

Thanks for help.
2 (+1) possible reasons:

0 - AUDIT ALL does not audit TRUNCATE operations. Use AUDIT TABLE BY ACCESS;

1 - You perform the above as SYS user. Actions performed by SYS are
    audited into files, under the location of audit_file_dest

2 - AUDIT (Traditional Auditing) 


  Track the issuance of SQL statements in subsequent user sessions. You
  can track the issuance of a specific SQL statement or of all SQL
  statements authorized by a particular system privilege. Auditing
  operations on SQL statements apply only to subsequent sessions, not to
  current sessions.


Try it in a new session.