File system audit

From the perspective of the file system, there is no such operation as “copy from... to ...”. The application, which “copies” the file, as a matter of fact creates a new file and fills it with the content read (acquired) from any source: another disk, network, external device connected to the computer, text entered from the keyboard in the application window, etc. Therefore it is not possible to log information about the data source in DataGuard.