I have a scenario here and need your kind advise / assistance to resolve
On one of the Oracle 10gR2 box I enabled the auditing by setting following parameter
I created a test user DB_TESTUSER
and set the STATEMENT AUDITING for the same
Audit select table, insert table, delete table, update table by DB_TESTUSER by access;
using toad, i connected with the DB_TESTUSER and before doing query/DML I just query the AUD$ table and found some records query some object in SYS schema.
To confirm I disconnected DB_TESTUSER, truncated the table. Just run “NOAUDIT CREATE SESSION by db_testuser” (even i didn’t enabled the create session auditing) and again connected with the db_testuser. Upon query of AUD$ I found more that 300 records all querying different SYS schema objects.
I truncated the table and using SQLPLUS connected using with the same user (db_testuser), query the AUD$ table and found 4 records querying SYS and SYSTEM objects.
Please see the attached xls sheet.
I need to know why these records are coming in audit log, is there any configuration to disable the logging. Pleas advise.