Database Security Products (MOSC)

MOSC Banner

How the audit events are generated though the audit is disabled?

Oracle Database Enterprise

Version: 19.22

We are moving from standard auditing to unified auditing. Before we switched, we cleared the events recorded in the AUD$ table and disabled the auditing.

Now I have enabled the unified auditing in the database by following the document- Doc ID 1567006.1

However, the audit policies are not enabled but still can see the records inserted into the unified_audit_trail view. Below are the details, can someone please explain, how the events are recorded?

NAME                 TYPE    VALUE

------------------------------------ ----------- ------------------------------

audit_trail             string   NONE

SQL> select ENTITY_NAME, ENABLED_OPTION, SUCCESS, FAILURE from AUDIT_UNIFIED_ENABLED_POLICIES;

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center