How to Disable Oracle Database Auditing (Windows Event Id 34)
Oracle Standard DB 19c incl. RMAN.
I can't disable those audit events, no matter what i tried.
I just logon with an ordinary user:
C:\oracle_database\ora19\bin>rman target dfs_report/<pw>
This then immediately creates 6 Windows event under the Application log.
Audit trail: LENGTH: '284' ACTION :[7] 'CONNECT' DATABASE USER:[1] '/' PRIVILEGE :[6] 'SYSDBA' CLIENT USER:[12] 'AVL01\a16d83' CLIENT TERMINAL:[11] 'DEBTCST8777' STATUS:[1] '0' DBID:[10] '2457785906' SESSIONID:[10] '4294967295' USERHOST:[17] 'AVL01\DEBTCST8777' CLIENT ADDRESS:[0] '' ACTION NUMBER:[3] '100' .
All 6 events have the same content. It almost looks like a bug, especially since the 'SYSDBA' privilege is mentioned in the events.