Database Security Products (MOSC)

MOSC Banner

How to Disable Oracle Database Auditing (Windows Event Id 34)

edited Mar 21, 2025 6:13PM in Database Security Products (MOSC) 1 commentAnswered

Oracle Standard DB 19c incl. RMAN.

I can't disable those audit events, no matter what i tried.

I just logon with an ordinary user:

C:\oracle_database\ora19\bin>rman target dfs_report/<pw>

This then immediately creates 6 Windows event under the Application log.

Audit trail: LENGTH: '284' ACTION :[7] 'CONNECT' DATABASE USER:[1] '/' PRIVILEGE :[6] 'SYSDBA' CLIENT USER:[12] 'AVL01\a16d83' CLIENT TERMINAL:[11] 'DEBTCST8777' STATUS:[1] '0' DBID:[10] '2457785906' SESSIONID:[10] '4294967295' USERHOST:[17] 'AVL01\DEBTCST8777' CLIENT ADDRESS:[0] '' ACTION NUMBER:[3] '100' .

All 6 events have the same content. It almost looks like a bug, especially since the 'SYSDBA' privilege is mentioned in the events.

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center