I observe following auditing parameters set on my database.
audit_sys_operations parameter is set to FALSE but still I see SYS auditing files getting generated in $ORACLE_HOME/rdbms/audit
Interestingly in alert log, with every startup of the database I see the following comment
SYS auditing is disabled
Starting up ORACLE RDBMS Version: 188.8.131.52.0.
Why are sys auditing files getting generated then? Since there are some cronjobs scheduled to run every 15mins connected as sys, huge number of files are getting egnerated every day and I would not like this to get disabled.
Name Value DEFAULT ISSES_MOD ISSYS_MOD
transaction_auditing TRUE TRUE FALSE DEFERRED
transaction auditing records generated in the redo log