Disable auditing of select statements

auditoracleselect

Somehow the auditing of select statements was enabled in our oracle database. We have several data processing apps that are generating upwards of 15 GB per day in the audit trail. Now we cannot turn it off because it seems that the noaudit command needs to match the original audit command, which of course no one knows. Does anyone know how to undo this? Can we turn off all auditing and then turn on the usual assortment of audit actions (alter, create, drop, etc.)? We have ran all kinds of noaduit permutations: “noaudit select table by USER;” and “noaudit select any table;” and yet it still posts select statements to the audit trail.

Best Answer

All enabled audit rules can be found in the below views:

Standard audit + FGA:

select * from dba_stmt_audit_opts;
select * from dba_priv_audit_opts;
select * from dba_obj_audit_opts;
select * from dba_audit_policies;

Unified audit (12c and above):

select * from audit_unified_enabled_policies;

Unified audit policy details:

select * from audit_unified_policies;

With the above, you can find whatever audit was enabled, and disable/modify as needed.

Related Question