Oracle 11.2.0.3 Std. Ed. ONE - 64bit
Oracle Linux 5.6 64-bit
Recently expanded what is being audited, and now I see a lot of audit trail entries for action_name='SESSION REC'.
Everything I've read says this is for statements that are audited 'by session' instead of 'by access'. Yet I find nothing being audited 'by session'.
SQL> select distinct failure from dba_priv_audit_opts;
FAILURE
----------
BY ACCESS
1 row selected.
SQL> select distinct success from dba_priv_audit_opts;
SUCCESS
----------
BY ACCESS
1 row selected.
SQL> select distinct failure from dba_stmt_audit_opts;
FAILURE
----------
BY ACCESS
1 row selected.
SQL> select distinct success from dba_stmt_audit_opts;
SUCCESS
----------
BY ACCESS
1 row selected.
SQL> select count(*) from dba_audit_trail where action_name='SESSION REC';
COUNT(*)
----------
345
1 row selected.
SQL>
So I am obviously overlooking some detail about what triggers these audit records.
Sign me -- Puzzled.