we use Oracle11gR2 on win2008R2.
To strengthen audit , we plan to change current audit setting audit_trail=DB to audit_trail=DB,extended.
In my understanding , in audit_trail=DB,extended setting, SQL_TEXT column of sys.aud$ table will be recorded.
But, I am concerned about negative impact to DB environment by this change because it is production environment.
( increase of amount of audit log , DB performance, etc)
①If we change audit setting of database from DB to DB,extended,how much the audit log will increase ?
②How about the DB performance ? (audit setting is I think the default by creating from DBCA )
③if we execute alter system set audit_trail=db,extended scope=spfile; do we need to restart database to enable that ?( I think we need. just confirmation)
④We made database by DBCA probably, I think current audit setting is like below.But how could I make sure that ?
ALTER ANY PROCEDURE CREATE ANY LIBRARY DROP ANY TABLE
ALTER ANY TABLE CREATE ANY PROCEDURE DROP PROFILE
ALTER DATABASE CREATE ANY TABLE DROP USER
ALTER PROFILE CREATE EXTERNAL JOB EXEMPT ACCESS POLICY
ALTER SYSTEM CREATE PUBLIC DATABASE LINK GRANT ANY OBJECT PRIVILEGE
ALTER USER CREATE SESSION GRANT ANY PRIVILEGE
AUDIT SYSTEM CREATE USER GRANT ANY ROLE
CREATE ANY JOB DROP ANY PROCEDURE
⑤Is there any consideration for audit setting before the system go-alive ? I am only aware about deleting aud$ record periodically and audit log size issue and DB performance issue.