Hi All,
Found a post related to the above alert on OEM 12C and was hard to find information related to what is this metric about and where to find this files, after checking the previous blogs seems like people have tried to clear files located on: audit_file_dest, but this particular metric is related to Audit files that were created with the database was not yet writable and audit records were created on a default area $ORACLE_BASE/audit/$ORACLE_SID, as you can see on the bellow link on how to administer the audit trail files
Administering the Audit Trail
So the solution for this was to log-into the host
cd $ORACLE_BASE/audit/$ORACLE_SID
ls -lrt *.bin | wc -l (ensure that the count matches what the Metric is showing)
rm *.bin (if your audit files are not needed)
This will clear out the audit records from the directory and then the alert can be re-evaluated.
If you need your audit records, the link above will tell you how to move the files from the default location into your database, assuming that you have the AUDIT_TRAIL = DB.
Hope this is helpful and clears-out questions on regards of this default audit location and where we can do the count.
Regards,
Ignacio Davalos