Hello,
Looking at our audit logs, I'm trying to figure out the source of some queries and what could explain the trends I'm seeing. In particular we're looking at our audit logs in oracle/admin/.../adump/*. As I understand it, ever sql statement executed by the SYS user and users connecting with SYSDBA or SYSOPER privileges is logged here. All the queries look similar (SELECT with WHERE rowid in clause, and ORDER BY) except against different tables executed by the "SYS" user. Is this normal and are these actually executed by a human logging into the system or somehow done by Oracle itself? I'm just trying to figure out what the source of such queries could be and whether the trend is normal.
Day 1: 23 queries involving 5tables (user tables)
Day 2: 13 queries involving 7 tables (user tables)
Day 3: 15 queries involving 2 tables (user tables)
Day 4: 130 involving 74 tables (user tables)
'select /*+ no_parallel(t) no_parallel_index(t) dbms_stats cursor_sharing_exact use_weak_name_resl dynamic_sampling(0) no_monitoring xmlindex_sel_idx_tbl opt_param('optimizer_inmemory_aware' 'false') no_substrb_pad */ substrb(dump("MYCOLUMN_S",16,0,64),1,240) d_718760760, rowidtochar(rowid) rwid from "MY_OWNER"."MY_TABLE" t where rowid in (chartorowid('AAXVa/AAAAAFAC7AAA'),chartorowid('AAGVa/AAABAFAB7AAF'),chartorowid('ABAVa/ACAAAFABP7AAc'),chartorowid('ACAVa/AABAAFAB7AAn'),chartorowid('AAAVa/AABAAB08OBAj'),chartorowid('AAAVa/ABBAAB1KZAAW'),chartorowid('AAAVa/AABABB1SjAAf'),chartorowid('AXAVa/AABBAB1g0AAo'),chartorowid('AAARa/AABAACzpjAAg'),chartorowid('AAAVa/AASACK28EAAb')) order by "MYCOLUMN_S"'