Best Practices for Creating Custom Unified Audit Policies

You can optimize the number of enabled policies as a best practice though you can enable multiple policies at a time in the database.

This optimization has the following benefits:

• It reduces the logon overhead that is associated with loading the audit policy’s details into the session’s UGA memory. If the enabled policy count is less, then less time is spent in loading the policy information.

• It makes the internal audit check functionality more efficient, which determines whether to generate an audit record for its associated event.

• If you have configured a unified audit policy for LOGON statements, then audit records for both direct logins as well as ALTER SESSION and SET CONTAINER statements are generated.

The unified audit policy syntax is designed to group multiple audit settings in a single policy. Refer to predefined audit policies of Oracle Database to see how multiple audit settings are grouped within one unified audit policy.

Related Topics

• Auditing Activities with the Predefined Unified Audit Policies