Switching to Oracle Unified Auditing may produce lots of data when e.g. auditing activities of the SYS-user. I.e. according the documentation you can do the following to audit similarly as in traditional auditing with audit_sys_operations=TRUE: SQL> CREATE AUDIT POLICY TOPLEVEL_ACTIONS(…)