SQL audit

So, I've never had to turn on any auditing within the Oracle DB...and now
the auditors want every SQL statement that inserts, updates, or deletes data
in our database.  We run Oracle Apps 11i and have Oracle 11.1.0.7 as the
database.  I know the scheduled processes, application server, and Grid
Control agent hit the database constantly, so I have two questions:

1. What's the best way to grab and save any DML sql?

2. How do I filter out all the "junk" that I don't want to see?  In essense,
I only want SQL that is run directly against the database from sqlplus,
sql*developer, etc.

I tried to explain that we only run SQL against the database when we're
fixing problems or as the solution to a customer request and we keep all the
emails and document everything, but that just isn't good enough for them.

Any help that points me in the right direction would be appreciated.

Thanks.

Rich Tylka
Glimcher Realty

Other related posts: