try to do auditing.check with sys.aud$ table.