I can see and read the OS audit file that Oracle produces.

What I am asking is.....

WITHIN THE OS AUDIT FILE...where does it say whether database auditing was turned on OR off during database startup???

Again, here's an example of an entry in the OS Audit file:

....
Wed Jan 5 12:34:24 2005
ACTION : 'STARTUP'
DATABASE USER: '/'
PRIVILEGE : SYSDBA
CLIENT USER: jsmith
CLIENT TERMINAL: Not Available
STATUS: 0
...

Where in this entry does it say that database auditing is enabled OR disabled?????

From what I can see, it DOES NOT indicate the state of database auditing. Pando seems to be referencing an Oracle document that I am trying to validate.

Is my question more clear now?