Hi Lucas,
The user SYSTEM was deactivated in our database since July of this year, and was never activated again. The latest logs we are seeing are recent, too (12/8 as of this writing). How can we know which processes are still using SYSTEM, and how can it still be used (even for internal calls) when it's already deactivated?
Btw, I checked the logs again and saw that were other actions like DELETE, DISCONNNECT SESSION, CONNECT, EXECUTE, UPDATE, CANCEL SESSION. See sample below:
Do you also have it deactivated in your own database and do you see audit logs?
Regards,
ANG