audit_sql

audit_sql 
      ::= 
      "audit" ( ( stat_command { "," stat_command } ) | "all" ) 
      [ "by" user_list ] 
      [ "by" ( "access" | "session" ) ] 
      [ "whenever" [ "not" ] "successful" ] 

This rule is called by

audit_command