Heavy auditing can affect performance as follows:
Audit records are written first to a queue in memory and then to the sybsecurity database. If the database shares a disk used by other busy databases, it can slow performance.
If the in-memory audit queue fills up, the user processes that generate audit records sleep. See Figure 10-5.