We started recently to read the Oracle audit tables and since the DBAs say that their Oracle instances are maxed out, resource-wise, I wonder whether Splunk keeps read time statistics of the DB read commands, or any other performance metrics.
check if your DB team has any DB performance tools. With the help of DB performance tools they could check which query is taking more resources like CPU and memory.