Which program executed to update DBA_Audit_Trail table.

Hi

I have a question regarding the Audit trail.

i used to gather audit data from dba_audit_trail table.

i would like to know "which program / sql stmt" is caused/triggered to update the dba_audit_trail table ?

Can you please clarify that how can i match this table and get which program/sqlcode is executed on that time.


my program code is below:
SELECT username,
os_username,
TO_CHAR(timestamp,'DD-MON-YY HH24:MI:SS') login,
action_name,
obj_name,
owner,
action,
statementid,
ses_actions,
decode(returncode,01017,'Logon Error','Acnt Locked')
FROM dba_audit_trail
WHERE timestamp > sysdate - 1/48 -- check every 30 min.
AND (returncode = 01017 OR returncode = 28000)
AND username='SYSTEM' AND os_username='oracle'
/

regards
anandharaj

the oracle kernel does it

Hi
Thanks for your reply.

But actually what i wanted is , which sql stmt is exected?

I was thinking that is there any way to correlate the
STATEMENTID.DBA_AUDIT_TRAIL coln to trace down the SQL stmt executed, but metalink stats that there is no oracle data dictionary to trace this stmt id.

Thanks a lot

regards
Anandharaj.A

why do you want to know what sql gets run?

Also its a view, which is built upon a number of tables, so you never actually insert into this table (cos it isnt one)

Hi
Since i have scheduled the UserLogin job, I am getting a user login error.

But there is "System user - Login Error" prompts in a purticular time, that time i never connect into the db using "system" user...

i am exactly don't know from where it is coming...i checked with dba_jobs.. no schedule..! cheched with crontab entry... nothing is scheduled...so i want to know which program is causing or who try to... , in that purticular time...i can able to see the user name from dba-audit_trail, that is system user and osuser is oracle. so to findout which program is running that moment, i thought statmentid, may give me to answer, unfortunately it doesn't.

regards