Auditing

[appajip]

Hi,


In our production database one package has been deleted.

Here all it IT guys knows the Adminstrative password.

can we find out the machine name of the user who has done this,the problem here is audit_trail is not enabled in init.ora

pl help me


Thanks

[Pontus]

Hi,

If the query is still in the shared SQL you can at least get the module responsible and hope that you use different tools:

select module from v$sql where sql_text like '%- your package name- %';

I guess that the session is closed by now, otherwise you could query the v$sql and the v$session and joined by v$sql.hash_value = v$session.sql_hash_value.

Unfourtunately it does not help if you put on trace and do a recovery because the session data is not stored in the redo log.

I don't think you can get the info in any way, sorry

/Pontus