Hi

I have a question regarding the Audit trail.

i used to gather audit data from dba_audit_trail table.

i would like to know "which program / sql stmt" is caused/triggered to update the dba_audit_trail table ?

Can you please clarify that how can i match this table and get which program/sqlcode is executed on that time.


my program code is below:
SELECT username,
os_username,
TO_CHAR(timestamp,'DD-MON-YY HH24:MI:SS') login,
action_name,
obj_name,
owner,
action,
statementid,
ses_actions,
decode(returncode,01017,'Logon Error','Acnt Locked')
FROM dba_audit_trail
WHERE timestamp > sysdate - 1/48 -- check every 30 min.
AND (returncode = 01017 OR returncode = 28000)
AND username='SYSTEM' AND os_username='oracle'
/

regards
anandharaj