Which program executed to update DBA_Audit_Trail table.
I have a question regarding the Audit trail.
i used to gather audit data from dba_audit_trail table.
i would like to know "which program / sql stmt" is caused/triggered to update the dba_audit_trail table ?
Can you please clarify that how can i match this table and get which program/sqlcode is executed on that time.
my program code is below:
TO_CHAR(timestamp,'DD-MON-YY HH24:MI:SS') login,
decode(returncode,01017,'Logon Error','Acnt Locked')
WHERE timestamp > sysdate - 1/48 -- check every 30 min.
AND (returncode = 01017 OR returncode = 28000)
AND username='SYSTEM' AND os_username='oracle'
But actually what i wanted is , which sql stmt is exected?
I was thinking that is there any way to correlate the
STATEMENTID.DBA_AUDIT_TRAIL coln to trace down the SQL stmt executed, but metalink stats that there is no oracle data dictionary to trace this stmt id.
Since i have scheduled the UserLogin job, I am getting a user login error.
But there is "System user - Login Error" prompts in a purticular time, that time i never connect into the db using "system" user...
i am exactly don't know from where it is coming...i checked with dba_jobs.. no schedule..! cheched with crontab entry... nothing is scheduled...so i want to know which program is causing or who try to... , in that purticular time...i can able to see the user name from dba-audit_trail, that is system user and osuser is oracle. so to findout which program is running that moment, i thought statmentid, may give me to answer, unfortunately it doesn't.