DBAsupport.com Forums - Powered by vBulletin
Results 1 to 2 of 2

Thread: How To Find List Of Failed Log In Users In Auditing

  1. #1
    Join Date
    Feb 2011
    Posts
    1

    How To Find List Of Failed Log In Users In Auditing

    I want to find out the failed log in users from a pool of .aud files. Can any one guide me in this context? I am using oracle 10g.
    Thanks.

  2. #2
    Join Date
    Apr 2003
    Location
    South Carolina
    Posts
    148
    -- You need to enable auditing if you already haven't:

    alter system set audit_trail=DB scope=spfile ;
    shutdown immediate
    startup ;

    audit session whenever not successful ;

    -- issue rights to dba user account
    grant select on dba_audit_session to your_user_account;

    -- from there ... query tables....


    set pagesize 120
    set linesize 150
    column os_username format a15
    column username format a15
    column userhost format a40
    column timestamp format a20
    column action format a10
    column returncode format 9999999999
    --spool c:\1\failed_login_attempts.log

    select os_username, username, userhost, to_char(timestamp,'mm/dd/yyyy hh24:mi:ss') timestamp,
    action_name action, returncode
    from dba_audit_session
    where action_name = 'LOGON' and returncode > 0
    and timestamp > '31-DEC-10'
    order by timestamp ;

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  


Click Here to Expand Forum to Full Width