Track the failed attempts of login

[LKBrwn_DBA]

Set this init parameter:

audit_sys_operations=TRUE

And execute this command:

$ sqlplus '/as sysdba'
SQL> AUDIT CREATE SESSION BY ACCESS WHENEVER NOT SUCCESSFUL;