find who/when sql statement was issued

[aarganesh]

both are right. Auditing will add perfomance overhead, check out in V$SQL DPT