As an alternative to Gandolf's suggestion you can always populate your own logon_audit table by resorting to AFTER LOGON, AFTER SERVERERROR 1017 and BEFORE LOGOFF triggers. They are nicely covered in Oracle documentation.