USER_AUDIT_STATEMENT

Purpose

This view displays the audit records of the GRANT, REVOKE, AUDIT, NOAUDIT, and ALTER SYSTEM statements issued by the current user.

Columns

Sample query

Query the audit trail entries for the GRANT, REVOKE, AUDIT, NOAUDIT, and ALTER SYSTEM statements issued by the current user.

obclient [SYS]> SELECT USERNAME, USERHOST, TIMESTAMP, ACTION_NAME, SQL_TEXT FROM SYS.USER_AUDIT_STATEMENT;

The query result is as follows:

+----------+----------------+-----------+--------------+---------------------------------+
| USERNAME | USERHOST       | TIMESTAMP | ACTION_NAME  | SQL_TEXT                        |
+----------+----------------+-----------+--------------+---------------------------------+
| SYS      | 100.xx.xxx.xxx | 08-APR-25 | ALTER SYSTEM | SET GLOBAL event_scheduler = ON |
+----------+----------------+-----------+--------------+---------------------------------+
1 row in set

References

• Query the audit trail entries for the GRANT, REVOKE, AUDIT, NOAUDIT, and ALTER SYSTEM statements issued by all users in the current tenant: DBA_AUDIT_STATEMENT

• Query the audit trail entries for the AUDIT EXISTS and AUDIT NOT EXISTS statements: DBA_AUDIT_EXISTS

• Query the audit trail entries for all objects:

  • DBA_AUDIT_OBJECT

  • USER_AUDIT_OBJECT

• Query the audit trail entries for the CONNECT and DISCONNECT statements:

  • DBA_AUDIT_SESSION

  • USER_AUDIT_SESSION

• Query all audit trail entries:

  • DBA_AUDIT_TRAIL

  • USER_AUDIT_TRAIL

• For more information about security audit, see the following topics:

  • Set up and view audit rules
  • View audit records
  • Audit user logon