USER_AUDIT_TRAIL

Purpose

This view displays the standard audit trail entries related to the current user.

Columns

Sample query

Query all audit trail entries for the current user.

obclient [SYS]> SELECT USERNAME, USERHOST, TIMESTAMP, ACTION, SQL_TEXT FROM SYS.USER_AUDIT_TRAIL;

The query result is as follows:

+----------+----------------+-----------+--------+----------+
| USERNAME | USERHOST       | TIMESTAMP | ACTION | SQL_TEXT |
+----------+----------------+-----------+--------+----------+
| SYS      | 100.xx.xxx.xxx | 08-APR-25 |    100 | CONNECT  |
| SYS      | 100.xx.xxx.xxx | 08-APR-25 |    100 | CONNECT  |
| SYS      | 100.xx.xxx.xxx | 08-APR-25 |    100 | CONNECT  |
+----------+----------------+-----------+--------+----------+
3 rows in set

References

• Query all audit trail entries for the current tenant: DBA_AUDIT_TRAIL

• Query the audit trail entries generated by AUDIT EXISTS and AUDIT NOT EXISTS: DBA_AUDIT_EXISTS

• Query the audit trail entries for all objects:

  • DBA_AUDIT_OBJECT

  • USER_AUDIT_OBJECT

• Query the audit trail entries for CONNECT and DISCONNECT:

  • DBA_AUDIT_SESSION

  • USER_AUDIT_SESSION

• Query the audit trail entries for GRANT, REVOKE, AUDIT, NOAUDIT, and ALTER SYSTEM statements:

  • DBA_AUDIT_STATEMENT

  • USER_AUDIT_STATEMENT

• For more information about security audit, see the following topics:

  • Set up and view audit rules
  • View audit records
  • Audit user logon