Audit user login operations

This topic describes how to audit the login operations of users.

Audit the login operations of a specified user

Log in to the database as the ORAAUDITOR user and specify to audit login operations of the aud user.

obclient> AUDIT SESSION BY user1;

Audit the login operations of all users

Log in to the database as the ORAAUDITOR user and specify to audit login operations of all users.

obclient> AUDIT SESSION;

View audit records

View the audit records in DBA_AUDIT_TRAIL.

obclient> SELECT USERNAME,USERHOST,TIMESTAMP,SQL_TEXT FROM SYS.DBA_AUDIT_TRAIL;
+----------+----------------+-----------+----------+
| USERNAME | USERHOST       | TIMESTAMP | SQL_TEXT |
+----------+----------------+-----------+----------+
| USER1    | 10.10.10.10    | 22-DEC-21 | CONNECT  |
+----------+----------------+-----------+----------+
1 row in set

References

For more information about audit operations, see the following topics:

• Enable security audit
• Set and view audit rules
• View audit records
• Audit user operations
• Audit specified database objects