USER_AUDIT_STATEMENT

Purpose

The USER_AUDIT_STATEMENT view displays audit tracking entries for GRANT, REVOKE, AUDIT, NOAUDIT, and ALTER SYSTEM statements issued by the current user.

Columns

Sample query

Query the audit trail entries of the GRANT, REVOKE, AUDIT, NOAUDIT, and ALTER SYSTEM statements issued by the current user.

obclient [SYS]> SELECT USERNAME, USERHOST, TIMESTAMP, ACTION_NAME, SQL_TEXT FROM SYS.USER_AUDIT_STATEMENT;

The query result is as follows:

+----------+----------------+-----------+--------------+---------------------------------+
| USERNAME | USERHOST       | TIMESTAMP | ACTION_NAME  | SQL_TEXT                        |
+----------+----------------+-----------+--------------+---------------------------------+
| SYS      | 100.xx.xxx.xxx | 08-APR-25 | ALTER SYSTEM | SET GLOBAL event_scheduler = ON |
+----------+----------------+-----------+--------------+---------------------------------+
1 row in set

References

• Query the audit trail entries of the GRANT, REVOKE, AUDIT, NOAUDIT, and ALTER SYSTEM statements issued by all users in the current tenant: DBA_AUDIT_STATEMENT

• Query the audit trail entries generated by the AUDIT EXISTS and AUDIT NOT EXISTS statements: DBA_AUDIT_EXISTS

• Query the audit trail entries of all objects:

  • DBA_AUDIT_OBJECT

  • USER_AUDIT_OBJECT

• Query the audit trail entries of the CONNECT and DISCONNECT statements:

  • DBA_AUDIT_SESSION

  • USER_AUDIT_SESSION

• Query all audit trail entries:

  • DBA_AUDIT_TRAIL

  • USER_AUDIT_TRAIL

• For more information about security audit, see the following topics:

  • Enable audit
  • Set up and view audit rules
  • View audit records
  • Audit user logon
  • Audit user operations