September 2013 – Wilson Wu's Blog

SELECT os_username,
       userhost,
       TIMESTAMP,
       TERMINAL,
       returncode -- 0: normal, 1017: wrong user/pass, 28000: account locked.
FROM DBA_AUDIT_TRAIL
WHERE ACTION_NAME='LOGON'
AND USERNAME ='OTM' --DB User
ORDER BY TIMESTAMP DESC ;

SELECT os_username,

userhost,

TIMESTAMP,

TERMINAL,

returncode -- 0: normal, 1017: wrong user/pass, 28000: account locked.

FROM DBA_AUDIT_TRAIL

WHERE ACTION_NAME='LOGON'

AND USERNAME ='OTM' --DB User

ORDER BY TIMESTAMP DESC ;

Month: September 2013

Check DB Logon History