Does Oracle have a detailed log of login and operation records?

wuxinren28

Recently, it is often found that some people tamper with the database.
But I couldn't find which one was changed, which was very depressing.

For example, someone cleared a table two minutes ago, I checked the tables v $ sqlarea and v $ sql, but there was no operation statement in it, and the statement I operated two days ago could be found, I do n’t know if How to get around!

In addition, I have found an operation statement in v $ sqlarea, but I cannot find which session was logged in at that time.

I am a rookie, ask you heroes, thank you very much

whbilly

Backstage
$ ORACLE_HOME / network / log

The following lsnr_instancename.log records the login information

whbilly

A little mistake, the instance.log file has logging information

whbilly

The most fundamental way is to use real-name users to log in, preventing many people from using one account.

myaeolus

Logmnr analysis. See what you did.

If you want to be detailed, unless you do a granular audit.

james_luck

I learned from the upper floor that $ORACLE_HOME/network/log/lsnr_instancename.log records login information, which can be used as a reference