Re: Who executed this command

From: Chuck <skilover_nospam_at_bluebottle.com>
Date: Tue, 23 May 2006 16:43:27 GMT
Message-ID: <PYGcg.7921$Ar6.6765@trnddc02>

nowfal_at_gmail.com wrote:
> I found the following line in the database ALRT log file. Is there any
> way to find out who executed the command (eg, which program, IP
> address, user, etc)?
>
> Tue May 23 09:12:41 2006
> /* OracleOEM */ DROP TABLESPACE "PRINTREQUEST"INCLUDING CONTENTS
> CASCADE CONSTRAINTS
>
> The database is 8.1.7 running on Windows 2000.
>
> Thanks
>

Check the .aud files and see who was connected via OEM at that time. Received on Tue May 23 2006 - 11:43:27 CDT