通过审计下线某个用户

原文：https://www.yuque.com/wei01/rlggh6/gaxwzy

-- 配置审计
audit all statements by TEST;
select distinct 'audit all on ' || o.owner || '.' || o.OBJECT_NAME || ';' from dba_objects o where o.owner = 'TEST'
   and o.OBJECT_TYPE not in ('INDEX','INDEX PARTITION','LOB','LOB PARTITION');

set line 200 pages 5000
-- 语句审计
select * from dba_stmt_audit_opts where user_name='TEST';

-- 对象审计
select * from dba_obj_audit_opts where owner='TEST';

-- 权限审计
select * from dba_priv_audit_opts where user_name='TEST';

-- 查看访问记录
select a.os_username,a.username,a.obj_name,max(a.timestamp) from dba_audit_trail a  where a.owner='TEST' or username='TEST' group by a.os_username,a.username,a.obj_name;