Now, without joking, you can do the following: alter system set events='1501 trace name context forever, level 10"; and it will generate an entry in alert_$ORACLE_SID.log and a trace file for every attempt. You should be able to see username from all those trace files.
> -----Original Message----- > From: Tim Gorman [mailto:Tim@;SageLogix.com] > Sent: Thursday, October 17, 2002 1:51 PM > To: Multiple recipients of list ORACLE-L > Subject: Re: auditing CREATE DATABASE > > > What a tongue-in-cheek answer: "only catches successful > attempts"! I like > his/her sense of humor... > > Issuing a CREATE DATABASE command against an already mounted and open > database triggers an ORA-01501 error. If you are running > Oracle8i or above, > you could create an AFTER SERVERERROR database-event trigger > to capture such > errors and then log the occurrance in a table somewhere. > > Regardless of what version you are running, ORA-01501 gets > logged to the > "alert.log" file, so you can catch it that way, too... > > ----- Original Message ----- > To: "Multiple recipients of list ORACLE-L" <[EMAIL PROTECTED]> > Sent: Thursday, October 17, 2002 10:41 AM > > > Is there a way of capturing info on people who issue CREATE DATABASE > statements? > > My Oracle Support technician says auditing won't catch this, > only catches > successful attempts. > > Regards, > Patrice Boivin > Systems Analyst (Oracle Certified DBA) > > Systems Admin & Operations | Admin. et Exploit. des syst�mes > Technology Services | Services technologiques > Informatics Branch | Direction de l'informatique > Maritimes Region, DFO | R�gion des Maritimes, MPO > > E-Mail: [EMAIL PROTECTED] > > -- > Please see the official ORACLE-L FAQ: http://www.orafaq.com > -- > Author: Boivin, Patrice J > INET: [EMAIL PROTECTED] > > Fat City Network Services -- 858-538-5051 http://www.fatcity.com > San Diego, California -- Mailing list and web hosting services > --------------------------------------------------------------------- > To REMOVE yourself from this mailing list, send an E-Mail message > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > the message BODY, include a line containing: UNSUB ORACLE-L > (or the name of mailing list you want to be removed from). You may > also send the HELP command for other information (like subscribing). > > -- > Please see the official ORACLE-L FAQ: http://www.orafaq.com > -- > Author: Tim Gorman > INET: [EMAIL PROTECTED] > > Fat City Network Services -- 858-538-5051 http://www.fatcity.com > San Diego, California -- Mailing list and web hosting services > --------------------------------------------------------------------- > To REMOVE yourself from this mailing list, send an E-Mail message > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > the message BODY, include a line containing: UNSUB ORACLE-L > (or the name of mailing list you want to be removed from). You may > also send the HELP command for other information (like subscribing). > -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Gogala, Mladen INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
