1. change the initializaion parameter audit_trail to be:
audit_trail=db shutdown and restart database 2. connect to the database as a user that has the privilege "AUDIT SYSTEM" and enter audit session whenever not successful at this point you can see these unsuccessful logins by monitoring the dba_audit_trail view. John [EMAIL PROTECTED] wrote: >Hi all, >Which is the best way to keep audit of failed login attempts to the oracle >server -without turning on full audit? >Thanking you, >--- >+---------------------------------------------------+ >C.S Waibale Simon >MTN-Uganda, >Cell: +256 77-212655,http://mtn.co.ug >+---------------------------------------------------+ > -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Ora NT DBA INET: [EMAIL PROTECTED] Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).