Re: Who executed this command

From: Steve Howard <stevedhoward_at_gmail.com>
Date: 23 May 2006 08:53:54 -0700
Message-ID: <1148399633.995789.275420@j33g2000cwa.googlegroups.com>

We just had to do this about a month ago. A DBA issued an "alter table" statement and invalidated several packages. With 5000 users logged in, every one of them was trying to get the latch to recompile them...not good.

Our logic, as others have suggested, was to use logminer. Once we found when the command was issued, and who the user was, we used both the last command in Unix and the listener.log to at least narrow who was logged in. As others have suggested however, coming from OEM makes it harder.

I can't remember if there is a dictionary table in 8.1.7 OEM for logins to the management server. If they did login to the management server, rather than directly, you may find it there. If they didn't, you can use the listener.log to at least see who connected around that time frame. Not perfect, but something to check.

Incidentally, we did find the culprit :)

Regards,

Steve Received on Tue May 23 2006 - 10:53:54 CDT