Oracle 记录DML、DDL和DCL用户活动

audit all 
  by chris by access;
audit select table, update table, insert table, delete table 
  by chris by access;
audit execute procedure 
  by chris by access;

conn chris/chris

create table audit_this (
  c1 int
);
insert into audit_this values ( 1 );
commit;
select * from audit_this;

select username,
       extended_timestamp,
       owner,
       obj_name,
       action_name
from   dba_audit_trail
where  owner = user
and    obj_name = 'AUDIT_THIS'
order by timestamp desc;

USERNAME   EXTENDED_TIMESTAMP                           OWNER   OBJ_NAME     ACTION_NAME    
CHRIS      14-NOV-18 16.40.54.788806000 EUROPE/LONDON   CHRIS   AUDIT_THIS   SELECT         
CHRIS      14-NOV-18 16.40.53.235856000 EUROPE/LONDON   CHRIS   AUDIT_THIS   CREATE TABLE   
CHRIS      14-NOV-18 16.40.53.759381000 EUROPE/LONDON   CHRIS   AUDIT_THIS   INSERT