OS_USERNAME 

VARCHAR2(255) 

Operating system login username of the user whose actions were audited 

USERNAME  

VARCHAR2(30) 

Name (not ID number) of the user whose actions were audited 

USERHOST  

VARCHAR2(2000) 

Numeric instance ID for the Oracle instance from which the user is accessing the database 

TERMINAL  

VARCHAR2(2000) 

Identifier of the user's terminal 

TIMESTAMP  

DATE 

NOT NULL 

Timestamp for the creation of the audit trail entry or login time for the CONNECT statement 

OWNER 

VARCHAR2(30) 

Creator of the object affected by the action 

OBJ_NAME  

VARCHAR2(128) 

Name of the object affected by the action 

ACTION_NAME  

VARCHAR2(27) 

Name of the action type corresponding to the numeric code in the ACTION column in DBA_AUDIT_TRAIL 

NEW_OWNER  

VARCHAR2(30) 

Owner of the object named in the NEW_NAME column 

NEW_NAME 

VARCHAR2(128) 

New name of an object after a RENAME or the name of the underlying object 

SES_ACTIONS  

VARCHAR2(19) 

Session summary (a string of 16 characters, one for each action type in the order ALTER, AUDIT, COMMENT, DELETE, GRANT, INDEX, INSERT, LOCK, RENAME, SELECT, UPDATE, REFERENCES, and EXECUTE. Positions 14, 15, and 16 are reserved for future use. The characters are: - for none, S for success, F for failure, and B for both) 

COMMENT_TEXT  

VARCHAR2(4000 

Text comment on the audit trail 

SESSIONID 

NUMBER 

NOT NULL 

Numeric ID for each Oracle session 

ENTRYID 

NUMBER 

NOT NULL 

Numeric ID for each audit trail entry in the session 

STATEMENTID 

NUMBER 

NOT NULL 

Numeric ID for each statement run 

RETURNCODE 

NUMBER 

NOT NULL 

Oracle Server message code generated by the action. Some useful values:

• zero: the action succeeded

• 2004: security violation

PRIV_USED 

VARCHAR2(40) 

System privilege used to execute the action