Does OEM 12c keeps track of tasks performed by its users

Question

HI All,
Does OEM keep track of all the tasks performed on it by user. Suppose a user say "A" has created a group or incident rule and a user "B" deleted the group or incident rule created by user "A". Now can the sysman user or "A" user would anyway know the fact that the user "B" has actually deleted them. So does OEM keeps the tasks performed by its users somewhere where it can be checked and confirmed?
Thanks in Advance!

Answer 1

Yes, EM has it's own auditing, although it is set up at a minimal level to begin with including EM login/logout.  You would want to enable additional auditing to monitor this type of activity.  See the Security Guide for more information: 
http://docs.oracle.com/cd/E24628_01/doc.121/e36415/sec_features.htm#CJAIEIDD
In addition, since this is a target delete scenario, there's a query you can run to see the time of deletion, but not who deleted it:
select entity_type, entity_name, created_date, deleted_date
from gc_manageable_entities_hist
where entity_name = <group>;
Perhaps between the two you can deduce who was logged in at the time of the delete.