To find time when the user was dropped oracle

Question

Hi Experts,
I have query from my auditor that will it be possible to find the time when the oracle user was dropped .
Vesrion oracle 10g,11g
Can we find it through audit trail or there is some dynamic performacne view which keeps this information.
Or other wise we have to create some trigger manually to capture the time if so then please provide the details of the same
A quick responce will be helpfull ....

Answer 1

See here : 11.2.0.1 Windows XP
Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options
SQL> select username from dba_audit_trail
  2  where
  3  action=53;
no rows selected
SQL> show parameter audit;
NAME                                 TYPE        VALUE
audit_file_dest                      string      E:\APP\SERVERROOM\ADMIN\ORCL\A
                                                 DUMP
audit_sys_operations                 boolean     FALSE
audit_trail                          string      DB_EXTENDED
SQL> audit drop user;
Audit succeeded.
SQL> create user test identified by test;
User created.
SQL> drop user test;
User dropped.
SQL> column sql_text for a50;
SQL> set line 200;
SQL> select username,
  2  timestamp,
  3  sql_text
  4  from dba_audit_trail
  5  where
  6  action=53
  7  /
USERNAME                       TIMESTAMP SQL_TEXT
SCOTT                          30-APR-12 drop user test
SQL>So, answer is action=53 in dba_audit_trail for drop user and for specific user just add like operator with sql_text column. Means, scott user droped the test user on 30-APR-12.
If you wish to know the meaning of action column of dba_audit_trail then see below link :
http://docs.oracle.com/cd/B19306_01/server.102/b14237/dynviews_2088.htm#g1432037
command.v$session = action.dba_audit_trail
If this answer your question, please close the thread, else continue.
Regards
Girish Sharma