l've read through information about Oracle auditing and have a question. I would like to audit by user but the issue is that all the users (engineers) log on with the same user name and password. I can see their OS_USERNAME which tells me which engineer is logging in as the schema owner. We basically need to log any select, insert, update, delete, drop, etc. in a schema and be able to trace it back to a particular person since the application and all the software engineers all have the same USERNAME in the dba_audit_trail table. I have audit_trail = db,extended and we are on Oracle Enterprise 188.8.131.52. I see that the SQL_TEXT and SQL_BIND aren't populated most of the time either - why is this? The Oracle manual says "The SQL_BIND and SQL_TEXT columns are only populated if the AUDIT_TRAIL initialization parameter is set to db,extended." so is there something I'm missing?
Thank you for any suggestions.