SELECT CREATIME, LOGIN_USER, SQLSTR FROM sys_audit_trail CREATIME LOGIN_USER SQLSTR
2009-03-05 13:21:31 _SYSTEM

AUDIT TRAIL ENABLED
2009-03-05 13:21:42 DBA

CREATE USER DBUSER IDENTIFIED BY
2009-03-05 13:23:13 DBA

CREATE SCHEMA DBA2
2009-03-05 13:23:23 DBA

DROP SCHEMA DBA2
2009-03-05 13:23:24 DBA

CREATE USER DBA2 IDENTIFIED BY
2009-03-05 13:32:22 DBUSER

CREATE TABLE TEST (ID INTEGER)
2009-03-05 13:49:37 DBA

CREATE CATALOG DBUSER
2009-03-05 13:49:59 DBUSER

CREATE TABLE TEST_TAB (ID INTEGER PRIMARY KEY NOT NULL)
Example: Querying CREATE USER operations
SELECT CREATIME, LOGIN_USER, SQLSTR FROM sys_audit_trail WHERE type=
'
CREATE USER
'
"
CREATIME LOGIN_USER SQLSTR

2009-03-05 13:21:42 DBA

CREATE USER DBUSER IDENTIFIED BY
2009-03-05 13:23:24 DBA

CREATE USER DBA2 IDENTIFIED BY