How to query the Unified Audit Trail in Oracle

Read recent activity from the unified audit trail: who did what, from where, and whether it succeeded. Adjust the time window as needed.

SELECT event_timestamp, dbusername, action_name,
       object_schema, object_name, return_code,
       os_username, userhost
FROM   unified_audit_trail
WHERE  event_timestamp > SYSTIMESTAMP - INTERVAL '1' DAY
ORDER  BY event_timestamp DESC
FETCH FIRST 100 ROWS ONLY;