Oracle Find Failed Login Count

Modifiy initialization parameters

alter system set audit_trail=db scope=spfile;

Restart the database

shutdown immediate

startup

Enable auditing for failed login attempts

audit create session whenever not successful;

19c Failed Login (Invalid Username and Passwords)

select * from unified_audit_trail where

   unified_audit_policies='ORA_LOGON_FAILURES'  and RETURN_CODE=1017

   and EVENT_TIMESTAMP > sysdate-1 

   order by  EVENT_TIMESTAMP desc;

Kaynaklar:

AUDIT_TRAIL