To capture all activity in the database by access, can one do 'audit all by access'? I haven't seen this format, but that is what we've been running with and, while it seems to capture everything, I want to be 100% sure. The examples I've seen only use the above syntax with a user, for example 'audit all by <fred> by access' Chris Newman Database Specialist AITS, University of Illinois 217-333-5429 -- //www.freelists.org/webpage/oracle-l