This is what we use: audit SESSION WHENEVER NOT SUCCESSFUL; -----Original Message----- From: oracle-l-bounce@xxxxxxxxxxxxx [mailto:oracle-l-bounce@xxxxxxxxxxxxx] On Behalf Of J. Dex Sent: Monday, March 27, 2006 1:23 PM To: oracle-l@xxxxxxxxxxxxx Subject: syntax for turning auditing on I think I keep getting the syntax wrong for these particular things. I want to turn auditing on for unsuccessful logins for system. I also want to audit any 'alter user' commands. What is the correct syntax? This is in 9i. _________________________________________________________________ Express yourself instantly with MSN Messenger! Download today - it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/ -- //www.freelists.org/webpage/oracle-l -- //www.freelists.org/webpage/oracle-l