Query to find audit information about dropped users

Find audit information about dropped users


"DROP USER" is audited by default from Oracle 12c onwards.
Use the below query to take information if you have not turned off standard auditing

select os_username,username,userhost,timestamp,obj_name,action_name,priv_used
from dba_audit_trail
where action_name='DROP USER'
and to_char(cast ( timestamp as date),'dd.mm.yyyy') > '08.02.2019'
AND OBJ_NAME IN ('JIM','DWIGHT')
order by timestamp desc;