Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

In my oracle database alert log file, I saw someone issued the command to shutdown oracle database. I am not able to find out what caused this. Is there a way to find out which user/program that issued the command?

Fri Feb 1 22:30:35 2013 Completed: alter database close Fri Feb 1 22:30:35 2013 alter database dismount Completed: alter database dismount

share|improve this question

The details should be available in audit files located by default in $ORACLE_BASE/admin/$ORACLE_SID/adump -directory or wherever your AUDIT_FILE_DEST-parameter points them to.

Look for more information for example from here:

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.