DB version: 11.2.0.4
OS : RHEL 6.8
RAC : 2-Node RAC DB
Around 10 days back, an accidental UPDATE has caused substantial financial loss to my firm.
Now , I want to know the following
A.which DB user has executed this UPDATE
B.From which client machine(like V$SESSION.MACHINE) the UPDATE was fired.
C. Date & Time on when the UPDATE was fired
D. Was it via SQL*Plus or Toad ?
I don't have auditing enabled for this table. The archive logs are already in the tape. The backup admin can restore it.
Is it possible for me to find the above info if I mine the archive logs ?