we are in windows 2012R2 64 bit server. 12.1.0.2 database. The user account is locked with above message and he wants to know os user,client machine and date/time that locked the account. I built the query as below but it gives lots of records. I want to find out locked few days ago or today only. I would appreciate if someone help to built the query.
Select os_username, username,userhost,terminal,timestamp,action_name,logoff_time,RETURNCODE
from DBA_AUDIT_SESSION where RETURNCODE in (1017,28000)
and username='EGIS_VECTOR'AND ROWNUM<15 order by timestamp;