Audit invalid passwords and locked accounts for last 30 days

set linesize 180

col OS_USERNAME for a20

col USERNAME for a15

col date_Time for a20

col USERHOST for a20

col error for a30

select to_char(TIMESTAMP,'dd-mon-yyyy hh24:mi') "Date_Time",RETURNCODE,

DECODE(RETURNCODE,'1017','Invalid username/password','28000','The account is locked') "Error",

OS_USERNAME,USERNAME,USERHOST from dba_audit_trail

where USERNAME='SPRO_DB'

and RETURNCODE in ('1017','28000')

and TIMESTAMP>SYSDATE-30

order by timestamp;