Tracing Logged Off User

[adlinux]

We are using Audit Trail feature in Oracle that only captures OS Process Id of the user using Middlewear and it is tracable if the user is logged in, but how can I trace a user if logged off from the OS with the process Id captured by Oracle audit Trail.

the "last" command is not really helpful in this regard.

Please advice

[LinuxFreaK]

Dear adlinux,
Salam,

We are using Audit Trail feature in Oracle that only captures OS Process Id of the user using Middlewear and it is tracable if the user is logged in, but how can I trace a user if logged off from the OS with the process Id captured by Oracle audit Trail.

the "last" command is not really helpful in this regard.

Check /var/log/messages and /var/log/secure

Best Regards.