Custom Ignite Alert: Oracle Login Failures#LR14346
If your Oracle database is configured for auditing, this custom Ignite alert will monitor for logon failures and alert the DBA group. It runs once every hour and looks for logon failures from the last hour.
select count(*) from dba_audit_session where action_name = 'LOGON' and returncode = 0 and timestamp > sysdate - 1/24
Ignite alert definition