How to check user locked action code or invalid username/ password - logon denied

Hi Kiran,

How to check user locked action code  or invalid username/ password - logon denied details in AUDIT XML trace files.

audit_sys_operations                 boolean     TRUE
audit_trail                          string      XML, EXTENDED

<AuditRecord><Audit_Type>1</Audit_Type><Session_Id>938183</Session_Id><EntryId>2</EntryId><Extended_Timestamp>2013-12-17T15:23:38.499426Z</Extended_Timestamp><DB_User>CHECK_OWNER</DB_User><Userhost>galaxy.co.uk</Userhost><OS_Process>10813598</OS_Process><Instance_Number>0</Instance_Number><Action>101</Action><Returncode>0</Returncode><DBID>3758109128</DBID>

Thanks,

Kiran