DBA_AUDIT_TRAIL observation, part duex

Oracle 12.1.0.2 SE-2

Another curious observation while looking at something else ...

select        userhost,       os_username os_user,       regexp_replace(comment_text,'([\;])', '\1'||chr(10)||chr(13)) as comment_text,       priv_used,       timestampfrom dba_audit_trailwhere action=100  and username='SYSTEM'  and returncode=0order by userhost,       os_username,       comment_text,       priv_used,       timestamp; USERHOST                  OS_USER    COMMENT_TEXT                                                                PRIV_USED       TIMESTAMP------------------------- ---------- --------------------------------------------------------------------------- --------------- --------------------MYDM\ESTEVEN              esteven    Authenticated by: DATABASE;                                                 CREATE SESSION  17-MAY-2018 15:02:23                                       Client address: (ADDRESS=(PROTOCOL=tcp)(HOST=***.**.*.11)(PORT=50086))devserv.myorgname.org     oracle     Authenticated by: DATABASE;                                                 CREATE SESSION  20-JAN-2019 11:00:01                                       Client address: (ADDRESS=(PROTOCOL=tcp)(HOST=***.**.*.20)(PORT=12185))devserv.myorgname.org     oracle     Authenticated by: DATABASE;                                                 CREATE SESSION  23-AUG-2018 14:43:11