missing LOGOFF time in sys.aud$
Hi,
I found some session login in 10:00 and not existing in current session.
i want to get the logoff time, I can found the logon record (action=100) in sys.aud$ , but cannot found the logoff the record (action in 101 or 102)
may I know why the logoff record missed ?
please help, thanks a lot!!