Number of failed login attempts exceeds threshold value

OEM发出好多告警，Number of failed login attempts exceeds threshold value.

profile当前配置10次失败就会锁定user

查看下，dba_users，所有username的状态都正常的.

用以下语句，

select USERNAME, ACTION_NAME, RETURNCODE, count(*)
from DBA_AUDIT_SESSION
where TIMESTAMP > to_date('2015-08-24 10:11:57','yyyy-mm-dd hh24:mi:ss')
and RETURNCODE != 0
group by USERNAME, ACTION_NAME, RETURNCODE
order by count(*);

终于发现是测试人员用一个不存在的user一直尝试连接导致出现的告警。