Script for USER AUDIT which oracle database user created new user

col OS_USERNAME format a15
col USERNAME format a15
col USERHOST format a15
col TERMINAL format a20
col ACTION format a10
col GRANTEE format a30
col OS_PROCESS format a30
select dba_audit_trail.OS_USERNAME,
  dba_audit_trail.USERNAME,
  dba_audit_trail.USERHOST,
  dba_audit_trail.TERMINAL,
  dba_audit_trail.TIMESTAMP,
  dba_audit_trail.ACTION,
  dba_audit_trail.ACTION_NAME,
  dba_audit_trail.GRANTEE,
  dba_audit_trail.SESSIONID,
  dba_audit_trail.SESSIONID,
  dba_audit_trail.OS_PROCESS,
  dba_audit_trail.LOGOFF_TIME,
  dba_audit_trail.SQL_TEXT
from  dba_audit_trail
where dba_audit_trail.USERNAME IN (select grantee from dba_role_privs
         where granted_role IN (select role from role_sys_privs where PRIVILEGE like 'CREATE USER'))
and dba_audit_trail.SQL_TEXT like 'create%';