While performing database audits, you might need to check who logged in last into the database. The query will help you find out last user who logged in to database

select username, timestamp, action_name from dba_audit_session 
where action_name='LOGON' and 
rownum<10 and username not in ('SYS','DBSNMP','DUMMY','SYSTEM','RMAN');