Installation audit vault agent with RAC configuration

Hi at all,
I have a question about the installation of the agent on the RAC configuration. Where must I install the Audit vault agent, on all RAC nodes or is there a properly configuration?
Thanks
Vincenzo

By default when you install the agent on any single node the installation recognizes that it is a cluster and presents you with a list of available nodes from which to select.
With a RAC cluster you have one database and multiple instances. All instances will write to one, and only one AUD$ and FGA_LOG$ table so if you are using database auditing one node will suffice. Which node that is though depends on knowing which node is up at any one time so you could potentially choose a node that is dropped from the cluster or is down for patching and maintenance while the cluster is still running. With respect to REDO collection each node has its own redo thread so you definitely need to be collecting from every node.
Audit Vault has not been out long enough that I can tell you from experience what might be defined as "best practice" and often what we really need to study is "worst practice" to know what not to do. But in the case of RAC my instinct would be to first determine the collection type(s) and then decide. Erring on the side of collecting from all nodes makes a lot of sense.

Similar Messages

  • REG:Oracle Audit Vault Agent Installation fails at the last step .

    Hi ,
    I am installing Audit vault agent 10.3 and it is failing at the last on solarisis 10 sparc 64 bit .
    The error is
    OUI-25031:Some of the configuration assistants failed/cancelled. It is strongly recommended that you retry the configuration assistants at this time. Not successfully running any "Recommended" assistants means your system will not be correctly configured.
    I have tried the Doc ID 1058184.1 but it fails at the end saying cannot update av.properties , If we create the the directories manually and create the av.properties file then the agent will start but it is not stopping until you kill the agent .
    Moreover if i am continuing with this agent after registering the collectors i am not able to start them as i am facing the http 404 error .
    So i think i need to install the audit agent successfully first .
    can anybody help me please as we are on client side and it is critical deliverable .
    Regards
    Edited by: 836778 on May 1, 2012 4:52 PM
    Edited by: 836778 on May 1, 2012 4:59 PM

    In case you're still dealing with this issue:
    I hit this problem when the OS user I was installing with was not in the proper OS group. I don't have the documentation in front of me right now, but make sure your user is in the DBA and/or OINSTALL group.

  • Audit Vault Agent Installation issue

    Hi All,
    I have installed the following things
    1) Audit Vault Server (10.2.2.0.1) on a Windows 2003 Server
    2) I completed the post-installation tasks
    3) I am trying to install Audit Vault agent (10.2.2) on HPUX (11.11) machine.
    I start the AV Agent runInstaller, and fill the details like AVAgent name, Username, connect String etc, then click on next , it throws the following error:
    "error1: the AV server is expecting an agent with the given name to be installed on another machine"
    I am able to ping from Windows to HP machine and Vice versa (By IP Address and Hostname).
    Can anyone tell me where i am going wrong and how to solve it.
    Please mail to my email address ([email protected])
    Thanks & Regards,
    Rakesh

    Hi,
    The details of the installation done so far:
    1) I have installed "Oracle Audit Vault Server (10.2.2)" on a Windows 2003 machine providing the following details
    a) Audit vault Name
    b) Audit Vault Home
    c) Audit Vault Administrator
    d) Administrator Password
    e) Audit Vault Auditor
    f) Ausitor Password
    g) Database Vault Owner and Manager
    h) Created a Audit Vault Agent user and added the user to the udit Vault server using AVCA.
    2)I invoke the "Audit Vault Agent" Installer from a HP-UX machine and provide details viz.,
    a) Audit vault Agent Name (Same name when i executed the AVCA command above)
    b) Aduit Vault Agent Home
    c) Agent Username
    d) Agent Password
    e) Audit Vault Server Connect String (Provide the Database details as mentioned in Audit Vault Server (localhost:port:servicename)
    and when i click on the next button it throws me the following error:
    "error1: the AV server is expecting an agent with the given name to be installed on another machine".
    Hope this gives you a better idea. Waiting for your reply.
    Thanks & Regards,
    Rakesh

  • Audit Vault  Agent sizing (harware requirements)

    Hi, I need to provide my customer an estimation of the disk space needed for the Audit Vault Agent, size of archivelog files of the source database so that REDO collector could work without problems, and other demands of source side (audit vault agent) versus audit vault server?
    Is there any document like "audit vault configuration best practice" related with hardware requirements (size of disk space, size of archivelog files, aud records...)???
    Thank you all in advance..
    Edited by: user10600747 on Jan 4, 2011 5:21 AM

    Hi Elmin,
    I was doing implementation on Audit Vault with around twenty source databases. These were hardware requirements:
    Server:
    HP-UX 11.31, 2 CPUs, 16 GB RAM, 1TB of storage for database
    Agent (these are from the installation guide):
    - At least 512 MB of available physical memory (RAM)
    - Swap space of 1024 MB or twice the size of RAM
    - 400 MB of disk space in the /tmp directory
    - 1.6 GB of disk space for the Oracle Audit Vault collection agent software (but if you apply patches you need actually more than this).
    Regards,
    Sve

  • Fresh R12 with RAC configuration.

    Hi all,
    I want to start up a R12.1.1 Installation with RAC configuration on Oracle Enterprise Linux 5.6 servers.
    Kindly expecting the steps and notes i have to follow.
    I have experience in installation EBIS, but not with RAC, more over this is a single node installation.
    Thanks & Regards
    Hamid

    Hi;
    Please see:
    oracle apps upgrade plan
    Upgrade the 11.5.10.2 Instance with 10gRAC setup
    Regard
    Helios

  • Audit Vault Agent account creation

    Hi, I just installed the AV Server and about to configure the agents. The Oracle AV agent installation document suggests creating AV agent user by logging into the database as AVAdmin user(Section 3.1.1.c). However, the user creation fails with ORA-01031: insufficient privileges. Other database accounts (sys, system..etc..) are locked. Any clue how to resolve this ussue?
    Thanks in advance.

    1. Where in the OP's post do you see the word Windows?
    2. Your advice is totally irresponsible in all respects. The proper way to administer the product is in compliance with the documentation. There is no rational reason to do what you suggest.
    Were you an employee of mine, working on an audit vault project, you'd be terminated tomorrow morning when you walked through the door.
    Again: your advice is misguided and totally irresponsible.

  • Audit Vault Agents

    Hi,
    I have three hosts two with windows server and oracle database 10g on each server and the third is a linux server with 11g database i want to colect informacion about operative system, database audit and redo log in this tree hosts. How is the license? How many licenses of
    Audit Collection Agent must I purchase?
    How would the installation of agents in this environment where and how would I install?
    Thanks a lot !!.
    Medalith.

    Contact your salesperson with respect to licensing. It would be inappropriate for any of us, in this forum, to attempt to speak on behalf of Oracle.
    It isn't Q4 yet so they don't bite. <g>
    As to where agents should be installed ... it is well documented if you look here:
    http://www.oracle.com/technology/products/audit-vault/index.html
    or read the installation docs.
    But again contact your sales person. They have a sales engineer on their team that can advise you.

  • Database Vault 11g with RAC

    According to Oracle whitepaper, it mentioned that "The Oracle Home where DV is to be installed does not contain any ASM instance."
    But, ASM and RAC DB are located at the same home (Default installation) at my site.
    I jsut puzzle how I can fulfill this requirement. Could any expert give me some advices ?

    PiqousKerberos wrote:
    Johna Pakas wrote:
    I have built a test environment using single instance only, same os version and db version, without clusterware and rac.
    I perform the same by installing asm and db in the same home and create db, and then install DBV .
    Register the existing db instance for DBConsole at all.
    Eventually it turns out that no problem.
    Any supporting reason for that I must separate the Oracle Home ?On Oracle [ID 793739.1] -> 12 Things to Check for a Successful Database Vault Installation in 10gR2
    #1. Oracle Label Security is correctly installed and enabled.
    #2. Database console is functional.
    #3. The database to be installed should figure in the oratab file
    #4. the sqlnet files (tnsnames.ora and listener.ora) are placed in the default location:
    *#5. The Oracle Home where DV is to be installed does not contain any ASM instance.*
    #6. In case of RAC srvctl must work fine on all nodes.
    #7. The database vault must be installed:
    + For a single instance database it must be installed in a home that does not have the RAC option enabled.
    + For a RAC database it must be installed in a home that has the RAC option enabled.
    You cannot run a single instance database vault from a RAC enabled home.
    #8. In the database there must be a temporary tablespace named TEMP.
    #9. The service name used in jdbc_str must appear as an entry in tnsnames. ora and must match in name and case the ORACLE_SID.
    #10. The installer expects the listener name to be LISTENER and this is the only listener it starts. If using a different listener name, it must be started before running runInstaller or dvca.
    #11. Respect the password restrictions. Use the alphanumeric, characters, numbers and any of the $,#,_ characters. Password must be at least 8 characters long and contain at least one character from each of the groups mentioned above.
    #12. In addition to all the above, the 10.2.0.3 installation expects the ORACLE_SID to be lowercase. If this is too restrictive, it would be recommended to upgrade to the 10.2.0.4 database and database vault releases.
    * Certainly , you can install DBV with ASM. However, Oracle support doesn't guarantee it's stability and patch availability.That's fine. Let me discuss with stakeholdersr . My next task is to split RAC and ASM
    Edited by: Johna Pakas on 2010年2月25日 上午5:24

  • Audit Vault agent on another server cannot read OS audit files on source

    We have very highly secured database running on node1, we don't want to install agent on that server, so we installed it on node2. We want to use OSAUD collector to audit sys operations. But OSAUD collector is failing because it cannot read audit_trail_dest folder on the source database, network admins don't want to enable SSH from node2/oracle to node1.
    Please suggest what are the options I have in this case.
    I appreciate your help.

    Thanks for the clarification on versions and architecture. In the future do not use the term "node" unless you are referring to RAC as it will cause very substantial confusion. You don't have two nodes ... you have two servers.
    Throw it back at management. Ultimately they need to decide whether enabling secure communications makes sense in an environment where they wish to implement Audit Vault's very considerable capabilities.
    I think your network admins need to be sent off to a re-education camp. One that reminds them that their purpose is to support the organization. I doubt your business model shows substantial revenue generation from network administration.

  • Audit Vault Agent DB2 AS /400

    Hi
    Any body know if Audit Vault can support DB2 running on AS/400 ?
    Regards

    I'm not sure I understand your follow-on query. There is no such thing as an "Agent for DB2". Audit Vault only has one agent, and it can collect audit trails from all supported types of sources, including Oracle , SQL Server, Sybase, and DB2 LUW databases. The agent runs on several platforms - Linux on Intel (both 32-bit and 64-bit variants), Solaris on SPARC, AIX on POWER, HP-UX on PA-RISC and Itanium, and 32-bit Windows on Intel. It does not run on the AS400 at this time.
    Regards.

  • Could Audit Vault Agent Support Multiple Source Database?

    Hello,
    May I use one agent for two or more source database?
    Thank you!
    Best Regards,
    Tony

    I had the same error, On the OUI log there was an error on the instalation of the Database Vault (although the installation finished OK), check if you have the same error output:
    <LOG>
    MANAGE_INSTANCE start RDBMS result=C:\oracle\product\10.2.2\av_1\bin\dvca_start_rdbms.bat,1,
    Executing task SQLPLUS_CATMAC
    connect SYS:java.sql.SQLException: ORA-01031: insufficient privileges
    Executing task UNLOCK_DVSYS
    Error executing task UNLOCK_DVSYS:java.lang.NullPointerException
    Executing task LOAD_NLS_FILES
    Error executing task LOAD_NLS_FILES:java.lang.NullPointerException
    Executing task ACCOUNT_CREATE_OWNER
    Error executing task ACCOUNT_CREATE_OWNER:java.lang.NullPointerException
    Executing task GRANT_CONNECT_OWNER
    Error executing task GRANT_CONNECT_OWNER:java.lang.NullPointerException
    Executing task GRANT_ADMIN_DB_TRIG
    Error executing task GRANT_ADMIN_DB_TRIG:java.lang.NullPointerException
    Executing task GRANT_ALTER_ANY_TRIG
    Error executing task GRANT_ALTER_ANY_TRIG:java.lang.NullPointerException
    Executing task ACCOUNT_CREATE_MANAGER
    Error executing task ACCOUNT_CREATE_MANAGER:java.lang.NullPointerException
    Executing task GRANT_CONNECT_MANAGER
    Error executing task GRANT_CONNECT_MANAGER:java.lang.NullPointerException
    Executing task PASSWORD_CHANGE_DVSYS
    Error executing task PASSWORD_CHANGE_DVSYS:java.lang.NullPointerException
    Executing task PASSWORD_CHANGE_DVF
    Error executing task PASSWORD_CHANGE_DVF:java.lang.NullPointerException
    Unable to login to SYS account.. java.sql.SQLException: ORA-01031: insufficient privileges
    . Error during post-installation processing. java.lang.NullPointerException. Error during post-installation processing. java.lang.NullPointerException.
    </LOG>
    Looks like the problem was that I changed sys and system password on the dbca final windows, that maybe wronged the instalation scripts.
    When re-installed the AV Server I just press ok on that window without changing any password and it worked.
    Hope that Helps.
    Alfonso Leon

  • Oracle Audit Vault Server & Agent Installation Error.

    Hi,
    I am new to Audit vault. When I install Audit Vault on Windows 2008 R2 it throws an error after installing 99%. Kindly help me to resolve.
    OS Version : Windows 2008 R2
    Oracle Audit Vault Version: 10.2.3.2
    Error:
    Audit Vault Server:
    INFO: Configuration assistant "Oracle Audit Vault Configuration Assistant" failed
    *** Starting OUICA ***
    Oracle Home set to C:\oracle\product\10.2.3\av_1
    Configuration directory is set to C:\oracle\product\10.2.3\av_1\cfgtoollogs. All xml files under the directory will be processed
    INFO: The "C:\oracle\product\10.2.3\av_1\cfgtoollogs\configToolFailedCommands" script contains all commands that failed, were skipped or were cancelled. This file may be used to run these configuration assistants outside of OUI. Note that you may have to update this script with passwords (if any) before executing the same.
    INFO: Created a new file C:\oracle\product\10.2.3\av_1\cfgtoollogs\configToolFailedCommands
    INFO: Since the option is to overwrite the existing C:\oracle\product\10.2.3\av_1\cfgtoollogs\configToolFailedCommands file, backing it up
    INFO: The backed up file name is C:\oracle\product\10.2.3\av_1\cfgtoollogs\configToolFailedCommands.bak
    SEVERE: OUI-25031:Some of the configuration assistants failed. It is strongly recommended that you retry the configuration assistants at this time. Not successfully running any "Recommended" assistants means your system will not be correctly configured.
    1. Check the Details panel on the Configuration Assistant Screen to see the errors resulting in the failures.
    2. Fix the errors causing these failures.
    3. Select the failed assistants and click the 'Retry' button to retry them.
    xception: VariableNotFoundException
    Query Exception Class: class oracle.sysman.oii.oiil.OiilQu
    Also while installing Collection agent, it throws the error while executing runInstaller.
    OS Version : AIX 6.1
    Oracle Audit Vault Agent Version: 10.2.3.2
    Audit Agent:
    bash-3.2$ ./runInstaller
    Starting Oracle Universal Installer...
    Checking installer requirements...
    Checking operating system version: must be 5200 or 5300
    Failed <<<<
    Exiting Oracle Universal Installer, log for this session can be found at /tmp/OraInstall2011-05-12_05-11-03PM/installActions2011-05-12_05-11-03PM.log
    */tmp/OraInstall2011-05-12_05-15-39PM>*cat installActions2011-05-12_05-15-39PM.log
    Using paramFile: /finacle/avagent/aix_5l64/install/oraparam.ini
    Checking installer requirements...
    Checking operating system version: must be 5200 or 5300
    Failed <<<<
    Exiting Oracle Universal Installer, log for this session can be found at /tmp/OraInstall2011-05-12_05-15-39PM/installActions2011-05-12_05-15-39PM.log
    Thanks & Regards,
    Mithra.
    Edited by: 864048 on Jun 7, 2011 2:57 AM

    Hi ,
    Please try the following:
    Execute the setup in cmd with -ignoreSysPrereqs option.
    Thank you.

  • Failing 10.2.3.2 audit vault patch on AV Agent at AV Configuation Assistant

    Hi,
    Applying 10.2.3.2 audit vault patch on top of 10.2.3.0 Audit Vault Agent. Getting following error after 100% installation at the time of Audit Vault Configuation Assistant Components
    Information from Installxxxxxx.log
    OPatch succeeded.
    INFO: Configuration assistant "Oracle Audit Vault Agent One-Off Patches" succeeded
    INFO: Command = oracle.av.common.AvcaCfgPlugIn /oracle/app/oracle/product/10.2.3/av_1/bin/avca -s initialize_agent -agentname agent_hmrac2 -agentusr ${s_agentusr} -agentport 7016 -av HMCSPV0921.HIGHMARK.INTRA:1522:av.HIGHMARK.INTRA -rmiport 3121 -jmsport 3300
    INFO: Configuration assistant "Oracle Audit Vault Configuration Assistant" succeeded
    INFO: All the tools have been executed Successfully
    INFO: The "/oracle/app/oracle/product/10.2.3/av_1/cfgtoollogs/configToolAllCommands" script contains all commands to be executed by the configuration assistants. This file may be used to run the configuration assistants outside of OUI. Note that you may have to update this script with passwords (if any) before executing the same.
    WARNING:
    The following configuration scripts need to be executed as the "root" user.
    #!/bin/sh
    #Root script to run
    /oracle/app/oracle/product/10.2.3/av_1/root.sh
    To execute the configuration scripts:
    1. Open a terminal window
    2. Log in as "root"
    3. Run the scripts
    4. Return to this window and click "OK" to continue
    INFO:
    *** End of Installation Page***
    The installation of Oracle Audit Vault Agent 10g was successful.
    WARNING: Do you really want to exit?
    INFO: User Selected: Yes/OK
    INFO: The OUICA command is launched from /oracle/app/oracle/product/10.2.3/av_1/oui/bin/ouica.sh.
    Executed *"/oracle/app/oracle/product/10.2.3/av_1/cfgtoollogs/configToolAllCommands* which has following command and successful.
    [oracle@HMCSPS02 oui]$ cat "/oracle/app/oracle/product/10.2.3/av_1/cfgtoollogs/configToolAllCommands"
    # Copyright (c) 1999, 2009, Oracle. All rights reserved.
    /oracle/app/oracle/product/10.2.3/av_1/bin/avca apply_patchset
    [oracle@HMCSPS02 oui]$ echo $ORACLE_HOME
    /oracle/app/oracle/product/10.2.3/av_1
    [oracle@HMCSPS02 oui]$ sh /oracle/app/oracle/product/10.2.3/av_1/bin/avca apply_patchset
    Deploying to standalone OC4J...
    Restarting agent ...
    Agent restarted successfully.
    Retried component but again failed. Hence executed root.sh and clicked 'Next' button. then message got like 'Agent 10.2.3.2 Installation was successful but some of the components missing,skipped or cancelled which may be functioning properly.
    has my patch upgrade to client was successful or what is the workaround ???
    Any help on this would be appreciated...
    Regards,
    Manish

    Sorry, it was my mistake.
    Actually while upgradation to 10.2.3.2, my ORACLE_HOME was not set to AV Agent HOME (instead it was set for AV Server HOME). That is why at the end script was unable to run from respective HOME.
    Conclusion: Make sure to set ORACLE_HOME to AV Agent HOME before applying to 10.2.3.2 patchset to AV Agent. (also Valid for all Oracle Patchset Installation)
    thanks for your support and reply.
    Regards,
    Manish

  • "Oracle Audit Vault Configuration Assistant" failed

    Hello everyone, I can across this issue while installing AV agent and wanted to know if any one can help with a quick solution. OS= Linux 5, agent_software= 10.2.3 and here is the error messages:
    ++**INFO: Configuration assistant "Oracle Audit Vault Agent One-Off Patches" succeeded**++
    ++**INFO: Command = oracle.av.common.AvcaCfgPlugIn /app/oracle/product/10.2.0/agent_home/bin/avca -s initialize_agent -agentname agentdevmdb1 -agentusr ${s_agentusr} -agentport 7016 -av AHS-SOASOV1-DEVM.ahs.state.vt.us:1521:av.ahs.state.vt.us -rmiport 3121 -jmsport 3300**++
    ++**Command = oracle.av.common.AvcaCfgPlugIn has failed**++
    ++**INFO: Configuration assistant "Oracle Audit Vault Configuration Assistant" failed**++
    ++**-----------------------------------------------------------------------------**++
    ++***** Starting OUICA *****++
    ++**Oracle Home set to /app/oracle/product/10.2.0/agent_home**++
    ++**Configuration directory is set to /app/oracle/product/10.2.0/agent_home/cfgtoollogs. All xml files under the directory will be processed**++
    ++**INFO: The "/app/oracle/product/10.2.0/agent_home/cfgtoollogs/configToolFailedCommands" script contains all commands that failed, were skipped or were cancelled. This file may be used to run these configuration assistants outside of OUI. Note that you may have to update this script with passwords (if any) before executing the same.**++
    ++**-----------------------------------------------------------------------------**++
    ++**INFO: Created a new file /app/oracle/product/10.2.0/agent_home/cfgtoollogs/configToolFailedCommands**++
    ++**INFO: Since the option is to overwrite the existing /app/oracle/product/10.2.0/agent_home/cfgtoollogs/configToolFailedCommands file, backing it up**++
    ++**INFO: The backed up file name is /app/oracle/product/10.2.0/agent_home/cfgtoollogs/configToolFailedCommands.bak**++
    ++**SEVERE: OUI-25031:Some of the configuration assistants failed. It is strongly recommended that you retry the configuration assistants at this time. Not successfully running any "Recommended" assistants means your system will not be correctly configured.**++
    ++**1. Check the Details panel on the Configuration Assistant Screen to see the errors resulting in the failures.**++
    ++**2. Fix the errors causing these failures.**++
    ++**3. Select the failed assistants and click the 'Retry' button to retry them.**++
    ++**INFO: User Selected: Yes/OK**++

    Hi:
    A log of everything the avca command is trying to do is kept in $ORACLE_HOME/av/log/avca.log. Please review that to see what could have caused the issue.

  • Error while trying to start Audit Collector on the Audit Vault Server 10g

    Hi,
    We are trying to build a demo environment for testing Oracle Audit Vault 10g but we are having some trouble.
    Our environment is like this: Oracle Audit Vault Server is installed on Windows Server 2003 SP2, while the Audit Vault Agent is installed on an Oracle 10g Release 2 database which resided on Windows server 2003 SP1. This two Windows Server machines are both installed as virtual machines.
    We have successfully created the Agent and the Collector on Audit Vault Server and the Agent starts successfully while when we try to start the collector we get an error which says " Http Communication error: Http Communication error: 500" and the collector does not start.
    We are new to the Audit Vault Software so we would really appreciate some help on how to resolve this issue because we have got stuck here and can not go on with our work.
    Thanks in advance for your time
    Best regards
    Engrid

    Hi,
    Thanks again for all of your replies but now we are getting another error with the OSAUD collector. We are able to add the collector successfully by using the avorcldb all_collector command.
    Source database is 10g R2 (10.2.1) and we configured it for collecting the audit records in the OS audit trail by using the following statement: ALTER SYSTEM SET AUDIT_TRAIL=OS SCOPE=SPFILE;, and the SHOW PARAMETER AUDIT command returns the following values :
    NAME TYPE VALUE
    audit_file_dest string C:\ORACLE\PRODUCT\10.2.0\ADMIN
    \<db_name>\ADUMP
    audit_sys_operations boolean TRUE
    audit_trail string OS
    We don't know if the values set for the audit_file_dest is correct but after we start working on the database and execute some statements Oracle is not creating any files on this destinations while for the same statements when the Audit_trail=DB, EXTENDED the audit values for these statements are written in the appropriate table.
    So we do not know if this is the cause but when we try to start the OSAUD collector defined on the Audit Vault Server it can not start and gives us the follwing error: "could not start collector OSAUD_Collector for source <source name>, directory access error for C:\ORACLE\PRODUCT\10.2.0\ADMIN\<db_name>\ADUMP".
    Sorry for the message being so long but we really need some help with this issue.
    thanks in advance.
    Engrid

Maybe you are looking for