Audit Vault 12.1.1 - Report "No data found"

Hola, tengo instalado y configurado Audit Vault 12.1.1
El agente esta deployado.
El retrieve de settings de audit esta ok!
Pero cuando quiero generar un reporte, los reportes salen vacios con el mensaje "no data found"
El agente esta configurado contra una base 11.2.0.3.
La tabla sys.aud$ tiene datos.

The issue seems to be from DB side and an SR would help you in resolving the issue.
However, added below few points you can look as well from your side.
+ DB may be core dumping in which case it would be required to resolve the core dump issue.
+ Running ASH report from sqlplus may not be working in which we need to resolve the DB side issue.
+ If feasible you can choose to upgrade DB to higher version.
Regards,
Bip

Similar Messages

  • Audit Vault 10.2.3.2 and data store db version

    Hi,
    once the installation of AV 10.2.3.2 is completed which will be the database version of the datastore deployed ?
    It is possible to upgrade the audit vault database repository to a different version ?
    where this info is decribed inside the official doc ?
    many thanks
    Angelo

    Hi:
    The underlying database for 10.2.3.2 Audit Vault is at version 10.2.0.4 (EE). It is NOT possible to upgrade just the database component independent of the rest of the tech stack, other than to apply patches and CPUs.
    Regards.

  • IR report - No Data Found exception

    Hi,
    I have created one IR report in apex. I need to get the no data found exception on this report i.e. if user enters some search keywords and he is getting no data in that case want to store the searched keywords in the database for future reference that there is no data for such search criteria.
    Could anyone help me to catch the no data found exception and executing a pl-sql process for fetching the search criteria ?
    Thanks in advance!

    I have created an IR report based on collections. But still I am not able to understand where I can write a code for EXCEPTION NO_DATA_FOUND. The pl-sql code used to create a collection which we write in before header process and the actuall IR report which is build using SQL query on collection so where can I put the exception code?
    What I want is to catch no data found exception when user types something in IR report search bar and gets nothing as a search result. Can you please help me on this?
    Thanks,
    Punam

  • OS data in Audit Vault

    Hi folks!
    In the documentation on the Audit Vault webpage it is said that it is possible to get OS data into the Audit Vault.
    However I do not see this in the documentation. So my question is : How can I get data from the OS (log data) into the Audit Vault?
    cu
    Andreas

    Oracle creates OS files that contain Database audit trail information. We are looking to extract OS audit infomation from the syslog in a future release.
    Thanks.

  • Audit Vault - OS data collection

    Hi all,
    Based on the Oracle Audit Vault Administrator's Guide, Release 10.2.3.2, it is not mentioning anywhere i the tool has the functionality to collect data from OS (Linux, WIN, Unix etc). This is the case right?
    Thanks

    Hi,
    Yes, you are correct. As of this release (10.2.3.2), Audit Vault can only collect audit trails from databases - Oracle, SQL Server, Sybase, and DB2 LUW. Operating System audit trails are not supported.
    Regards.

  • Oracle audit vault collection

    Hi All,
    I have installed Oracle Audit vault server 10.3.0 on a linux 64 bit machine. I have installed the collection agent on my aix server. Registered the db with audit vault. Enabled the collectors.
    avctl show_collector_status -collname DBAUD_Collector -srcname DBA
    Getting collector metrics...
    Collector is running
    Records per second = 0.13
    Bytes per second = 20.91
    [oracle@hostnameconfig]$ avctl show_av_status
    Oracle Audit Vault 10g Database Control Release 10.3.0.0.0
    Copyright (c) 2006, 2011 Oracle Corporation. All rights reserved.
    https://hostname:1158/av
    Oracle Audit Vault 10g is running.
    Logs are generated in directory /wbbin/app/oracle/product/10.3.0/av_1/av/log
    [oracle@hostnameconfig]$
    oracle@agentHost[oracle/app/avagent/bin]# avctl show_oc4j_status
    Agent is running
    But when I am trying to view the reports by loading the warehouse, I am getting the below error:
    OAV-46621: invalid start date 03-OCT-2012 for data warehouse operation; must be less than 03-OCT-2011 ORA-06512: at "AVSYS.DBMS_AUDIT_VAULT", line 6 ORA-06512: at "AVSYS.AV$DW", line 1040 ORA-06512: at "AVSYS.DBMS_AUDIT_VAULT", line 727 ORA-06512: at line 3
    Why it is referring to 03-OCT-2011 ? how do i view the reports.
    Am I missing something!!
    regards,
    Orackzy

    Hi,
    The error is that this agent already exists. If you added it before inadvertently, you will have to provide a new agent name.
    avca add_agent -agentname agent1 -agenthost salesdb.us.example.com
    AVCA started
    Adding agent...
    Enter agent user name: agentusername
    Enter agent user password: agent user pwd
    Re-enter agent user password: agent user pwd
    Agent added successfully.
    Thanks.
    Edited by: tbednar on Sep 29, 2011 7:50 AM

  • Audit vault 10.3 - role 'DV_STREAMS_ADMIN' does not exist

    hi,
    in the audit-vault-admin guide 10.3, step 2.3.1 - 8:
    If you plan to add the REDO collect to your source database, then grant the Oracle source database user account the DV_STREAMS_ADMIN role.
    The DV_STREAMS_ADMIN role enables the management of Oracle Streams processes to be tightly controlled by Database Vault, but does not change or restrict the way an administrator would normally configure Oracle Streams.
    For example:
    SQL> GRANT DV_SECANALYST TO srcuser_ora;
    I got this error when grant that role to srcuser:
    SQL> grant DV_STREAMS_ADMIN to srcuser1;
    grant DV_STREAMS_ADMIN to srcuser1
    ERROR at line 1:
    ORA-01919: role 'DV_STREAMS_ADMIN' does not exist
    Please support !

    Steps 6 and 7 mention DB Vault
    You can raise an SR with Oracle for a documentation change.
    If the source database has Oracle Database Vault installed, then log in as a user who has been granted the DV_OWNER (Database Vault Owner) role and add the source database user to the Oracle Data Dictionary realm.
    For example:
    SQL> CONNECT preston
    Enter password: password
    Connected.
    SQL> EXEC DBMS_MACADM.ADD_AUTH_TO_REALM('Oracle Data Dictionary', 'SRCUSER_ORA', null, dbms_macutl.g_realm_auth_participant);
    SQL> COMMIT;
    If the source database has Oracle Database Vault installed, then grant the Oracle source database user account the DV_SECANALYST role.
    The DV_SECANALYST role enables the user to run Oracle Database Vault reports and monitor Oracle Database Vault. This role also enables the Oracle source database user to collect Database Vault audit trail data from the source database.
    For example:
    SQL> GRANT DV_SECANALYST TO srcuser_ora;

  • Audit vault vs auditing of access

    Can anyone help clarifying what is included in 11g and what is an extra cost? It sounds like AuditVault is an add-on product/cost?
    But what about the audit settings I see here with DBMS_AUDIT_MGMT:
    http://www.oracle-base.com/articles/11g/auditing-enhancements-11gr2.php
    http://docs.oracle.com/cd/E14072_01/network.112/e10574/auditing.htm
    It looks like any enterprise license already has the right to create logs with DBMS_AUDIT_MGMT for free/included. Is that correct? If so, what extra does auditvault give you? It looks like the reporting/alerting/etc...
    But if I just send the raw/free audit logs to splunk for alerting/reporting, it looks like I can still do my own reporting without adding an extra oracle package. Does that sound right?
    Thank you!

    If so, what extra does auditvault give you? It looks like the reporting/alerting/etc...yes ,a GUI based product to setup auditing at database level and get alert,pdf report based on requirement.
    it consolidate data from all source Once consolidated, Oracle Audit Vault removes audit data from the source systems where the audit data was generated, simplifying the management of auditing across the enterprise
    http://www.oracle.com/technetwork/products/audit-vault/overview/index.html
    But if I just send the raw/free audit logs to splunk for alerting/reporting, it looks like I can still do my own reporting without adding an extra oracle package. Does that sound right?yes,

  • Audit Vault Installation problem on windows platform

    Hello!
    I'm trying to install Audit Vault 10.2.2 on windows platform. The installation procedure is successfull (there are no alerts about errors during installation). The enterprise manager is working at http://localhost:1158/em without any problem.
    The installation guide says that audit vault console should work at http://localhost:5700/av, but this site is unreachable.
    I tried to find out the problem, so I started avctl show_av_status
    The result is:
    Exception in thread "main" java.lang.Exception: Invalid Oracle JDBC url
    at oracle.av.avca.Commandarguments.setOracleProperties (Commandarguments.java:281)
    at oracle.av.avca.Commandarguments.processArguments(CommandArguments.java:667)
    at oracle.av.avca.Avctl.startCTL(Avctl.java:70)
    at oracle.av.avca.Avctl.main(Avctl.java:318)
    (avctl start_av results the same problem)
    Could you help me to solve this problem? Please!

    I'd like to help you but it seems to me, from the perspective of the purpose of Audit Vault, that putting a secure repository on top of an insecure operating system is a non sequitur.
    Thus all of my installs have been on Oracle Enterprise Linux and I've never seen any installation-related issues such as you are reporting.
    If you can I would suggest getting, as they say, "a real operating system."
    Performance will improve, hardware utilization will improve, security will improve, and as an additional advantage, this issue will disappear.

  • Oracle Database Vault vs Audit Vault and database firewall

    Hi All,
    I would like to know the main difference between Oracle Database Vault and Oracle Audit Vault and Database firewall.
    I have read all the white papers and documents on them both and find them very similar in work process.
    Only difference I see in the pricing.
    I feel Oracle audit Vault can do all the work of Database Vault with added feature of proactive session monitoring.
    If someone can help me based on their knowledge and experience it would be appreciated.
    Thank you.

    I have read the white papers of both Database Vault and Audit Vault
    According to database Vault sessions can be managed using various roles created as per business requirements.
    Audit vault offers same thing in terms of a firewall which manages and restrictions based on roles created .
    From the white papers:
    DATABAES VAULT:
    Oracle Database Vault restricts access to specific areas in an Oracle database from any user, including users who have administrative access.
    This enables you to apply fine_grained access control to your sensitive data in a variety of ways.
    Oracle Database Vault enables you to create the following components to manage security for your database:
    Realms
    Command Rules
    Factors
    Rule Sets.
    DATABAE AUDIT AND FIREWALL:
    Oracle Audit Vault and database Firewall consolidates database activity monitoring events and audit logs. Policies enforce expected application behaviour, helping preventing SQL injection, application bypass, and other malicious activities from reaching the database while also monitoring and auditing privileged users and other activities inside the database.
    To me these sound very similar of doing same work.
    My apologies as I am unable to paste the whole text here and I cannot type full documents here 

  • Audit Vault 10.3 Console - Internal Error on Pages/Tabs Accessing Port 1158

    Hello Audit Vaulters!
    I wonder if any one has encountered this problem we are having right now.
    We are using the default port 1158 for the AV console. It looks like it has stopped working properly. This port is accessed by the "Audit Policy" tab when you log in as auditor and also by all the tabs when you log in as administrator in the console. When you go to these tabs the first time, you will get "internal error" but when you "refresh" the page by entering the URL (https://<hostname>:1158/av) again on the same page, it works - the page is displayed.
    There were no changes applied to the AV server or even to the collection agent. The only update done was patch 1 for AV 10.3.
    I changed the port from the default 1158 to something else to make sure it's not a port issue. It did not work either.
    Any ideas are welcome.
    Thank you.

    For those who encounter this error in the future, please refer to the update below. I have fixed this problem.
    The issue was that the "administrator" and "auditor" passwords will expire soon . It looks like the the console checks the expiry date of these accounts prior to loading the page. After resetting the passwords for these AV user accounts, we no longer get the "internal error" during the initial load of the page.
    I have asked Oracle to update their documents on AV user account management and how it affects the AV components such as the console. I also asked them if they can improve the console. When the admin and auditor accounts are expiring, the console should just load the page without throwing the "internal error"? Or maybe display a page, warning that the account is expiring so the customers have a clue on what the problem is. Even the log files did not leave any informational messages regarding the expiring accounts so I guess logging the error will be helpful to the users of Audit Vault.

  • Audit Vault Database Firewall 12.1 Repository Load Log Location

    Can anyone tell me where, if any place, that Oracle writes  a log for when it is moving data collected by the Database Firewall into the Audit Vault repository?  Based on "holes" in the data, it appears that the collection and load from the database firewall mysteriously stops but will collect normally once the enforcement point is recycled.
    Environment:  Audit Vault Database Firewall 12.1.0.2
    Thank you.

    Hi!
    Installation configuration depends on what you need: the only mandatory component is Server, other 2 are optional.
    R, Natalia

  • Audit Vault & Apex - ANONYMOUS user recorded rather than Apex end user

    Hi,
    We have Audit Vault 10.2.3 & Apex 3.2
    Audit Vault stores the name of the database user when a table is updated through SQL*Plus etc as expected.
    Problem is through Apex and insert to db table using simple form on table the user ANONYMOUS is recorded.
    We need to have the actual end user logged into Application Express.
    Is there anyway of configuring Audit Vault or Apex to use/pass v('APP_USER')? Does something need to be done in Apex to set a session?
    Running the below shows 2 ANONYMOUS users and no APEX_PUBLIC_USER or Apex end user.
    select username, count(*)
    from v$session
    group by username;
    Any advice & guidance would be great - thanks in advance.

    Having posted the same question on the Apex forum I received the following response and have been able to use CLIENT_ID to return the apex user and session details. Thought it best to post here too incase others search for the same information.
    Since Audit Vault relies on native database auditing it can only collect information that is recorded by the "source" database in its audit trail. APEX populates the CLIENT_INFO field of the connection with the APP_USER. However, CLIENT_INFO is not recorded in the audit trail. Instead the CLIENT_ID is captured. APEX records a composite value in this field. The value is formatted as "APP_USER:SESSION_ID". This value should be recorded in the audit trail and consequently sent to Audit Vault. Audit Vault's reports should be able to display this field, and you can filter on it to get the information you need.

  • Collecting File System Audit logs with Audit Vault

    Can Audit Vault collect multi-platform OS file system audit records and logs as well as network component logs from switchs and routers in addition to DB audit records to satisify ICD 503/NIST/DOD auditing requirements? If not could it be configured to do so?
    thanks

    it only collect data from databases which may be oracle or non-oracle.
    Oracle Audit Vault automates the consolidation and monitoring of audit data from Oracle and non-Oracle databases.
    http://www.oracle.com/technetwork/products/audit-vault/overview/index.html

  • Issue with Audit Vault Collector for Peoplesoft-MS Sql Server

    Experts,
    Requesting your valuable inputs regarding below issue :
    Environment:
    - Peoplesoft with SQL Server 2008
    - Oracle Audit Vault.
    Current issue with Audit Vault collector for SQL server is that it is not giving PSFT login ID instead it is giving Peoplesoft DB service Account ID.
    Is this expected ?. If yes, what is the workaround ? Can Database Firewall is a best option to capture PSFT login ID ?
    Thanks

    Hi Rabi ,
      just do one think here ..
    During data source creation , in the Additional tab area , in the SQL Engine session , select "Vendor SQL"  instead of "Open SQL".
    HOw could u create data source without selecting the driver corrsponding to MS SQL.?
    it is recommended to download the latest Driver and use this for Driver creation.
    let me know ..
                                       Regards
                                       Kishor Gopinathan

Maybe you are looking for

  • I used the wrong email account when setting up ios8 iCloud drive, how can I change it on my iphone5?

    I used the wrong email account while setting up iCloud drive during the upgrade to ios8, how can I change it on my iphone5?

  • Hard drive installation problem, please help

    I installed a new hard drive and get a prompt: "No bootable device -- insert boot disk and press any key" I then insert the Mac OS install disk 1 and press a key and nothing happens -- it stays at the above prompt. What do I need to do?

  • Printing bug in Acrobat 9?

    I am using Windows XP, with SP3; Acrobat V9 Pro with Creative Suite CS3.3 Design Premium. PDFs that printed fine in V8 will not print in V9-Pro. The files appear on my screen and function normally in every aspect, but upon sending to a network printe

  • Flex Mobile Videoplayback ( GPU / CPU )

    Hi, I have problems with videoplayback on Android in an Flex Mobile app. I using the pur AS3 Strobe Media Playback with OSMF. When a play in emulator the video is ok, but on my Android device there are random lines on the Videos ( streamed or local )

  • Syntax for EVALUATE function - placing condition in it

    Hello All, I have a formula in discoverer like this SUM(col1) OVER(PARTITION BY col2, col3, col4 ORDER BY col5 ASC RANGE BETWEEN col6-3 AND col6 I need to implement the same in BI, I have used this to implement the SUM part EVALUATE( 'SUM(%1) OVER (