Audit Vault  adding  RAC database for OSAUD collector.

Hello,
I am configuring Audit Vault 10.2.3 for some AIX databases.
Can anyone tell me what exactly is the method for adding OSAUD collector on both nodes of a RAC database.
I have below configuration.
Database Name TEST
instance name on node 1 TEST1
instance name on node 2 TEST2
cluster name clusterbloc
agent name on node 1 agenttest1
agent name on node 2 agenttest2
I have run the below commands.
For first node,
avorcldb add_source  -src clusterbloc:1521:TEST   -desc 'Test Database'  -agentname agenttest1
Enter Source user name: srcuser1
Enter Source password:
Adding source...
Source added successfully.
source successfully added to Audit Vault
While trying to run for second node, below output was received.
avorcldb add_source  -src clusterbloc:1521:TEST   -desc 'Test Database'  -agentname agenttest2
Enter Source user name: srcuser1
Enter Source password:
source TEST already exists
Storing user credentials in wallet...
Create credential Modify credential
Modify 3
done.
Mapping Source to Agent...
avorcldb add_collector -srcname TEST    -agentname agenttest2   -colltype OSAUD  -instname  TEST2   -orclhome
*/u01/app/oracle/product/11.2.0.2/dbhome_1*
source TEST  verified for OS File Audit Collector collector
Adding collector...
Collector added successfully.
collector successfully added to Audit Vault
remember the following information for use in avctl
Collector name (collname): OSAUD_Collector_TEST2
avorcldb add_collector -srcname TEST   -agentname agenttest1   -colltype OSAUD  -instname   TEST1   -orclhome /u01/app/oracle/product/11.2.0.2/dbhome_1
source TEST verified for OS File Audit Collector collector
Adding collector...
Collector added successfully.
collector successfully added to Audit Vault
remember the following information for use in avctl
Collector name (collname): OSAUD_Collector_TEST1
Now which command should be run for setup ? Or any changes need to be made on earlier commands, especially on add_source ?
avorcldb setup -srcname TEST
Or
these two ?
avorcldb setup -srcname TEST1
avorcldb setup -srcname TEST2

OS collector should be configure for both node in RAC.
and avorcldb setup -srcname command is run on the Audit Vault Collection Agent with source database name.
so please run avorcldb setup -srcname TEST from both agent host.
http://docs.oracle.com/cd/E11062_01/admin.1023/e11059/avadm_app_avorcldb_ref.htm#CEGBEEFJ
Thanks
Kuljeet Pal Singh

Similar Messages

  • Can i  use Oracle Database Audit Vault and Oracle Database Firewall on Solaris?

    Can i  use Oracle Database Audit Vault and Oracle Database Firewall on Solaris?

    4195bee8-4db0-4799-a674-18f89aa500cb wrote:
    i dont have access to My Oracle Support can u send text or html of document please?
    Moderator Action:
    No they cannot send you a document that is available only to those with access to MOS.
    That would violate the conditions of having such service contract credentials.
    Asking someone to violate such privileges is a serious offense and could get that other person's organization banned from all support and all their support contracts cancelled.
    Your post is locked.
    Your duplicate post that you placed into the Audit Vault forum space has been removed (it had no responses).
    This thread which you had placed in the Solaris 10 forum space is moved to the Audit Vault forum space.
    That's the proper location for Audit Vault questions.

  • Audit Vault Server 10.3 for Windows

    Hi
    Do any one is having link for downloading the Oracle Audit vault server for Windows.
    I do have agent of 10.3 but i want server..
    Regards
    Kay

    Hi Kay:
    The Audit Vault Server 10.3 has not been made available on Windows. You should contact Oracle Support if this is critical.

  • Can't find the Audit Vault 10.3 software for the agent on Windows 32 bit.

    the docs for 10.3 suggest windows 32 bit is supported but I can only find on edelivery the 64 bit agent kit.
    Does anyone know where the 32 bit kit is please?
    Thanks
    Mike

    I do see that in Section 1.1 of the 10.3 Collection Agent Install Guide.  However Section 2.3 of that same guide refers you to the latest list of certifications (again, document 848402.1 ).  Not sure why the inconsistency, but you might want to file a SR to get further clarification from Oracle.

  • Oracle Database Vault vs Audit Vault and database firewall

    Hi All,
    I would like to know the main difference between Oracle Database Vault and Oracle Audit Vault and Database firewall.
    I have read all the white papers and documents on them both and find them very similar in work process.
    Only difference I see in the pricing.
    I feel Oracle audit Vault can do all the work of Database Vault with added feature of proactive session monitoring.
    If someone can help me based on their knowledge and experience it would be appreciated.
    Thank you.

    I have read the white papers of both Database Vault and Audit Vault
    According to database Vault sessions can be managed using various roles created as per business requirements.
    Audit vault offers same thing in terms of a firewall which manages and restrictions based on roles created .
    From the white papers:
    DATABAES VAULT:
    Oracle Database Vault restricts access to specific areas in an Oracle database from any user, including users who have administrative access.
    This enables you to apply fine_grained access control to your sensitive data in a variety of ways.
    Oracle Database Vault enables you to create the following components to manage security for your database:
    Realms
    Command Rules
    Factors
    Rule Sets.
    DATABAE AUDIT AND FIREWALL:
    Oracle Audit Vault and database Firewall consolidates database activity monitoring events and audit logs. Policies enforce expected application behaviour, helping preventing SQL injection, application bypass, and other malicious activities from reaching the database while also monitoring and auditing privileged users and other activities inside the database.
    To me these sound very similar of doing same work.
    My apologies as I am unable to paste the whole text here and I cannot type full documents here 

  • RMAN Backup script for RAC Database..please suggest

    Hi All,
    I am currently working on backup policy for RAC Database for my client.The client requirement is to backup while database is shutdown(mount state).I have made below script and could any one please suggest what further things should I need to add with below rman script.
    echo "Shutdown Database";date
    srvctl stop database -d PROD
    srvctl status database -d PROD
    echo "Database shutdown on";date
    echo "Mount Database ";date
    srvctl start instance -d PROD -i "PROD1" -o mount
    srvctl status database -d PROD
    echo "Start Full Database Backup on";date
    $ORACLE_HOME/bin/rman target / nocatalog <<EOF
    configure controlfile autobackup on;
    configure controlfile autobackup format for device type disk to '/BACKUP/PRODBKP/%F';
    run{
    allocate channel c1 device type disk connect 'sys/******@node1-vip:1521/PROD';
    allocate channel c2 device type disk connect 'sys/*****@node2-vip:1521/PROD';
    backup format '/BACKUP/PRODBKP/PROD_df_%t_%s_%p.bak'(database);
    backup format '/BACKUP/PRODBKP/archive_%t_%s_%p.bak' archivelog all;
    copy current controlfile to '/BACKUP/PRODBKP/PROD.ctl';
    delete noprompt obsolete;
    release channel c1;
    release channel c2;
    exit
    EOF
    echo "RMAN Backup Finished on";date
    echo "Shutdown Database";date
    srvctl stop database -d PROD
    echo "Start Database";date
    srvctl start database -d PROD
    srvctl status database -d PROD
    Please share your experiences.
    Regards

    Hi,
    Some tweaks for your script.
    echo "Shutdown Database";date
    srvctl stop database -d PROD
    srvctl status database -d PROD
    echo "Database shutdown on";date
    echo "Mount Database ";date
    srvctl start instance -d PROD -i "PROD1" -o mount1. If you database does not shutdown properly , does your script stops the execution of next step?
    2. configure controlfile autobackup on;
    configure controlfile autobackup format for device type disk to '/BACKUP/PRODBKP/%F';(Why you need to configure this every time) ?
    It's persistent at db level one time setting (until some other script changes the settings by other dba - else remove that - set the configuration at db level once for all)
    - Pavan Kumar N
    3.

  • Error while trying to start OSAUD collector.

    Hi,
    We have installed Oracle Audit Vault 10g (10.2.2) and trying to collect audit data from a Oracle 10g (10.2.0.1) by using the OSAUD collector. We are able to add the collector successfully by using the avorcldb all_collector command but we are getting an error while trying to start the collector.
    Source database Oracle 10g (10.2.1) is configured to collect the audit records in the OS audit trail by using the following statement: ALTER SYSTEM SET AUDIT_TRAIL=OS SCOPE=SPFILE; and the SHOW PARAMETER AUDIT command returns the following values :
    NAME TYPE VALUE
    audit_file_dest string                     C:\ORACLE\PRODUCT\10.2.0\ADMIN\<db_name>\ADUMP
    audit_sys_operations   boolean        TRUE
    audit_trail string                             OS
    We don't know if the values set for the audit_file_dest is correct but after we start working on the database and execute some statements, Oracle is not creating any files on this destination, while for the same statements when the Audit_trail=DB, EXTENDED the audit values for these statements are written in the appropriate table.
    So when we try to start the OSAUD collector defined on the Audit Vault Server it can not start and gives us the follwing error: *"could not start collector OSAUD_Collector for source <source name>, directory access error for C:\ORACLE\PRODUCT\10.2.0\ADMIN\<db_name>\ADUMP"*.
    We would really appreciate some help with this issue.
    thanks in advance.
    Engrid

    Thanks for your answer.
    We have been trying to find Oracle Audit Vault 10.2.3 for Windows Server 2003 but we couldn't find it anywhere for download. On Oracle's website only Audit Vault Agent 10.2.3 for Windows Server 2003 is available for download. We suppose that in order to download Oracle Audit Vault Server 10.2.3 for Windows Server 2003 and any other kind of patches or updates we need to have an account at Metalink????
    Regarding auditing, when we set the Audit_trail =OS on the source database, what does this mean? Does this mean that audit data will be collected both from the Database and the Operating System audits? If so where are this audit records written, in a separate file or on a particular table inside the database itself like in the case when Audit_trail=DB (EXTENDED)?
    Thanks again for your interest, and sorry but we are new at database auditing and Oracle Audit Vault.
    Best Regards
    engrid

  • OEM versus Audit Vault

    Is there such Audit Vault option within OEM? In other word, can you use OEM to set up Audit Vault for the target DBs and monitor it?
    thx

    Hi:
    As of the current production release, there is no explicit integration between OEM and Audit Vault.
    However, OEM can be used to administer Audit Vault's repository database, just as if it were a normal database. Furthermore, some users have wrapped Audit Vault's commands into OEM fetchlets to provide higher-level administrative functions in OEM.
    Regards.

  • Audit Vault Server Installation

    Hi,
    I downloaded Audit Vault setup for Linux -- for Linux x86-64
    I have Oracle prebuilt VM.
    When I invoke ./runInstaller , it fails with error message " ./runInstaller: line 205: /usr/share/server.linux.x64/av/Disk1/install/.oui: cannot execute binary file"
    Any suggestions?
    Below is output of uname -a on the VM.
    Linux localhost.localdomain 2.6.18-194.17.1.0.1.el5 #1 SMP Wed Sep 29 15:40:03 EDT 2010 i686 i686 i386 GNU/Linux
    There are no other error messages.
    Whats going wrong here?
    regards
    Nikhil

    Hi:
    Your VM is running 32-bit Linux, whereas your Audit Vault Server is intended for use on 64-bit only.

  • RAC database rman duplication question

    When I refresh a RAC test system from production, I use RMAN duplicate.  My overall steps are:
    backup prod using rman
    on test system:
    in the init.ora/spfile change parameter cluster_database=false
    shutdown test db
    startup nomount
    use rman duplicate to restore/recover the datafiles
    alter database open resetlogs
    open the database
    shutdown the db
    in the init.ora/spfile set cluster_database=true
    startup the db with srvctl and it starts up the 5 node RAC - srvctl start database -d TEST
    My colleague runs RCONFIG after the database restore and after reading through the Oracle docs, I am not sure whether that is required or not.  I thought RCONFIG was to convert a single instance to RAC --which technically is what we are doing....but I thought this was used only when creating the TEST RAC database for the first time, and after everything was configured, you could refresh without running RCONFIG.   Anybody have any recommendations/knowledge on this I would really appreciate it.  My colleague does not want to run RCONFIG if its not required, but if I am missing some finer point in my method I don't want to say you don't need to run RCONFIG. But I will say, I have cloned RAC for years without RCONFIG.    Thanks everyone.
    -Lori

    As you said, rconfig is the tool for converting a single instance database to cluster database.
    Rconfig creates the configuration for a cluster database, updates the spfile with the necessary changes, adds new redo threads and undo tablespaces for the additional instances.
    When you duplicate a database that already has these, it is not necessary to run rconfig.

  • Issue with Audit Vault Collector for Peoplesoft-MS Sql Server

    Experts,
    Requesting your valuable inputs regarding below issue :
    Environment:
    - Peoplesoft with SQL Server 2008
    - Oracle Audit Vault.
    Current issue with Audit Vault collector for SQL server is that it is not giving PSFT login ID instead it is giving Peoplesoft DB service Account ID.
    Is this expected ?. If yes, what is the workaround ? Can Database Firewall is a best option to capture PSFT login ID ?
    Thanks

    Hi Rabi ,
      just do one think here ..
    During data source creation , in the Additional tab area , in the SQL Engine session , select "Vendor SQL"  instead of "Open SQL".
    HOw could u create data source without selecting the driver corrsponding to MS SQL.?
    it is recommended to download the latest Driver and use this for Driver creation.
    let me know ..
                                       Regards
                                       Kishor Gopinathan

  • Oracle Audit Vault and Database Firewall 12c Available for Download

    Oracle Audit Vault and Database Firewall 12c software is now available for download at http://edelivery.oracle.com

    Dear Zoran Pavlovic,
    Yes is it, but I can't download because of my country.
    So do you have other link?
    ERROR:
    Thank you for accessing the Oracle Software Delivery Cloud. Due to your country location, we are unable to process your request. If you have an active support contract, you may request physical media by either submitting a Service Request or calling Customer Support. If you wish to purchase or evaluate our products on a 30-day trial please contact the appropriate Sales Representative for your country.
    Best Regards,
    Kosal

  • Is the Database Vault portion of Audit Vault only for the Audit Vault DB?

    Hi all, first of thanks in advance.
    I am doing a bit of research in order to fulfill some security system requirements for an upcoming project. In summary the requirement states that DBAs should not have the ability to view personal health information stored in the database.
    My initial thought was to use Oracle Label Security but recall that SYS is exempt from the OLS policies. Next I looked into Oracle Database Vault and the product appears to meet the requirements. However another part of the requirement states that we must prevent undetectable data tampering - which to me sounds like we need to have an auditing product in place not only to audit access and data changes but also to make sure that audit logs can't be tampered with. It seems like Oracle Audit Vault should meet the requirement. When looking into Audit Vault it mentions it comes with Oracle Database Vault and there is some wording which makes me believe that the Oracle Database Vault component is only for the Audit Vault database. Short of installing the product I thought I would post a message to see if my assumption is correct.
    If the assumption is correct it sounds like we would need to purchase both Audit Vault and Database Vault to fully meet the requirement. Can anyone think of any reason we need to include OLS as well?
    Once again, thanks in advance.
    Cheers,
    Eric

    I imagine you are dealing with the HIPAA compliance requirements and facing the same issue faced by many others.
    To audit who has viewed data ... SELECT statements ... you can use Fine Grained Auditing (FGA).
    To meet the government's auditing requirements, as well as those for hospital accreditation Audit Vault will do the trick.
    Keeping DBAs out of the data can be done by a number of means but the issue often comes down to the applications you have purchased and the quality of the vendors. One major source of hospital software in the US, for example, has installed thousands of systems with the exact same password for the schema owner ... and that schema owner has DBA privs.
    So before your run too far down the road of closing the back door ... make sure the front door isn't wide open.

  • In house Management Plugin for Audit Vault Collector Status

    I've developed a plug in to collect the status of the many Audit Vault Collectors we have.
    For the moment I just want the collector as a new target with just a response/status metric.
    I have created a ttd and dc xml file together with a .ksh script.
    I tested the XML using ilint and created a jar file using emctl. I successfully imported and deployed the plug in to the necessary agent and then created one of the new targets.
    The status appeared as up in the console but I then shutdown the collector but the status remains as up.
    I have tested the .ksh script from the command line and it correctly outputs em_status=Up or Down as required but the Down status is not getting to the console.
    I have the collection as 5 minutes.
    Does anyone have any pointers as to what I need to look at please?
    Thanks,
    Mike

    You can enable the Agent metric browser as described in section 2.2.1.2 of the EM Extensibility Guide (http://download.oracle.com/docs/cd/B16240_01/doc/em.102/b40007.pdf) and see what the gets back for each of your metrics.
    Also, from the Extensibility Guide:
    "For target availability to show up correctly on the default target home page, Oracle requires the target metadata file to define a metric with NAME="Response" that contains a column with NAME="Status" and the default collection file must define a critical condition on the "Status" column that represents the target being up or down."
    Presumably, since your target shows as up initially, you have already defined a critical condition on the "Status" column of your "Response" metric. You may want to follow up with the EM extensibility product manager [email protected] to get some help from the Agent team on this issue.

  • Can Audit Vault be used for getting detailed read type information from the siebel database?

    Can Audit Vault be used for getting detailed read type information from the siebel database?

    Kramer wrote:
    saurabh wrote:
    check below cmd to see where archive are generated.
    SQL> archive log list
    And also check the following
    SQL> select flashback_on from v$database;
    Hi
    Here is the out put
    SQL>  select flashback_on from v$database;
    FLASHBACK_ON
    NO
    SQL>  archive log list
    Database log mode              Archive Mode
    Automatic archival             Enabled
    Archive destination            USE_DB_RECOVERY_FILE_DEST
    Oldest online log sequence     11
    Next log sequence to archive   12
    Current log sequence           12
    The flashback is not enabled. But archive log list shows archive destination is specified to use_db_recovery_file_dest.  And I checked the log_archive_dest_10 still empty
    Flashback off or on has nothing to do with it. 

Maybe you are looking for