Avctl show_agent_status

Hi:
I had successfully installed Audit Vault server on Linux, upgraded to 10.2.3.2 and applied all patches without any issues.
I have successuly installed Audit Vault Collection Agent on the same host where my Audit Vault server is running..
However, when i issue avctl show_agent_status command, it says that 'This command is obsolete and is not required to be run'..
Collection Agent is of base version, so not sure how to go around..
Also, i guess i need to upgrade Collection Agent also to 10.2.3.2, but then the document says to stop all collection agents running.. If i do avctl stop_agent, it says that 'This command is obsolete and is not required to be run'.
Let me know how to go around this
Thanks
Krishna

Hi,
You run the avctl show_agent_status on the agent host.
thanks.

Similar Messages

Problems running avctl after successfull installation of audit vault

Hi all,
after successful installation of audit vault, I am able to connect to the instance AV with sqlplus and with the dabase console.
But starting the avctl or questioning the status of the avctl with "avctl show_av_status", I always receive the following error:
C:\oracle\product\10.2.2\av_1\jdk\bin>avctl start_av
Exception in thread "main" java.lang.Exception: Invalid Oracle JDBC url
at oracle.av.avca.CommandArguments.setOracleProperties(CommandArguments.java:281)
at oracle.av.avca.CommandArguments.processArguments(CommandArguments.java:667)
at oracle.av.avca.Avctl.startCTL(Avctl.java:70)
at oracle.av.avca.Avctl.main(Avctl.java:318)
OS: Windows XP Prof 5.1 SP2
Audit Vault DB-Version: 10.2.0.3
Had anybody faced this problem before?
Thanks a lot in advance for your answers
Stefan

I had the same error, On the OUI log there was an error on the instalation of the Database Vault (although the installation finished OK), check if you have the same error output:
<LOG>
MANAGE_INSTANCE start RDBMS result=C:\oracle\product\10.2.2\av_1\bin\dvca_start_rdbms.bat,1,
Executing task SQLPLUS_CATMAC
connect SYS:java.sql.SQLException: ORA-01031: insufficient privileges
Executing task UNLOCK_DVSYS
Error executing task UNLOCK_DVSYS:java.lang.NullPointerException
Executing task LOAD_NLS_FILES
Error executing task LOAD_NLS_FILES:java.lang.NullPointerException
Executing task ACCOUNT_CREATE_OWNER
Error executing task ACCOUNT_CREATE_OWNER:java.lang.NullPointerException
Executing task GRANT_CONNECT_OWNER
Error executing task GRANT_CONNECT_OWNER:java.lang.NullPointerException
Executing task GRANT_ADMIN_DB_TRIG
Error executing task GRANT_ADMIN_DB_TRIG:java.lang.NullPointerException
Executing task GRANT_ALTER_ANY_TRIG
Error executing task GRANT_ALTER_ANY_TRIG:java.lang.NullPointerException
Executing task ACCOUNT_CREATE_MANAGER
Error executing task ACCOUNT_CREATE_MANAGER:java.lang.NullPointerException
Executing task GRANT_CONNECT_MANAGER
Error executing task GRANT_CONNECT_MANAGER:java.lang.NullPointerException
Executing task PASSWORD_CHANGE_DVSYS
Error executing task PASSWORD_CHANGE_DVSYS:java.lang.NullPointerException
Executing task PASSWORD_CHANGE_DVF
Error executing task PASSWORD_CHANGE_DVF:java.lang.NullPointerException
Unable to login to SYS account.. java.sql.SQLException: ORA-01031: insufficient privileges
. Error during post-installation processing. java.lang.NullPointerException. Error during post-installation processing. java.lang.NullPointerException.
</LOG>
Looks like the problem was that I changed sys and system password on the dbca final windows, that maybe wronged the instalation scripts.
When re-installed the AV Server I just press ok on that window without changing any password and it worked.
Hope that Helps.
Alfonso Leon

Avctl start_agent: Http Communication error: 404

Hi Experts,
I am encountering this error when starting the agent in the AV server:
avctl start_agent -agentname avagent1
**Error executing task start_agent: Http Communication error: Http Communication error: 404**
I made sure that oc4j is running in the av-client.
I check the configuration of agent in the console and this is the entries;
Name: avagent1
host: msidr200
port: 7011**
user: DRDB1
with regards to port, I am wondering if the the value 7011 is correct.
My source database and my AV server database is listening both in port 1521.
If I make the port value to 1521, this is the new error.
**Error executing task start_agent: Http Communication error: Premature EOF encountered**
This is the info of AV server and client:
AV Server: Audit vault version 10.2.3.0 | RHEL 2.6.9-89ELsmp | 10.2.0.3 Database
AV Client: Audit vault version 10.2.3.0 | RHEL 2.6.9-89ELsmp | 10.2.0.4 Source* Database*
Logs*****:*
avca.log
03/09/10 03:39:12 AVCTL started
03/09/10 03:39:12 Starting agent...
03/09/10 03:39:12 xml - /audit/u01/avoracle/product/10.2.3/avprod/oc4j/j2ee/OC4J_DBConsole_msisvr220.msi.com_av/config/av-web-site.xml
03/09/10 03:39:12 xml URL - file:/audit/u01/avoracle/product/10.2.3/avprod/oc4j/j2ee/OC4J_DBConsole_msisvr220.msi.com_av/config/av-web-site.xml
03/09/10 03:41:55 Error executing task start_agent: Http Communication error: Premature EOF encountered
Thanks,
Jay
03/09/10 04:48:18 AVCTL started
03/09/10 04:48:18 Starting agent...
03/09/10 04:48:18 xml - /audit/u01/avoracle/product/10.2.3/avprod/oc4j/j2ee/OC4J_DBConsole_msisvr220.msi.com_av/config/av-web-site.xml
03/09/10 04:48:18 xml URL - file:/audit/u01/avoracle/product/10.2.3/avprod/oc4j/j2ee/OC4J_DBConsole_msisvr220.msi.com_av/config/av-web-site.xml
03/09/10 04:48:20 Error executing task start_agent: Http Communication error: Http Communication error: 404
av_client-0.log
Mar 9, 2010 9:05:30 AM Thread-11 FINE: HttpManagementAdaptor.getAgnetURL, connect to:http://msidr200.msi.com:7011
Mar 9, 2010 9:05:30 AM Thread-11 FINE: HttpManagementAdaptor.getResponse, conn.Get, /AVAgent//collectorMetric.av[LHTTPClient.NVPair;@1d652
Mar 9, 2010 9:05:30 AM Thread-11 FINE: HttpManagementAdaptor.getAgnetURL, connect to:http://msidr200.msi.com:7011
Mar 9, 2010 9:05:30 AM Thread-11 FINE: HttpManagementAdaptor.getResponse, conn.Get, /AVAgent//collectorMetric.av[LHTTPClient.NVPair;@164804
Mar 9, 2010 9:05:32 AM Thread-12 FINE: HttpManagementAdaptor.getAgnetURL, connect to:http://msidr200.msi.com:7011
Mar 9, 2010 9:05:32 AM Thread-12 FINE: HttpManagementAdaptor.getResponse, conn.Get, /AVAgent//agentMetric.av[LHTTPClient.NVPair;@11d20d3
Mar 9, 2010 9:05:33 AM Thread-11 FINE: url=jdbc:oracle:oci:@av
Mar 9, 2010 9:05:33 AM Thread-11 FINE: url=jdbc:oracle:oci:@av
Mar 9, 2010 9:05:33 AM Thread-11 FINE: url=jdbc:oracle:oci:@av
Mar 9, 2010 9:05:34 AM Thread-11 FINE: url=jdbc:oracle:oci:@av
Mar 9, 2010 9:05:34 AM Thread-11 FINE: url=jdbc:oracle:oci:@av
Mar 9, 2010 9:05:34 AM Thread-11 FINE: url=jdbc:oracle:oci:@av
Mar 9, 2010 9:05:34 AM Thread-11 FINE: url=jdbc:oracle:oci:@av
Mar 9, 2010 9:05:34 AM Thread-11 FINE: url=jdbc:oracle:oci:@av
Mar 9, 2010 9:05:34 AM Thread-11 FINE: url=jdbc:oracle:oci:@av
Mar 9, 2010 9:05:34 AM Thread-11 FINE: url=jdbc:oracle:oci:@av
Mar 9, 2010 9:05:35 AM Thread-11 FINE: url=jdbc:oracle:oci:@av
Mar 9, 2010 9:05:35 AM Thread-11 FINE: url=jdbc:oracle:oci:@av
Mar 9, 2010 9:05:35 AM Thread-11 FINE: HttpManagementAdaptor.getAgnetURL, connect to:http://msidr200:1521
Mar 9, 2010 9:05:35 AM Thread-11 FINE: HttpManagementAdaptor.getResponse, conn.Get, /AVAgent//agentMetric.av[LHTTPClient.NVPair;@164bff9
Mar 9, 2010 9:08:13 AM Thread-11 FINE: HttpManagementAdaptor.getAgnetURL, connect to:http://msidr200:1521
Mar 9, 2010 9:08:13 AM Thread-11 FINE: HttpManagementAdaptor.getResponse, conn.Get, /AVAgent//agentMetric.av[LHTTPClient.NVPair;@61a7e6
Mar 9, 2010 9:35:48 AM Thread-13 SEVERE: 8859_1
Mar 9, 2010 9:35:48 AM Thread-13 SEVERE: 8859_1
Mar 9, 2010 9:35:48 AM Thread-13 SEVERE: 8859_1

Hi,
Mar 9, 2010 11:10:16 AM Thread-12 FINE: HttpManagementAdaptor.getAgnetURL, connect to:*http://msidr200:7011*
Mar 9, 2010 11:10:16 AM Thread-12 FINE: HttpManagementAdaptor.getResponse, conn.Get, /AVAgent//agentMetric.av[LHTTPClient.NVPair;@154ea79
Mar 9, 2010 11:10:16 AM Thread-12 SEVERE: Http Communication error: Http Communication error: 404
Http Communication error: Http Communication error: 404
at oracle.av.management.impl.HttpManagementAdaptor.getResponse(HttpManagementAdaptor.java:210)
at oracle.av.management.impl.HttpManagementAdaptor.getData(HttpManagementAdaptor.java:258)
at oracle.av.management.impl.HttpManagementAdaptor.collectAgentMetrics(HttpManagementAdaptor.java:352)
at oracle.av.management.impl.ManagementServiceImpl.isAgentAlive(ManagementServiceImpl.java:457)
at oracle.av.management.impl.ManagementServiceImpl.startAgent(ManagementServiceImpl.java:812)
at oracle.av.management.impl.ManagementServiceImpl.startAgent(ManagementServiceImpl.java:779)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:324)
at oracle.av.action.ActionContext$Invocation.invoke(ActionContext.java:430)
at oracle.av.action.ActionContext.next(ActionContext.java:121)
at oracle.av.action.ActionServlet.handleAction(ActionServlet.java:295)
at oracle.av.action.ActionServlet.doProcess(ActionServlet.java:132)
at oracle.av.action.ActionServlet.doPost(ActionServlet.java:194)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at com.evermind.server.http.ResourceFilterChain.doFilter(ResourceFilterChain.java:65)
at oracle.sysman.db.avauth.AVXSSFilter.doFilter(AVXSSFilter.java:54)
at com.evermind.server.http.EvermindFilterChain.doFilter(EvermindFilterChain.java:16)
at oracle.sysman.eml.app.ContextInitFilter.doFilter(ContextInitFilter.java:269)
at com.evermind.server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:600)
at com.evermind.server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:317)
at com.evermind.server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:793)
at com.evermind.server.http.HttpRequestHandler.run(HttpRequestHandler.java:270)
at com.evermind.server.http.HttpRequestHandler.run(HttpRequestHandler.java:112)
at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:192)
at java.lang.Thread.run(Thread.java:534)
Nested Exception:
Http Communication error: 404
at oracle.av.management.impl.HttpManagementAdaptor.getResponse(HttpManagementAdaptor.java:203)
at oracle.av.management.impl.HttpManagementAdaptor.getData(HttpManagementAdaptor.java:258)
at oracle.av.management.impl.HttpManagementAdaptor.collectAgentMetrics(HttpManagementAdaptor.java:352)
at oracle.av.management.impl.ManagementServiceImpl.isAgentAlive(ManagementServiceImpl.java:457)
at oracle.av.management.impl.ManagementServiceImpl.startAgent(ManagementServiceImpl.java:812)
at oracle.av.management.impl.ManagementServiceImpl.startAgent(ManagementServiceImpl.java:779)
regards,
jay a
Edited by: Jay A on Mar 9, 2010 3:11 AM

Avctl starting error

im workng with AUDIT VAULT when i execute following commands on AV server it gives following errors kindly help me to sortout this error
avctl start_agent -agentname agent007
AVCTL started
Starting agent...
Error executing task start_agent: Internal Error
avctl start_collector -collname OSAUD_Collector -srcname orcl
AVCTL started
Starting collector...
Error executing task start_collector: Internal Error

1. This is not urgent.
If you house if burning down or someone is drowning that is urgent.
2. You asked this same question in a previous thread many days ago.
In that thread you posted the following:
"Thanx alot sir
i have fixed my prob by setting network connectivety"
Please delete this thread, change the subject to "Ignore" and if you have something of concern post it to the original thread. Thank you.

Audit Vault Installation problem on windows platform

Hello!
I'm trying to install Audit Vault 10.2.2 on windows platform. The installation procedure is successfull (there are no alerts about errors during installation). The enterprise manager is working at http://localhost:1158/em without any problem.
The installation guide says that audit vault console should work at http://localhost:5700/av, but this site is unreachable.
I tried to find out the problem, so I started avctl show_av_status
The result is:
Exception in thread "main" java.lang.Exception: Invalid Oracle JDBC url
at oracle.av.avca.Commandarguments.setOracleProperties (Commandarguments.java:281)
at oracle.av.avca.Commandarguments.processArguments(CommandArguments.java:667)
at oracle.av.avca.Avctl.startCTL(Avctl.java:70)
at oracle.av.avca.Avctl.main(Avctl.java:318)
(avctl start_av results the same problem)
Could you help me to solve this problem? Please!

I'd like to help you but it seems to me, from the perspective of the purpose of Audit Vault, that putting a secure repository on top of an insecure operating system is a non sequitur.
Thus all of my installs have been on Oracle Enterprise Linux and I've never seen any installation-related issues such as you are reporting.
If you can I would suggest getting, as they say, "a real operating system."
Performance will improve, hardware utilization will improve, security will improve, and as an additional advantage, this issue will disappear.

ERROR: ORA-01017: invalid username/password; logon denied

Hi all
I need your kind help.
I have installed Oracle Audit Vault Server Release 10.2.3.2 in Linux system and collection agent in Windows system. Adding and starting DBAUD collector went fine however adding REDO collector return back errors when executing avorcldb add_collector command as follow
[oracle@avsrv ~]$
[oracle@avsrv ~]$ avorcldb add_collector -srcname orcl -agentname avagent01 -colltype REDO -av Lugaopc:1521:orcl
collector REDO_Collector for source orcl already exists
initializing REDO Collector
ERROR: could not get AV source user connection using jdbc:oracle:oci:@(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=Lugaopc)(PORT=1521))(CONNECT_DATA=(SERVICE_NAME=orcl)))
ERROR: ORA-01017: invalid username/password; logon denied
[oracle@avsrv ~]$
Here is the contents of avorcldb.log file
09-09-13 16:58:44 [INFO ] Processing command add_collector
09-09-13 16:58:44 [INFO ] Processing arg -srcname = orcl
09-09-13 16:58:44 [INFO ] Processing arg -agentname = avagent01
09-09-13 16:58:44 [INFO ] Processing arg -colltype = REDO
09-09-13 16:58:44 [INFO ] Processing arg -av = Lugaopc:1521:orcl
09-09-13 16:58:44 [INFO ] Connect info : Lugaopc:1521:orcl
09-09-13 16:58:45 [INFO ] Got AV admin connection using jdbc:oracle:oci:@AVDB
09-09-13 16:58:45 [INFO ] Executing SQL as [ADM@AV] select s.host||':'||a1.num_value||':'||a2.char_value from avsys.av$attrvalue a1, avsys.av$attrvalue a2, avsys.av$source s, avsys.av$attrdef ad1, avsys.av$attrdef ad2 where source_name = :1 and a1.inst_id = s.source_id and a2.inst_id = s.source_id and a1.attr_id = ad1.attr_id and ad1.attr_name = 'PORT' and a2.attr_id = ad2.attr_id and ad2.attr_name = 'DB_SERVICE'
09-09-13 16:58:45 [INFO ] Using bind value orcl
09-09-13 16:58:45 [INFO ] Return value = Lugaopc:1521:orcl
09-09-13 16:58:45 [INFO ] Connect info : Lugaopc:1521:orcl
09-09-13 16:58:45 [INFO ] Executing SQL as [ADM@AV] select to_char(source_id) from avsys.av$source where source_name = :1
09-09-13 16:58:45 [INFO ] Using bind value orcl
09-09-13 16:58:45 [INFO ] Return value = 1
09-09-13 16:58:46 [INFO ] Got source user connection using jdbc:oracle:oci:@(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=Lugaopc)(PORT=1521))(CONNECT_DATA=(SERVICE_NAME=orcl)))
09-09-13 16:58:46 [INFO ] Executing SQL as [ADM@AV] select decode(c.status, 1, 'active', 0, 'dropped', null) from avsys.av$collector c, avsys.av$source s where source_name = :1 and collector_name = :2 and c.source_id = s.source_id
09-09-13 16:58:46 [INFO ] Using bind value orcl
09-09-13 16:58:46 [INFO ] Using bind value REDO_Collector
09-09-13 16:58:46 [INFO ] Return value = active
09-09-13 16:58:46 [MESG ] collector REDO_Collector for source orcl already exists
09-09-13 16:58:46 [INFO ] Executing SQL as [ADM@AV] select decode(c.status, 1, 'active', 0, 'dropped', null) from avsys.av$collector c, avsys.av$source s where source_name = :1 and collector_name = :2 and c.source_id = s.source_id
09-09-13 16:58:46 [INFO ] Using bind value orcl
09-09-13 16:58:46 [INFO ] Using bind value REDO_Collector
09-09-13 16:58:46 [INFO ] Return value = active
09-09-13 16:58:46 [MESG ] initializing REDO Collector
09-09-13 16:58:46 [INFO ] Executing SQL as [ADM@AV] select username from avsys.av$source where source_name = :1
09-09-13 16:58:46 [INFO ] Using bind value orcl
09-09-13 16:58:46 [INFO ] Return value = AVSRCUSR1
09-09-13 16:58:46 [INFO ] Executing SQL as [ADM@AV] {? = call avsys.dbms_audit_vault.reset_source_user(?)}
09-09-13 16:58:46 [INFO ] Adding mask for user password
09-09-13 16:58:46 [INFO ] Executing SQL as [USR@SRC] select table_name from user_tables where upper(table_name) = upper(:1)
09-09-13 16:58:46 [INFO ] Using bind value STREAMS_HEARTBEAT
09-09-13 16:58:46 [INFO ] Return value = STREAMS_HEARTBEAT
09-09-13 16:58:46 [INFO ] Executing SQL as [USR@SRC] drop table streams_heartbeat
09-09-13 16:58:46 [INFO ] Executing SQL as [USR@SRC] create table streams_heartbeat( src_dbname varchar2(4000), job_number number, heartbeat_time timestamp)
09-09-13 16:58:46 [INFO ] Executing SQL as [USR@SRC] declare dbs_name varchar2(4000); begin select global_name into dbs_name from global_name; insert into streams_heartbeat values (dbs_name, 0, SYSTIMESTAMP); end;
09-09-13 16:58:46 [INFO ] Executing SQL as [USR@SRC] create or replace procedure update_heartbeat IS begin update streams_heartbeat set heartbeat_time=(select systimestamp from dual); commit; end;
09-09-13 16:58:46 [INFO ] Executing SQL as [USR@SRC] select table_name from user_tables where upper(table_name) = upper(:1)
09-09-13 16:58:46 [INFO ] Using bind value CAPTURE_RULES
09-09-13 16:58:46 [INFO ] Return value = CAPTURE_RULES
09-09-13 16:58:46 [INFO ] Executing SQL as [USR@SRC] drop table capture_rules
09-09-13 16:58:46 [INFO ] Executing SQL as [USR@SRC] create table capture_rules( rule_name varchar2(50), rule_scope varchar2(6), rule_type varchar2(3), obj_name   varchar2(100))
09-09-13 16:58:46 [INFO ] Executing SQL as [ADM@AV] select global_name from global_name
09-09-13 16:58:46 [INFO ] Return value = AVDB.AVSRV
09-09-13 16:58:46 [INFO ] Executing SQL as [USR@SRC] select db_link from user_db_links where db_link = :1
09-09-13 16:58:46 [INFO ] Using bind value AVDB.AVSRV
09-09-13 16:58:46 [INFO ] Return value = AVDB.AVSRV
09-09-13 16:58:46 [INFO ] Executing SQL as [USR@SRC] drop database link "AVDB.AVSRV"
09-09-13 16:58:46 [INFO ] Executing SQL as [USR@SRC] select version from v$instance
09-09-13 16:58:46 [INFO ] Return value = 11.2.0.1.0
09-09-13 16:58:46 [INFO ] Creating DB link using AVDB.AVSRV,AVSRCUSR1,{avsrcusr_pwd},Lugaopc,1521,orcl
09-09-13 16:58:46 [INFO ] Connecting as srcuser_ora01 to @(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=Lugaopc)(PORT=1521))(CONNECT_DATA=(SERVICE_NAME=orcl)))
09-09-13 16:58:46 [INFO ] Output from SQLPlus
09-09-13 16:58:46 [INFO ]
09-09-13 16:58:46 [INFO ] Package created.
09-09-13 16:58:46 [INFO ]
09-09-13 16:58:46 [INFO ] No errors.
09-09-13 16:58:47 [INFO ]
09-09-13 16:58:47 [INFO ] Package body created.
09-09-13 16:58:47 [INFO ]
09-09-13 16:58:47 [INFO ] No errors.
09-09-13 16:58:47 [INFO ]
09-09-13 16:58:47 [INFO ] Package created.
09-09-13 16:58:47 [INFO ]
09-09-13 16:58:47 [INFO ] No errors.
09-09-13 16:58:47 [INFO ]
09-09-13 16:58:47 [INFO ] Package body created.
09-09-13 16:58:47 [INFO ]
09-09-13 16:58:47 [INFO ] No errors.
09-09-13 16:58:47 [INFO ] Executing SQL as [USR@SRC] select distinct name from user_errors where name = :1
09-09-13 16:58:47 [INFO ] Using bind value DBMS_SRC_STREAMS_COLLECTOR
09-09-13 16:58:47 [INFO ] Return value = null
09-09-13 16:58:47 [ERROR] could not get AV source user connection using jdbc:oracle:oci:@(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=Lugaopc)(PORT=1521))(CONNECT_DATA=(SERVICE_NAME=orcl)))
09-09-13 16:58:47 [ERROR] ORA-01017: invalid username/password; logon denied
java.sql.SQLException: ORA-01017: invalid username/password; logon denied
    at oracle.jdbc.driver.T2CConnection.checkError(T2CConnection.java:765)
    at oracle.jdbc.driver.T2CConnection.logon(T2CConnection.java:414)
    at oracle.jdbc.driver.PhysicalConnection.<init>(PhysicalConnection.java:546)
    at oracle.jdbc.driver.T2CConnection.<init>(T2CConnection.java:162)
    at oracle.jdbc.driver.T2CDriverExtension.getConnection(T2CDriverExtension.java:53)
    at oracle.jdbc.driver.OracleDriver.connect(OracleDriver.java:521)
    at java.sql.DriverManager.getConnection(DriverManager.java:525)
    at java.sql.DriverManager.getConnection(DriverManager.java:140)
    at oracle.av.avca.jdbc.JdbcConnection.<init>(JdbcConnection.java:87)
    at oracle.av.orcldb.DAO.initConnection(DAO.java:79)
    at oracle.av.orcldb.DAO.<init>(DAO.java:64)
    at oracle.av.orcldb.commands.AddCollector.setupCollector(AddCollector.java:746)
    at oracle.av.orcldb.commands.AddCollector.execute(AddCollector.java:230)
    at oracle.av.orcldb.Command.process(Command.java:89)
    at oracle.av.orcldb.Main.process(Main.java:118)
    at oracle.av.orcldb.Main.main(Main.java:132)
I have searched the forum to my level best without clear solution
Regards
Sadock

Hi gurus
I don't believe if this is missing solution from oracle community. I have decided to installed the collction agent and source database in linux system, so now both auditt vault server and collction agent are running in Linux system (but separately)
I am wondering, avorcldb add_collector -srcname ORCL -agentname avagent01 -colltype DBAUD and avorcldb add_collector -srcname ORCL -agentname avagent01 -colltype OSAUD -orclhome /u01/app/oracle/product/11.2.0/dbhome_1 are working fine and I am able to start these collectors
The avorcldb verify -src Lugaosrv:1521:ORCL.LUGAOSRV -colltype ALL command also return good results
[oracle@avsrv ~]$ avorcldb verify -src Lugaosrv:1521:ORCL.LUGAOSRV -colltype ALL
Enter Source user name: srcuser_ora01
Enter Source password:
source ORCL.LUGAOSRV verified for OS File Audit Collector collector
source ORCL.LUGAOSRV verified for Aud$/FGA_LOG$ Audit Collector collector
source ORCL.LUGAOSRV verified for REDO Log Audit Collector collector
[oracle@avsrv ~]$
The problem still I am facing is when attempting to add REDO collector. In fact the collector is added successful and i can see it even on EM console.
[oracle@avsrv ~]$ avorcldb add_collector -srcname ORCL -agentname avagent01 -colltype REDO -av Lugaosrv:1521:ORCL.LUGAOSRV
source ORCL verified for REDO Log Audit Collector collector
Adding collector...
Collector added successfully.
remember the following information for use in avctl
Collector name (collname): REDO_Collector
initializing REDO Collector
ERROR: could not get AV source user connection using jdbc:oracle:oci:@(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=Lugaosrv)(PORT=1521))(CONNECT_DATA=(SERVICE_NAME=ORCL.LUGAOSRV)))
ERROR: ORA-01017: invalid username/password; logon denied
[oracle@avsrv ~]$
Any help will be appreciated
Sadock

How to carry out real-time or near real-time alerts?

I just wonder when the source audit data transfer to audit vault server, does it done by Refreshing the Warehouse , or another process? Refreshing the Warehouse seems only normalize the raw audit data into the data warehouse. And can we control the frequency of transfering source audit data from soucre to audit valult server ?

I was traced into transfering audit data from source to audit vault server, and found that it's very quickly to get the new audit data from source db into the audit vault server's table named avsys.av$rads_flat, it's almost realtime, but I have no idea about which process has done this, which process? how to control the frequecy ?
Although the server has gotten the new audit data into the avsys.av$rads_flat, the warehouse still cann't get the new audit data whatever I refreshed the warehouse via Audit Vault Console or using command "avctl refresh_warehouse -wait" until 24 hours later. user579967 seems has the same problem, it really frustrated me. Is there anyone knows how ?

Oracle audit vault collection

Hi All,
I have installed Oracle Audit vault server 10.3.0 on a linux 64 bit machine. I have installed the collection agent on my aix server. Registered the db with audit vault. Enabled the collectors.
avctl show_collector_status -collname DBAUD_Collector -srcname DBA
Getting collector metrics...
Collector is running
Records per second = 0.13
Bytes per second = 20.91
[oracle@hostnameconfig]$ avctl show_av_status
Oracle Audit Vault 10g Database Control Release 10.3.0.0.0
Copyright (c) 2006, 2011 Oracle Corporation. All rights reserved.
https://hostname:1158/av
Oracle Audit Vault 10g is running.
Logs are generated in directory /wbbin/app/oracle/product/10.3.0/av_1/av/log
[oracle@hostnameconfig]$
oracle@agentHost[oracle/app/avagent/bin]# avctl show_oc4j_status
Agent is running
But when I am trying to view the reports by loading the warehouse, I am getting the below error:
OAV-46621: invalid start date 03-OCT-2012 for data warehouse operation; must be less than 03-OCT-2011 ORA-06512: at "AVSYS.DBMS_AUDIT_VAULT", line 6 ORA-06512: at "AVSYS.AV$DW", line 1040 ORA-06512: at "AVSYS.DBMS_AUDIT_VAULT", line 727 ORA-06512: at line 3
Why it is referring to 03-OCT-2011 ? how do i view the reports.
Am I missing something!!
regards,
Orackzy

Hi,
The error is that this agent already exists. If you added it before inadvertently, you will have to provide a new agent name.
avca add_agent -agentname agent1 -agenthost salesdb.us.example.com
AVCA started
Adding agent...
Enter agent user name: agentusername
Enter agent user password: agent user pwd
Re-enter agent user password: agent user pwd
Agent added successfully.
Thanks.
Edited by: tbednar on Sep 29, 2011 7:50 AM

AV Agent and OS Collector after server reboot

We are using Oracle AV Server and AV Agent on version 10.2.0.3.2 with Bundle Patch #1.
If the target server reboots, both AV agent and OS Aud collector does not come up automatically ?
Is that a normal behavior ? or we have to do some modifications to get it automatically started.
Appreciate your guidance.
Thanks,
Viral

You could put it as a startup script, but there isn't anything already written. I call a cron script every hour to make sure that the collectors and agent is up. We had to setup trusted connections from the avagent -> avserver to start the collectors:
This is on the agent server. We call it every hour from cron.
#!/bin/ksh
export ORACLE_HOME=<you set>
export LD_LIBRARY_PATH_64=<you set>
export LD_LIBRARY_PATH=<you set>
export PATH=/bin:/usr/local/bin:/usr/bin:${ORACLE_HOME}/bin
export collector_info="<yer collector name 1>:<yer source name 1>
<yer collector name 2>:<yer source name 2>"
start_av () {
# See if av agent is running
avctl show_oc4j_status | grep not
export exit_status=${?}
# If it is not running then start it
if [ ${exit_status} -eq 0 ]; then
echo "Starting AV agent"
avctl start_oc4j
else
echo "AV agent is already running"
fi
start_collector () {
export collector_name=$1
export source_name=$2
# The collector needs to be started from the home av box
ssh <yer av server ip> /home/oracle/sh/start_collector.sh ${collector_name} ${source_name}
export exit_status=$?
if [ ${exit_status} -eq 0 ]; then
echo "The collector ${collector_name} for ${source_name} was started"
elif [ ${exit_status} -eq 99 ]; then
echo "The collector ${collector_name} for ${source_name} was already running"
else
echo "The collector ${collector_name} for ${source_name} may have an issue"
fi
start_av
for i in ${collector_info}; do
collector_name=`echo $i | awk '{ FS=":" }{ print $1 }'`
source_name=`echo $i | awk '{ FS=":" }{ print $2 }'`
start_collector ${collector_name} ${source_name}
doneThis is on your av server start_collector.sh
export ORACLE_SID=<yer sid>
export ORAENV_ASK=NO
. /usr/local/bin/oraenv 1>/dev/null 2>/dev/null
export collector_name=$1
export source_name=$2
export exit_collector_already_running=99
start_collector () {
#Check to see if the collector is already running
avctl show_collector_status     \
      -collname $collector_name \
      -srcname $source_name     \
      | grep not
export exit_status=$?
# If the collector is not running then start it
if [ $exit_status -eq 0 ]; then
avctl start_collector           \
        -collname $collector_name \
        -srcname $source_name
else
# Exit with a status that the collector is already running
exit $exit_collector_already_running
fi
start_collector

Redo Collector goes down after starting correctly

Hi. I'm experiencing some problems with the REDO collector.
Versions, etc....
AV server: 10.2.3.1 - Red Hat Enterprise Linux AS release 4 (Nahant Update 5) 64 bits
Audited database: Oracle 10.2.0.4 - Red Hat Enterprise Linux AS release 4 (Nahant Update 5) 64 bits.
OSAUD and REDO collectors verified with avorcldb and, apparently, deployed without problems.
When i start the REDO collector from the av admin console, this message is shown "El recopilador PXMEDO01.SACYL.ES:REDO_pxmedo01 se ha iniciado correctamente" (in english -The collector PXMEDO01.SACYL.ES:REDO_pxmedo01 has been started successfully). Just some seconds later, the collector appears to be stopped...
From the command line:
avctl start_collector -collname REDO_pxmedo01 -srcname PXMEDO01.SACYL.ES
AVCTL iniciado
Iniciando recopilador...
El recopilador se ha iniciado correctamente. (in english - the collector started successfully)
just few seconds seconds after the previous command ends, i send this one
avctl show_collector_status -collname REDO_pxmedo01 -srcname PXMEDO01.SACYL.ES
AVCTL iniciado
Obteniendo mÃ©tricas de recopilador...
No se estÃ¡ ejecutando el recopilador ((in english - the collector is not running)
Registros por Segundo = 0,00
Bytes por segundo = 0,00
Any ideas of what's going on?
Thanks in advance.

Hi again. Now, i saw the error on alert.log. All this is written every time i try to start the REDO collector:
Thu Dec 10 10:07:13 2009
Streams CAPTURE C001 started with pid=65, OS id=20295
Thu Dec 10 10:07:13 2009
LOGMINER: Parameters summary for session# = 1
LOGMINER: Number of processes = 3, Transaction Chunk Size = 1
LOGMINER: Memory Size = 10M, Checkpoint interval = 100M
LOGMINER: session# = 1, reader process P000 started with pid=66 OS id=20268
LOGMINER: session# = 1, preparer process P002 started with pid=61 OS id=20272
LOGMINER: session# = 1, builder process P001 started with pid=67 OS id=20270
Thu Dec 10 10:07:15 2009
Streams CAPTURE C001 with pid=65, OS id=20295 stopped
Thu Dec 10 10:07:15 2009
Errors in file /opt/oracle/10gr2/exra4/pxmedo01/bdump/pxmedo01_c001_20295.trc:
ORA-00604: se ha producido un error a nivel 1 de SQL recursivo (SQL recursive error at level 1)
ORA-14097: el tipo o el tamaño de columna no coinciden en ALTER TABLE EXCHANGE PARTITION (the type or size of column do not match in ALTER TABLE EXCHANGE PARTITION )
ORA-06512: en "SYS.LOGMNR_KRVRDLUID3", línea 1799
ORA-06512: en línea 1

Error when creating REDO collector

Hi
I am setting up Audit vault in my test environment, and I have successfully installed agent and every looks fine in the web GUI, I see my previous collector and agent is up and running
However, when I try to add redo collector I end up with this:
bash-3.00$ /usr/local/bin/sudo -u myuser $ORACLE_HOME/bin/avorcldb add_collector -srcname INTTDB99.WORLD -agentname agent1 -colltype REDO -av myhost.unix:1521:av3 -collname blah
source INTTDB99.WORLD verified for REDO Log Audit Collector collector
Adding collector...
Collector added successfully.
collector successfully added to Audit Vault
remember the following information for use in avctl
Collector name (collname): blah
initializing REDO Collector
ERROR: java.sql.SQLException: ORA-01031: insufficient privileges
So it gets added, but fails to do whatever it tries to do. Anyone had any similar experiences?
DBAUD collector was installed without any issue.
Running latest available downloadable version
Anything is helpful :) thank you
Johnny
Edited by: Johnny_Johnny on Oct 29, 2009 7:51 AM

Dear jony
the problem here is the REDO collector does not initialize, the APPLY process on the Audit Vault Server and CAPTURE process on the source database
cannot start. This problem happens if the source user account does not
have the correct privileges. Ensure that you ran the zarsspriv.sql script,
after running this script again start collector .Hopefully issue resolved
The other problem could be the compatibility between vesions of Av server and Source databse look in to the pre-requsits of AV server installation for Redo collector.

Detail report error

Dear all
i have installed the audit vault server 10.2.0.3 and agent on a system OEL5 (oracle enterprise linux5) and i want to audit oracle database 11g rel2. its also installed on OEL5. every thing is fine and working correctly.
i am facing 2 problems
1 -when i want to view a detailed report it gives eror, AV server collects the reports and reports are visible in report view when i want to open a single detailed view report it give error and could not open detailed report.
2 - when i try to start OSAUD it also unable to start i use the comand
AVCTL start_collector -collname OSAUD_Collector -srcname ORCL.VAULT.COM
it give internal error could not start OSAUD_collector
the prompt response will be highly appretiated.

hi all
i got this error resolved that i was not abel to view full report by doing this procedure
1) set the environment variables for the AV Server
2) backup the AV database
3) connect as sysdba to the AV database and run :
ALTER SYSTEM SET JOB_QUEUE_PROCESSES=0;
4) Run the following commands in the AV Server environment:
$ cd $ORACLE_HOME/bin
$ ./avmetadata
5) connect as sysdba to the AV database and run:
ALTER SYSTEM SET JOB_QUEUE_PROCESSES=10;

Audit Vault adding RAC database for OSAUD collector.

Hello,
I am configuring Audit Vault 10.2.3 for some AIX databases.
Can anyone tell me what exactly is the method for adding OSAUD collector on both nodes of a RAC database.
I have below configuration.
Database Name TEST
instance name on node 1 TEST1
instance name on node 2 TEST2
cluster name clusterbloc
agent name on node 1 agenttest1
agent name on node 2 agenttest2
I have run the below commands.
For first node,
avorcldb add_source -src clusterbloc:1521:TEST   -desc 'Test Database' -agentname agenttest1
Enter Source user name: srcuser1
Enter Source password:
Adding source...
Source added successfully.
source successfully added to Audit Vault
While trying to run for second node, below output was received.
avorcldb add_source -src clusterbloc:1521:TEST   -desc 'Test Database' -agentname agenttest2
Enter Source user name: srcuser1
Enter Source password:
source TEST already exists
Storing user credentials in wallet...
Create credential Modify credential
Modify 3
done.
Mapping Source to Agent...
avorcldb add_collector -srcname TEST    -agentname agenttest2   -colltype OSAUD -instname TEST2   -orclhome
*/u01/app/oracle/product/11.2.0.2/dbhome_1*
source TEST verified for OS File Audit Collector collector
Adding collector...
Collector added successfully.
collector successfully added to Audit Vault
remember the following information for use in avctl
Collector name (collname): OSAUD_Collector_TEST2
avorcldb add_collector -srcname TEST   -agentname agenttest1   -colltype OSAUD -instname   TEST1   -orclhome /u01/app/oracle/product/11.2.0.2/dbhome_1
source TEST verified for OS File Audit Collector collector
Adding collector...
Collector added successfully.
collector successfully added to Audit Vault
remember the following information for use in avctl
Collector name (collname): OSAUD_Collector_TEST1
Now which command should be run for setup ? Or any changes need to be made on earlier commands, especially on add_source ?
avorcldb setup -srcname TEST
Or
these two ?
avorcldb setup -srcname TEST1
avorcldb setup -srcname TEST2

OS collector should be configure for both node in RAC.
and avorcldb setup -srcname command is run on the Audit Vault Collection Agent with source database name.
so please run avorcldb setup -srcname TEST from both agent host.
http://docs.oracle.com/cd/E11062_01/admin.1023/e11059/avadm_app_avorcldb_ref.htm#CEGBEEFJ
Thanks
Kuljeet Pal Singh

Problem starting DBAUD and OSAUD Collector!

Hi all,
1.While i was trying to start DBAUD collector on AV server, i got this error in "Audit Errors" of av em,
module: zaac , on line 7662 ora-12154: tns could not resolve the connect identifier specified
2.the OSAUD is starting but i have this error in "Audit Errors" of av em,
module zaodrOCIError , OCI error encountered for source database "mysrc" access, audit trail cleanup support disabled!
while the agent is running, and connection by "plsql /@mysrc" is successful from av server to source db!
Would u plz help me on these?
Edited by: user4972884 on Sep 30, 2008 2:06 AM

oracle@OraAV:~> avorcldb add_source -src oraavag:1521:orcl -agentname agent2 -srcname src3
Enter Source user name: srcuser1
Enter Source password:
Adding source...
Source added successfully.
source successfully added to Audit Vault
remember the following information for use in avctl
Source name (srcname): src3
Storing user credentials in wallet...
Create credential oracle.security.client.connect_string5
done.
Mapping Source to Agent...
oracle@OraAV:~> avorcldb add_collector -srcname src3 -agentname agent2 -colltype dbaud -collname DBAUD_COLL
source src3 verified for Aud$/FGA_LOG$ Audit Collector collector
Adding collector...
Collector added successfully.
collector successfully added to Audit Vault
remember the following information for use in avctl Collector name (collname): DBAUD_COLL

Avctl show_agent_status

Similar Messages

Maybe you are looking for