SAP Knowledge Base Article - Preview

1765928 - Oracle database audit files with several entries created by Diagnostics Agent / SAP Host Agent

Symptom

While auditing Oracle database the audit files shows several entries from the Diagnostics Agent / SAP Host Agent. The audit files can show entries with content similar to the following:

[...]
ACTION :[105] 'select INSTANCE_NAME,STATUS,DATABASE_STATUS,ACTIVE_STATE,SHUTDOWN_PENDING,LOGINS,ARCHIVER from V$INSTANCE'
[...]
Mon Feb 29 14:24:12 2016 +01:00
LENGTH: "249"
SESSIONID:[9] "<id>" ENTRYID:[1] "1" STATEMENT:[1] "1" USERID:
[10] "<userid>" USERHOST:[8] "<host>" ACTION:[3] "100" RETURNCODE:
[1] "0" COMMENT$TEXT:[20] "Authenticated by: OS" OS$USERID:[
6] "<osuserid>" DBID:[9] "<dbid>" PRIV$USED:[1] "5"
[...]

Or
LENGTH : '263'
ACTION :[7] 'CONNECT'
DATABASE USER:[1] '/'
PRIVILEGE :[6] 'SYSDBA'
CLIENT USER:[6] 'ora<SID>'
CLIENT TERMINAL:[5] 'pts/0'
STATUS:[1] '0'
DBID:[10] ''
SESSIONID:[10] ''
USERHOST:[12] ''
CLIENT ADDRESS:[0] ''
ACTION NUMBER:[3] '100'


Read more...

Environment

  • SAP Solution Manager
  • Oracle database

Product

SAP Solution Manager 7.1 ; SAP Solution Manager 7.2

Keywords

oracle, auditing, smd, agent, audit files, SAP Host Agent, HostAgent, SAPHostAgent, outside discovery, Diagnostics agent, SMDAgent, high amount , KBA , SV-SMG-DIA-SRV-AGT , Agent Framework , BC-CCM-HAG , Host Agent , SV-SMG-MON-ALR-DIR , Alert / Metric Directory , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.