Symptom
While auditing Oracle database the audit files shows several entries from the Diagnostics Agent / SAP Host Agent. The audit files can show entries with content similar to the following:
[...]
ACTION :[105] 'select INSTANCE_NAME,STATUS,DATABASE_STATUS,ACTIVE_STATE,SHUTDOWN_PENDING,LOGINS,ARCHIVER from V$INSTANCE'
[...]
Mon Feb 29 14:24:12 2016 +01:00
LENGTH: "249"
SESSIONID:[9] "<id>" ENTRYID:[1] "1" STATEMENT:[1] "1" USERID:
[10] "<userid>" USERHOST:[8] "<host>" ACTION:[3] "100" RETURNCODE:
[1] "0" COMMENT$TEXT:[20] "Authenticated by: OS" OS$USERID:[
6] "<osuserid>" DBID:[9] "<dbid>" PRIV$USED:[1] "5"
[...]
Or
LENGTH : '263'
ACTION :[7] 'CONNECT'
DATABASE USER:[1] '/'
PRIVILEGE :[6] 'SYSDBA'
CLIENT USER:[6] 'ora<SID>'
CLIENT TERMINAL:[5] 'pts/0'
STATUS:[1] '0'
DBID:[10] ''
SESSIONID:[10] ''
USERHOST:[12] ''
CLIENT ADDRESS:[0] ''
ACTION NUMBER:[3] '100'
Read more...
Environment
- SAP Solution Manager
- Oracle database
Product
SAP Solution Manager 7.1 ; SAP Solution Manager 7.2
Keywords
oracle, auditing, smd, agent, audit files, SAP Host Agent, HostAgent, SAPHostAgent, outside discovery, Diagnostics agent, SMDAgent, high amount , KBA , SV-SMG-DIA-SRV-AGT , Agent Framework , BC-CCM-HAG , Host Agent , SV-SMG-MON-ALR-DIR , Alert / Metric Directory , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.
SAP Knowledge Base Article - Preview