SAP Knowledge Base Article - Preview

1765928 - Oracle database audit files with several entries created by Diagnostics Agent / SAP Host Agent

Symptom

While auditing Oracle database the audit files shows several entries from the Diagnostics Agent / SAP Host Agent. The audit files can show entries with content similar to the following:

[...]
ACTION :[105] 'select INSTANCE_NAME,STATUS,DATABASE_STATUS,ACTIVE_STATE,SHUTDOWN_PENDING,LOGINS,ARCHIVER from V$INSTANCE'
[...]
Mon Feb 29 14:24:12 2016 +01:00
LENGTH: "249"
SESSIONID:[9] "<id>" ENTRYID:[1] "1" STATEMENT:[1] "1" USERID:
[10] "<userid>" USERHOST:[8] "<host>" ACTION:[3] "100" RETURNCODE:
[1] "0" COMMENT$TEXT:[20] "Authenticated by: OS" OS$USERID:[
6] "<osuserid>" DBID:[9] "<dbid>" PRIV$USED:[1] "5"
[...]

Or
LENGTH : '263'
ACTION :[7] 'CONNECT'
DATABASE USER:[1] '/'
PRIVILEGE :[6] 'SYSDBA'
CLIENT USER:[6] 'ora<SID>'
CLIENT TERMINAL:[5] 'pts/0'
STATUS:[1] '0'
DBID:[10] ''
SESSIONID:[10] ''
USERHOST:[12] ''
CLIENT ADDRESS:[0] ''
ACTION NUMBER:[3] '100'


Read more...

Environment

  • SAP Solution Manager
  • Oracle database

Product

SAP Solution Manager 7.1 ; SAP Solution Manager 7.2

Keywords

oracle, auditing, smd, agent, audit files, SAP Host Agent, HostAgent, SAPHostAgent, outside discovery, Diagnostics agent, SMDAgent, high amount , KBA , SV-SMG-DIA-SRV-AGT , Agent Framework , SV-SMG-MON-ALR-DIR , Alert / Metric Directory , BC-CCM-HAG , Host Agent , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.