File System Changes Not Showing up in Oem 12c Compliance

(Doc ID 2142151.1)

Last updated on JUNE 13, 2016

Applies to:

Enterprise Manager Base Platform - Version and later
Information in this document applies to any platform.


On Enterprise Manager Cloud Control version, Target Host

File System changes are not showing up in OEM 12c Compliance. While trying to implement File System change monitoring in EM12c Compliance Framework following below notes:

Prerequisites For Real-Time Monitoring In Enterprise Manager Cloud Control 12c (Doc ID 1376882.1)
12c - How To Set Up Real-Time Monitoring (Doc ID 1522790.1)

When creating a change on a file it does not show up inside OEM 12c.

It is configured on OEM12c and the host shows that the auditd rule is added:

[root@testhost CCCDataFetchlet]# auditctl -l
LIST_RULES: exit,always watch=/home/oemmon/files perm=rwa key=orcl
LIST_RULES: exit,always dir=/opt/sp/fmw/log_SOA_AdminServer (0x1f) perm=rwa key=orcl
[root@testhost CCCDataFetchlet]# ps aux | grep nmxcf
root 10196 0.0 0.0 205532 13940 ? Ss 12:36 0:00 /opt/oracle/agent12c/core/ -e /opt/oracle/agent12c/agent_inst -m /opt/oracle/agent12c/agent_inst/sysman/emd/state/fetchlet_state/CCCDataFetchlet -w 22826
root 10326 0.0 0.0 61192 772 pts/13 S+ 13:37 0:00 grep nmxcf

Alert of the file change should be raised in EM.


Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms