File System Changes Not Showing up in Oem 12c Compliance (Doc ID 2142151.1)

Last updated on JUNE 13, 2016

Applies to:

Enterprise Manager Base Platform - Version 12.1.0.4.0 and later
Information in this document applies to any platform.

Symptoms

On Enterprise Manager Cloud Control 12.1.0.4.0 version, Target Host

ACTUAL BEHAVIOR
---------------
File System changes are not showing up in OEM 12c Compliance. While trying to implement File System change monitoring in EM12c Compliance Framework following below notes:

Prerequisites For Real-Time Monitoring In Enterprise Manager Cloud Control 12c (Doc ID 1376882.1)
12c - How To Set Up Real-Time Monitoring (Doc ID 1522790.1)

When creating a change on a file it does not show up inside OEM 12c.

It is configured on OEM12c and the host shows that the auditd rule is added:

[root@testhost CCCDataFetchlet]# auditctl -l
LIST_RULES: exit,always watch=/home/oemmon/files perm=rwa key=orcl
LIST_RULES: exit,always dir=/opt/sp/fmw/log_SOA_AdminServer (0x1f) perm=rwa key=orcl
[root@testhost CCCDataFetchlet]# ps aux | grep nmxcf
root 10196 0.0 0.0 205532 13940 ? Ss 12:36 0:00 /opt/oracle/agent12c/core/12.1.0.4.0/bin/nmxcf -e /opt/oracle/agent12c/agent_inst -m /opt/oracle/agent12c/agent_inst/sysman/emd/state/fetchlet_state/CCCDataFetchlet -w 22826
root 10326 0.0 0.0 61192 772 pts/13 S+ 13:37 0:00 grep nmxcf


EXPECTED BEHAVIOR
-----------------------
Alert of the file change should be raised in EM.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms