My Oracle Support Banner

EM 12c, EM 13c: Enterprise Manager 12c Cloud Control Failed Login Count (audit_failed_logins) Metric Fails with ORA-00904 (Doc ID 2356463.1)

Last updated on SEPTEMBER 16, 2021

Applies to:

Enterprise Manager for Oracle Database - Version 12.1.0.8.0 and later
Information in this document applies to any platform.

Symptoms

Enterprise Manager (EM) 12.1.0.5 Cloud Control
Database Plugin 12.1.0.8, Target Oracle Database 11.2.0.4
Database Plug-in Bundle Patch 12.1.0.8.160930 (Patch 24610053) has been applied


The following is an excerpt from <agent base>/agent_inst/sysman/log/emagent_perl.trc (note the DEBUG tracing level):

failedLogin.pl: Tue Dec 13 17:28:24 2016: DEBUG:  -- --> ++++  Welcome to Failed Login Debugging +++++
　failedLogin.pl: Tue Dec 13 17:28:24 2016: DEBUG:  Entered failedLogin.pl
　failedLogin.pl: Tue Dec 13 17:28:24 2016: DEBUG:  params : sys :: (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=<host name>)(Port=<PORT>))(CONNECT_DATA=(SID=<SID name>))) :: SYSDBA ::  ::
　failedLogin.pl: Tue Dec 13 17:28:24 2016: DEBUG:  -- --> Update State File? FALSE
　failedLogin.pl: Tue Dec 13 17:28:24 2016: DEBUG:  -- --> timeperiod : CURRENT
　failedLogin.pl: Tue Dec 13 17:28:24 2016: DEBUG:  -- --> audit_trail value: NONE
　failedLogin.pl: Tue Dec 13 17:28:24 2016: DEBUG:  -- --> db version is 10gR2 or greater? 1
　failedLogin.pl: Tue Dec 13 17:28:24 2016: DEBUG:  -- --> db version is 12.1 or Higher? 0
　failedLogin.pl: Tue Dec 13 17:28:24 2016: DEBUG:  createCurrFailedLoginSql, cdb option is :
　failedLogin.pl: Tue Dec 13 17:28:24 2016: DEBUG:  failed_login_sql:
　SELECT TO_CHAR(current_timestamp AT TIME ZONE 'GMT', 'YYYY-MM-DD HH24:MI:SS TZD') AS curr_timestamp,
　COUNT(db_user) AS failed_count, TO_CHAR(MIN(extended_timestamp), 'yyyy-mm-dd hh24:mi:ss') AS first_occur_time,
　TO_CHAR(MAX(extended_timestamp), 'yyyy-mm-dd hh24:mi:ss') AS last_occur_time FROM sys.dba_common_audit_trail
　WHERE action BETWEEN 100 AND 102 AND returncode != 0 AND  ACTION_NAME = 'LOGON'
　AND extended_timestamp >= current_timestamp - TO_DSINTERVAL('0 0:30:00')




In addition, the following is a message excerpt from the metric collection error:

　ERROR_MESSAGE: oracle.sysman.emSDK.agent.fetchlet.exception.FetchletException: 904


The following is the simplified SQL result in the 11.2.0.4 database environment, confirming the 904 error:

 

 

Changes

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document
Symptoms
Changes
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.