How to troubleshoot when AVagent status is unreachable and Audit trail Collection status is down in AVDF (Doc ID 2230475.1)

Last updated on FEBRUARY 05, 2017

Applies to:

Oracle Audit Vault and Database Firewall - Version 12.1.2.7 to 12.2.0.0 [Release 12.1 to 12.2]
Information in this document applies to any platform.

Symptoms

 When checking the status of the AVagent & Audit trail in the AVDF console logged in AVADMIN appears to unreachable and down

Changes

There appears to be  no changes done to the AV server no any modification done in terms of adding new or removing audit trails related to the secured target.

However when checking the uptime of the secured target host it shows it was recently started.

 

[oracle@celspovm01 log]$ uptime
08:13:46 up 4 days, 22:35, 1 user, load average: 1.13, 1.23, 1.09

 

Also, the process associated with the AVAGENT does not appear to be up when checked like below.

[oracle@celspovm01 log]$ ps -ef|grep agent

The AVDF diagnostics data & Agent logs does not have much information on this issue as the secured target was down. It is also apparent that diagnostics logs that get collected at the AVDF console will not have information regarding secured target host status to investigate the issue.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms