How to troubleshoot when AVagent status is unreachable and Audit trail Collection status is down in AVDF
(Doc ID 2230475.1)
Last updated on FEBRUARY 11, 2020
Applies to:Oracle Audit Vault and Database Firewall - Version 126.96.36.199 to 188.8.131.52 [Release 12.1 to 12.2]
Information in this document applies to any platform.
When checking the status of the AVagent & Audit trail in the AVDF console logged in AVADMIN appears to unreachable and down
There appears to be no changes done to the AV server no any modification done in terms of adding new or removing audit trails related to the secured target.
However when checking the uptime of the secured target host it shows it was recently started.
[oracle@celspovm01 log]$ uptime
08:13:46 up 4 days, 22:35, 1 user, load average: 1.13, 1.23, 1.09
Also, the process associated with the AVAGENT does not appear to be up when checked like below.
[oracle@celspovm01 log]$ ps -ef|grep agent
The AVDF diagnostics data & Agent logs does not have much information on this issue as the secured target was down. It is also apparent that diagnostics logs that get collected at the AVDF console will not have information regarding secured target host status to investigate the issue.
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document