How to troubleshoot when AVagent status is unreachable and Audit trail Collection status is down in AVDF
Last updated on FEBRUARY 05, 2017
Applies to:Oracle Audit Vault and Database Firewall - Version 184.108.40.206 to 220.127.116.11 [Release 12.1 to 12.2]
Information in this document applies to any platform.
When checking the status of the AVagent & Audit trail in the AVDF console logged in AVADMIN appears to unreachable and down
There appears to be no changes done to the AV server no any modification done in terms of adding new or removing audit trails related to the secured target.
However when checking the uptime of the secured target host it shows it was recently started.
[oracle@celspovm01 log]$ uptime
08:13:46 up 4 days, 22:35, 1 user, load average: 1.13, 1.23, 1.09
Also, the process associated with the AVAGENT does not appear to be up when checked like below.
[oracle@celspovm01 log]$ ps -ef|grep agent
The AVDF diagnostics data & Agent logs does not have much information on this issue as the secured target was down. It is also apparent that diagnostics logs that get collected at the AVDF console will not have information regarding secured target host status to investigate the issue.
Sign In with your My Oracle Support account
Don't have a My Oracle Support account? Click to get started
My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms