Contents

List of Examples

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

1 Introduction to Oracle Audit Vault

• 1.1 Overview of Oracle Audit Vault
• 1.2 Oracle Audit Vault Architecture
• 1.3 Oracle Audit Vault Agents and Collectors
• 1.4 Selecting the Right Collector for Audit Data
• 1.5 Oracle Audit Vault Event Categories
• 1.6 Summary of Oracle Audit Vault Capabilities
• 1.7 Getting Started
• 1.8 Additional Resources

2 Managing Audit Vault Security

• 2.1 Oracle Advanced Security – Secure Management Communication
• 2.2 Oracle Advanced Security – Encrypt Network Traffic
  • 2.2.1 Setting Up Oracle Advanced Security Encryption as a Test of Your Site
    • 2.2.1.1 Step 1: Set Encryption Parameters for the Server
    • 2.2.1.2 Step 2: Set Encryption Parameters for the Agent
  • 2.2.2 Testing Oracle Advanced Security Encryption
    • 2.2.2.1 Checklist for Testing Encryption
    • 2.2.2.2 Step 1: Connect Agent and Server
    • 2.2.2.3 Step 2: Reset Configuration Parameters on Server
• 2.3 Oracle Advanced Security – Manage User Authentication Metadata
  • 2.3.1 Creating Wallet Metadata
  • 2.3.2 Creating Certificate Metadata
• 2.4 Oracle Database Vault – Protects Oracle Audit Vault
• 2.5 Oracle Database Vault – Provides Strong Access Controls

3 Getting Started with Audit Vault

• 3.1 Checking and Setting Environment Variables (Linux and UNIX Platforms)
• 3.2 Adding a Source and Collectors
• 3.3 Starting Up Agents and Collectors

4 Configuring and Managing Audit Vault

• 4.1 Performing Additional Audit Vault Configuration Tasks
  • 4.1.1 Adding and Dropping Agents
  • 4.1.2 Adding, Altering, and Dropping Sources
  • 4.1.3 Adding, Altering, and Dropping Collectors
  • 4.1.4 Configuring the Data Warehouse Schedule
  • 4.1.5 Globally Disabling and Enabling Alert Settings
  • 4.1.6 Viewing Audit Event Categories
• 4.2 Managing Audit Vault
  • 4.2.1 Managing Audit Vault Server
  • 4.2.2 Managing the Agent OC4J
  • 4.2.3 Starting and Stopping Agents
  • 4.2.4 Starting and Stopping Collectors
  • 4.2.5 Refreshing, Loading, and Purging the Data Warehouse
  • 4.2.6 Viewing Audit Vault Errors

5 Administrative Tasks

• 5.1 Monitoring Space Usage on the SYSAUX Tablespace
• 5.2 Monitoring Disk Space Usage Where Archive Logs Are Stored
• 5.3 Setting Up an Agent Listener to Listen to Other Nodes in an Oracle RAC Environment
• 5.4 Making Connectivity to the Source from the Audit Vault Agent More Highly Available in an Oracle RAC Environment
• 5.5 Changing Audit Vault User Passwords on a Regular Basis
• 5.6 Back Up and Recovery of Oracle Audit Vault

6 Troubleshooting an Audit Vault System

• 6.1 Location of Audit Vault Server Log and Error Files
• 6.2 Location of Audit Vault Agent Log and Error Files
• 6.3 Troubleshooting Tips
  • 6.3.1 Audit Vault Server
  • 6.3.2 Audit Vault Agent
  • 6.3.3 Audit Vault Collector
  • 6.3.4 Audit Vault Console
  • 6.3.5 Audit Vault in an Oracle Real Application Clusters (Oracle RAC) Environment

A Audit Vault Configuration Assistant (AVCA) Reference

• add_agent
• create_credential
• create_wallet
• deploy_av
• drop_agent
• help
• redeploy
• secure_agent
• secure_av
• set_warehouse_retention
• set_warehouse_schedule
• upgrade

B Audit Vault Control (AVCTL) Reference

• -help
• load_warehouse
• purge_warehouse
• refresh_warehouse
• show_agent_status
• show_av_status
• show_collector_status
• show_oc4j_status
• start_agent
• start_av
• start_collector
• start_oc4j
• stop_agent
• stop_av
• stop_collector
• stop_oc4j

C Audit Vault Oracle Database (AVORCLDB) Reference

• avorcldb
• add_collector
• add_source
• alter_collector
• alter_source
• drop_collector
• drop_source
• -help
• setup
• verify

D REDO Collector Database Reference

• D.1 Initialization Parameter Recommendations for Audit Sources on Oracle9i Database Release 2 (9.2)
• D.2 Initialization Parameter Recommendations for Audit Sources on Oracle Database 10g Release 1 (10.1)
• D.3 Initialization Parameter Recommendations for Audit Sources on Oracle Database 10g Release 2 (10.2)

E Audit Vault Error Messages

• E.1 Audit Vault Server Error Messages
  • E.1.1 Generic Error Codes
  • E.1.2 Source and Event Error Codes
  • E.1.3 Collector Error Codes
  • E.1.4 Attribute Definition Error Codes
  • E.1.5 Alert Error Codes
  • E.1.6 Server-Side Audit Service Error Messages
  • E.1.7 Data Warehouse Error Messages
• E.2 Audit Vault Client Error Messages
  • E.2.1 General Error Messages
  • E.2.2 CSDK Error Messages
  • E.2.3 OSAUD Collector Error Messages
  • E.2.4 DBAUD Collector Error Messages

Glossary

Index