Server Management AVCLI Commands

The server management AVCLI commands enable you to manage the server, such as checking certificates and downloading log files.

About the Server Management AVCLI Commands

The AVCLI server management commands manage aspects of Oracle Database Security Central such as altering the system set.

ALTER SYSTEM SET

Use the ALTER SYSTEM SET command to modify system configuration data.

The ALTER SYSTEM command modifies system configuration data.

Syntax:

ALTER SYSTEM SET {<attribute>=<value> [,<attribute>=<value>...]}

Arguments

Argument	Description
attribute	System attributes as key/value pairs. See Table A-7.

Usage Notes

Typically, system configuration data affects all components system-wide.

Multiple component log levels can be changed by delimiting them using the | symbol.

Modify system configuration data by altering the attributes associated with the data using key=value pairs and multiple attributes by specifying comma-separated pairs.

Log files are in the $Oracle_Home/av/log directory in the Audit Vault Server.

The following attributes are supported:

Table 7 System Attributes

Parameter	Description
`LOGLEVEL`	The log level of components running on this host. The `LOGLEVEL` attribute takes a two part value, separated by a colon, as follows: `component_name`:`loglevel_value` See Table A-8 for component names and log level values. Multiple components' log levels can be changed by delimiting them using the `\|` symbol.
`_SECURITY_ADVISOR_ENABLE`	Set value to `1` to enable Security Advisor.
`SYS.HEARTBEAT_INTERVAL`	Sets the system heartbeat interval to a numerical value in seconds.
`SYS.AUTOSTART_INTERVAL`	The interval in seconds before the system will try to restart failed audit trails. Default: 1800
`SYS.AUTOSTART_RETRY_COUNT`	By default, the system attempts to start failed audit trails up to 20 times.

Table A-8 shows valid values for component_name and loglevel_value for the LOGLEVEL attribute:

Table 8 Logging component names and values

Logging component name	Values
`AlertLog`	Alert
`AgentLog`	Agent
`ARLog`	Archive and Retrieve
`DWLog`	Data Warehouse
`FWLog`	Database Firewall
`GUIlog`	Web Concole UI
`JfwkLog`	Java Server Process
`NotifyLog`	Notification
`PfwkLog`	Plug-in Management
`PolicyLog`	Policy Management
`ReportLog`	Report Generation
`SanLog`	SAN Storage
`TransLog`	Transaction Log Trail
`All`	All components. Valid only with `ERROR` and `WARNING` log level values.

Table 9 Logging level and values

Parameter	Description
`ERROR`	The `ERROR` log level
`WARNING`	The `WARNING` log level (not supported for `GUIlog`)
`INFO`	The `INFO` log level
`DEBUG`	The `DEBUG` log level Be aware that `DEBUG` generates many files and that this can affect the performance of your system. Only use it when you are trying to diagnose problems.

Examples

avcli> ALTER SYSTEM SET _SECURITY_ADVISOR_ENABLE=1

Enables Security Advisor.

avcli> ALTER SYSTEM SET SYS.HEARTBEAT_INTERVAL=10;

The SYS.HEARTBEAT_INTERVAL system configuration setting changes to 10 seconds.

avcli> ALTER SYSTEM SET LOGLEVEL=JfwkLog:DEBUG|PfwkLog:INFO;

The log levels of the JfwkLog and PfwkLog components running on the system change.

avcli> ALTER SYSTEM SET SYS.AUTOSTART_INTERVAL=900;

The system will restart failed audit trails after 900 seconds.

See Also: Downloading Detailed Diagnostics Reports for Oracle Audit Vault Server for information about generating a diagnostics report that captures Audit Vault Server appliance information.

DOWNLOAD LOG FILE

Use the DOWNLOAD LOG FILE to download Oracle Audit Vault Server log files to perform diagnostics,

The DOWNLOAD LOG FILE command downloads the diagnostics log file (as a .zip file) from the Audit Vault Server and saves it in the following directory:

AVCLI_installation_path/av/log

Syntax

DOWNLOAD LOG FILE FROM SERVER

Example

avcli> DOWNLOAD LOG FILE FROM SERVER;

The Audit Vault Server log file is downloaded.

SHOW CERTIFICATE

Use the SHOW CERTIFICATE command to display Oracle Audit Vault Server certificates.

The SHOW CERTIFICATE command displays the certificate for the Audit Vault Server.

Syntax

SHOW CERTIFICATE FOR SERVER

Example

avcli> SHOW CERTIFICATE FOR SERVER;

The Oracle Audit Vault Server certificate appears.