Starting, Stopping, and Other Host Monitor Agent Operations
Learn about starting, stopping, and other Host Monitor Agent operations.
Starting the Host Monitor Agent
Starting the Host Monitor Agent involves starting collection for the NETWORK audit trail on the host that you’re monitoring.
To start the Host Monitor Agent from the Oracle Database Security Central console:
-
Log in to the Oracle Database Security Central console as an administrator.
-
Start the audit trail(s) you created for host monitoring in Create a Network Audit Trail.
Stopping the Host Monitor Agent
To stop the Host Monitor Agent, stop the audit trail that you created for the target that is being monitored.
See Stopping, Starting, and Autostart of Audit Trails in Oracle Audit Vault Server.
Changing the Logging Level for a Host Monitor Agent
Learn about changing the logging level for Host Monitor Agents.
See Changing the Logging Level for the Audit Vault Agent.
Viewing Host Monitor Agent Status and Details
You can view whether a Host Monitor Agent is installed and information like its location, version, update time, and other details.
-
Log in to the Oracle Database Security Central console as an auditor.
-
Select Agents.
-
In the left navigation menu, select Agent Hosts.
-
In the page that appears, check the Host Monitor Status and the Host Monitor Details columns for the host you are interested in.
Checking the Status of a Host Monitor Agent Audit Trail
Learn how to check the status of a Host Monitor Agent audit trail.
-
Log in to the Oracle Database Security Central console as an auditor.
-
Select Targets, and then from the left navigation menu, select Audit Trails.
-
In the status page that appears, in the Audit Trail Type column, search for audit trails of type NETWORK to find audit trails for Host Monitor Agents.
Uninstalling a Host Monitor Agent (Unix Hosts Only)
This procedure applies to Unix hosts only. On Windows hosts, the Host Monitor Agent is installed as part of the Audit Vault Agent, so you don’t need to uninstall the Host Monitor Agent. However after uninstalling the Audit Vault Agent from a Windows host, you should also uninstall Npcap.
-
Log in to the host computer as
root. -
From the HM_Home directory (where you installed the Host Monitor Agent in Step 7) run the following command:
hostmonsetup uninstall