Configuring Monitoring Credentials

Many of the real-time monitoring capabilities require monitoring credentials that maintain the ability to launch monitoring programs with root privileges. These processes that Real-time monitoring uses begin with the prefix nmxc. Low-level monitoring uses operating system APIs that are not available to regular users.

Before starting to use the Real-time monitoring features on a target host for the first time, the following settings must be configured from the Enterprise Manager Console.

1. Ensure that the agent's root.sh script is run after agent installation.

   After installing the agent, the root.sh script must be run as the root user. This script must be run before configuring the rest of these credential steps.

2. Configure Privilege Delegation.

   Privilege Delegation settings are found from the Setup menu by choosing Security, then Privilege Delegation. On this page you can either set privilege delegation for each host manually or you can create a Privilege Delegation Setting Template.

   Privilege delegation for each host that will have real-time monitoring must have SUDO setting enabled with the appropriate SUDO command filled in (for example, /usr/local/bin/sudo).

3. Configure Monitoring Credentials.

   Monitoring Credential settings are found from the Setup menu. Choose Security then Monitoring Credentials. From this page, select the Host target type and click Manage Monitoring Credentials.

   For each entry with the credential “Host Credentials For Real-time Configuration Change Monitoring“, select the entry and click Set Credentials. You will be asked for a credential set to use. Ensure you also add “root" to the Run As entry. If “Run As" is not visible, then the privilege delegation was not set properly in the previous step.

   To set monitoring credentials in bulk on multiple hosts at once, you can use EMCLI. For more information on using EMCLI to set monitoring credentials, see the section, Managing Credentials Using EMCLI in the Security chapter of Oracle Enterprise Manager Administration. Likewise, for more information about configuring monitoring credentials in Cloud Control, the Security chapter of Oracle Enterprise Manager Administration.