Solved

alert received

Posted on 2014-04-01
2
755 Views
Last Modified: 2014-04-06
When an dba receives an e-mail alert
what does it means..


Host=ppp
Target type=Database Instance
Target name=TjR.tb.COM
Message=User SYS logged on from ppp.
Severity=Warning
Event reported time=Apr 1, 2014 3:00:46 AM CDT
Event Type=Metric Alert
Event name=UserAudit:username
Metric Group=User Audit
Metric=Audited User
Metric value=SYS
Key Value=SYS_puccdstmc01
Key Column 1=Username_Machine
Rule Name=Alerts - vvC-ORADBA,Rule for alerts
Rule Owner=SYSMAN
0
Comment
Question by:tonydba
2 Comments
 
LVL 23

Accepted Solution

by:
David earned 500 total points
ID: 39969438
Hi Tony, this is a warning message, informational, that the highly privileged SYS account was used by someone at that day and time.  Given its 03.00 today, my educated guess is that you have some scheduled job (in cron or Oracle job scheduler) that runs under the SYS permissions.

Bad idea.  Bad.

The context of the message suggests your database is being monitored with Oracle Enterprise Manager, or the newer equivalent (grid 11, cloud 12).

Do you have an experienced DBA available to walk this through?  It's neither a quick fix, nor appropriate for a public forum.
0
 

Author Closing Comment

by:tonydba
ID: 39981682
got it
0

Featured Post

Salesforce Made Easy to Use

On-screen guidance at the moment of need enables you & your employees to focus on the core, you can now boost your adoption rates swiftly and simply with one easy tool.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Truncate is a DDL Command where as Delete is a DML Command. Both will delete data from table, but what is the difference between these below statements truncate table <table_name> ?? delete from <table_name> ?? The first command cannot be …
When it comes to protecting Oracle Database servers and systems, there are a ton of myths out there. Here are the most common.
This video explains at a high level with the mandatory Oracle Memory processes are as well as touching on some of the more common optional ones.
This videos aims to give the viewer a basic demonstration of how a user can query current session information by using the SYS_CONTEXT function

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question