How to run DBSAT on RAC Instances

$ python -V Python 2.6.6 $ java -fullversion openjdk full version "1.8.0_191-b12" $ Installation is pretty simple: just unzip the binaries on each node. Since Oracle is releasing newer versions of DBSAT, I suggest you create a folder that includes the version in the name, ie “ /DBSAT_202 ”. In the future, if you want to run a newer version, you can create a folder named with the next version, and so on. You can run DBSAT with SYS user or create a user for its execution and grant the required privileges. Check the documentation and ensure that you have granted the required privileges to the DBSAT database user according to the Oracle version: https://docs.oracle.com/cd/E93129_01/SATUG/toc.htm#SATUG-GUID-EF4C8FC3-1EF2-45AC-BE07-26CCFA059E53 The following is a summary of the required privileges and roles:

CREATE SESSION* READ or SELECT on SYS.REGISTRY$HISTORY Role AUDIT_VIEWER (12c and later) Role CAPTURE_ADMIN (12c and later) READ or SELECT on SYS.DBA_USERS_WITH_DEFPWD (11g and later) READ or SELECT on AUDSYS.AUD$UNIFIED (12c and later) Role SELECT_CATALOG_ROLE (only if need to run Discoverer component) Role DV_SECANALYST (if Vault is enabled and if need to run Discoverer component)   2) Run The Collector: If you get errors related to the zip program, edit the dbsat.sh script and update the path as required. Note: commented out lines were the original set in the script, all nodes were running DBSAT. You may need to set the zip and unzip variables and run the Collector in the same way:

vi dbsat # Default location of zip and unzip. May be modified if necessary. #ZIP=/usr/bin/zip #UNZIP=/usr/bin/unzip ZIP=/u01/app/oracle/product/12.1.0/db/bin/zip UNZIP=/u01/app/oracle/product/12.1.0/db/bin/unzip DBZIP=${ORACLE_HOME}/bin/zip The first argument is the component (Collector, Report or Discoverer), the second is the connection string and the third argument is the output file name:

[Node1]$ ./dbsat collect dbsatuser@Instance1 Instance1_DBSAT_Node1

[Node2]$ ./dbsat collect dbsatuser@Instance2 Instance2_DBSAT_Node2

$ ./dbsat collect 'sys/PASSWORD@//hostname/Service_Name as sysdba' ServiceName_DBSAT_HostName

[Node1]$ ./dbsat report -a /home/oracle/working/DBSAT_202/Instance1_DBSAT_Node1

[Node2]$ ./dbsat report -x USER,PRIV,AUTH,CRYPT,ACCESS,AUDIT /home/oracle/working/DBSAT_202/Instance2_DBSAT_Node2

[Node1]$ ./dbsat discover -c /home/oracle/working/DBSAT_202/Discover/conf/RAC_dbsat.config Instance1_DBSAT_Node1_Discoverer