Advertisement

Wednesday, August 7, 2019

Oracle Exadata : AIDE (Advanced Intrusion Detection System)

AIDE (Advanced Intrusion Detection System) is basically a utility which keeps the database of all file system files on the server and  alerts you via e-mail (as configured) what files and their content have changed. 
(AIDE was released with Image release 19 of Exadata)

This can help in detecting any security threats. 

It is a daily cron job which runs, scans and alerts

To know if it is enabled 
$  /opt/oracle.SupportTools/exadataAIDE -status

AIDE: daily cron is currently enabled.

If you are getting alerts and have changed the FS and are happy with the log in '/var/log/aide/aide.log'
then you can update the AIDE database which will ensure alerts are not sent to you.

/opt/oracle.SupportTools/exadataAIDE -update

No comments:
Write comments