Error: 'Failure occured in Query Execution. Instance "XXXXX" is not configured. Scope id Database "XXXXX" on server "XXXXX"' from agent-based CCS Oracle data collection.

Products

• Control Compliance Suite Standards Server
• Control Compliance Suite
• Control Compliance Suite Standards Module

Issue/Introduction

Control Compliance Suite (CCS)

When running an Oracle agent-based data collection or CER (collection-evaluation-reporting) job, the following error is reported:

Failure occured in Query Execution.  Instance "XXXXX" is not configured. Scope id Database "XXXXX" on server "XXXXX".  

Environment

CCS 12.5.x Oracle data collection jobs (agent-based)

CCS 12.6.x Oracle data collection jobs (agent-based)

Cause

The Oracle databases are not configured on the agent.

Resolution

To collect information from Oracle databases using agent-based collection, the CCS Oracle Snap-in needs to be applied to the CCS agent (also known as the SCU for Oracle). 

Once that CCS Oracle snap-in is applied to the CCS agent, the CCSORASETUP binary in the <agent_install_directory>/esm/bin/dcmodules/<platform>ORCL/bin directory needs to be run to configure each of the Oracle databases on that server.

Example to configure the ORCLDCB database as a service:
./ccsorasetup -s ORCLCDB

NOTE: Once the ccsorasetup has been used to configure the Oracle databases on that server, you will need to reregister that agent back to CCS to update your CCS environment that the Oracle snap-in has been applied to that agent.

Parameters for ccsorasetup:

All options and parameters are case sensitive

Options:
  -A {Account}   - Oracle database logon account
  -P {Password}  - Oracle database logon account password
  -H {OraHome}   - Oracle home directory
  -T {TblSpace}  - Oracle TEMPORARY table space for CCSDBA user
  -S {TblSpace}  - Oracle DEFAULT table space for CCSDBA user
  -W {Profile}   - Oracle PROFILE for CCSDBA user
  -C             - Create user in RAC database, use with -Q option to install in silent mode
  -Q             - Silent install
  -l             - Lists configuration records
  -M             - Enable password management
  -eif {File}    - Specify the filename that contains the encrypted credential record.
  -eof {File}    - Specify the filename that should be created with the encrypted credentials record

Usage: configure a SID into Symantec CCS for Oracle Databases Silently using SYSTEM/Pre-Created account
  ccsorasetup -a {SID} -A {ACCOUNT} -P {PASSWORD} [-H {ORAHOME}] [-T {TEMP}] [-S {USERS}] [-W {DEFAULT}] [-M] -Q

Usage: configure a SERVICE into Symantec CCS for Oracle Databases Silently using SYSTEM/Pre-Created account
  ccsorasetup -s {SERVICE} -A {ACCOUNT} -P {PASSWORD} [-H {ORAHOME}] [-T {TEMP}] [-S {USERS}] [-W {DEFAULT}] [-M] -Q

Usage: configure a SID  mounted on RAC environment into Symantec CCS for Oracle Databases Silently
  ccsorasetup -a {SID} -A Pre-created account -P {PASSWORD} [-T {TEMP}] [-S {USERS}] [-W {DEFAULT}] [-M] -Q

Usage: configure a SERVICE mounted on RAC environment into Symantec CCS for Oracle Databases Silently
  ccsorasetup -s {SERVICE} -A Pre-created account -P {PASSWORD} [-T {TEMP}] [-S {USERS}] [-W {DEFAULT}] [-M] -Q

Usage: configure a SID into Symantec CCS for Oracle Databases Silently using  "/as sysdba" method
  ccsorasetup -a {SID} -A "oracle_owner" [-H {ORAHOME}] [-T {TEMP}] [-S {USERS}] [-W {DEFAULT}] [-C] [-M] -Q

Usage: configure a SERVICE into Symantec CCS for Oracle Databases Silently using  "/as sysdba" method
  ccsorasetup -s {SERVICE} -A "oracle_owner" [-H {ORAHOME}] [-T {TEMP}] [-S {USERS}] [-W {DEFAULT}] [-C] [-M] -Q

Usage: configure all SIDs into Symantec CCS for Oracle Databases Silently using SYSTEM account
  ccsorasetup -a ALL -A SYSTEM -P {PASSWORD} [-T {TEMP}] [-S {USERS}] [-W {DEFAULT}] [-M] -Q

Usage: configure all SIDs into Symantec CCS for Oracle Databases Silently using "/as sysdba" method
  ccsorasetup -a ALL -A "oracle_owner" [-T {TEMP}] [-S {USERS}] [-W {DEFAULT}] [-C] [-M] -Q

Usage: configure a SID into Symantec CCS for Oracle Databases
  ccsorasetup -a {SID} [-H {ORAHOME}] [-M]

Usage: configure a SERVICE into Symantec CCS for Oracle Databases
  ccsorasetup -s {SERVICE} [-H {ORAHOME}] [-M]

Usage: configure all SIDs into Symantec CCS for Oracle Databases
  ccsorasetup -a all [-M]

Usage: delete a SID from Symantec CCS Oracle Databases
  ccsorasetup -d -a {SID} [-P {PASSWORD}]
  ccsorasetup -d -a {SID}

Usage: delete a SERVICE from Symantec CCS Oracle Databases
  ccsorasetup -d -s {SERVICE} [-P {PASSWORD}]
  ccsorasetup -d -s {SERVICE}

Usage: delete all SIDs from Symantec CCS Oracle Databases
  ccsorasetup -d -a all

Usage: update Oracle Home for the registered SID from Symantec CCS Oracle Databases
  ccsorasetup -U -a {SID} [-H {OraHome}] [-M]

Usage: update Oracle Home for the registered SERVICE from Symantec CCS Oracle Databases
  ccsorasetup -U -s {SERVICE} [-H {OraHome}] [-M]

Usage: update Oracle Home for all registered SIDs from Symantec CCS Oracle Databases
  ccsorasetup -U -a all [-M]

Usage: Lists all registered SIDs and SERVICEs from Symantec CCS Oracle Databases
  ccsorasetup -l

Usage: Enable credential management
  ccsorasetup -M

 

Additional Information

Additional Knowledgebase articles about Oracle scanning using agent-based collection:

Error: 'Credentials for the asset have not been specified' when running agent-based Oracle scans in CCS

Error: 'Failure occured in query execution. ERROR at line 1:=0AORA-01031: insufficient privileges=0A' on CCS for Oracle scan.