Wednesday, May 16, 2018

ORAchk #1 : Installing and use the ORAchk Health Check Tool



 ORAchk  VERSION: 12.2.0.1.4 - Health Checks for the Oracle Stack (Doc ID 1268927.2)
========================================================================


Download the ORAchk: The latest version of ORAchk is attached to Note 1268927.1 and can be downloaded    "ORAchk stand-alone"





Unzip orachk.zip kit $ unzip orachk.zip
===============================================

[root@rac1 orachk]# ls -lrt
total 257500
-rw-r--r-- 1 grid oinstall 263673609 May 16 21:32 orachk_2.zip
[root@rac1 orachk]#
[root@rac1 orachk]# unzip orachk_2.zip
Archive:  orachk_2.zip
   creating: .cgrep/

 
After unzip Give to permission $ chmod 755 orachk
=======================================================

[root@rac1 oracle_software]# cd orachk/
[root@rac1 orachk]#
[root@rac1 orachk]# ls -lrt
total 325364
-rwxrwxrwx 1 root root       6424905 Dec 12 22:33 rules.dat
-rwxrwxrwx 1 root root      49352682 Dec 12 22:33 collections.dat
-rwxrwxrwx 1 root root        109317 Dec 12 23:11 orachk.pyc
drwxrwxrwx 2 root root          4096 Dec 12 23:11 bash
-rwxrwxrwx 1 root root          5665 Dec 12 23:11 orachk.bat
-rwxrwxrwx 1 root root       2958609 Dec 12 23:12 CollectionManager_App.sql
-rwxrwxrwx 1 root root       8233480 Dec 12 23:12 Apex5_CollectionManager_App.sql
-rwxrwxrwx 1 root root         40052 Dec 12 23:12 sample_user_defined_checks.xml
-rwxrwxrwx 1 root root          2888 Dec 12 23:12 user_defined_checks.xsd
drwxrwxrwx 2 root root          4096 Dec 12 23:12 build
-rwxrwxrwx 1 root root         11063 Dec 13 03:01 orachk
drwxrwxrwx 3 root root          4096 Dec 13 03:01 lib
drwxrwxrwx 2 root root          4096 Dec 13 03:01 templates
drwxrwxrwx 2 root root          4096 Dec 13 03:01 exadiscover
-rwxrwxrwx 1 root root           230 Dec 13 03:15 UserGuide.txt
-rwxrwxrwx 1 root root         10105 Dec 13 03:15 readme.txt
-rwxrwxrwx 1 root root       2296616 Dec 13 03:15 ORAchk_Health_Check_Catalog.html
-rwxrwxrwx 1 grid oinstall 263673609 May 16 21:32 orachk_2.zip
drwxrwxrwx 2 root root          4096 May 16 21:47 doc
[root@rac1 orachk]#
[root@rac1 orachk]#



[root@rac1 orachk]#
[root@rac1 orachk]# ./orachk
This version of orachk was released on 12-Dec-2017 and its older than 120 days. No new version of orachk is available in RAT_UPGRADE_LOC. It is highly recommended that you download the latest version of orachk from my oracle support to ensure the highest level of accuracy of the data contained within the report.


Do you want to download latest version from my oracle support? [y/n] [y] n

Do you want to continue running this version? [y/n][y] y
Running older version...


CRS stack is running and CRS_HOME is not set. Do you want to set CRS_HOME to /u01/app/11.2.0/grid_1?[y/n][y] y

Checking ssh user equivalency settings on all nodes in cluster for root

Node rac2 is not configured for ssh user equivalency and the orachk uses ssh to execute checks on remote nodes.
Without passwordless ssh orachk  can not run audit checks on the remote nodes.
If necessary due to security policies the orachk can be run on each node using -localonly option.


Do you want to configure SSH for user root on rac2 [y/n][y] y

Enter rac2 root password :
Verifying root password ...

Node rac2 has been configured for ssh user equivalency for root


Searching for running databases . . . . .

.  .
List of running databases registered in OCR

1. orcl
2. None of above

Select databases from list for checking best practices. For multiple databases, select 1 for All or comma separated number like 1,2 etc [1-2][1]. 1
.  .  .  .

Checking Status of Oracle Software Stack - Clusterware, ASM, RDBMS

.  .  .  . . . .
.  .  . . . .  .  .  .  .  .  .  .  .  . . . .  .  .  .  .  .  .  .
-------------------------------------------------------------------------------------------------------
                                                 Oracle Stack Status
-------------------------------------------------------------------------------------------------------
  Host Name        CRS Installed   RDBMS Installed     CRS UP     ASM UP   RDBMS UP     DB Instance Name
-------------------------------------------------------------------------------------------------------
       rac1                        Yes           Yes           Yes       Yes       Yes                orcl1
       rac2                        Yes           Yes           Yes       Yes       Yes                orcl2
-------------------------------------------------------------------------------------------------------


Copying plug-ins

. .
.  .  .  .  .  .

*** Checking Best Practice Recommendations ( PASS / WARNING / FAIL ) ***


.

Collections and audit checks log file is
/u01/oracle_software/orachk/orachk_rac1_orcl_051618_215243/log/orachk.log

Starting to run orachk in background on rac2



============================================================
                   Node name - rac1
============================================================

Collecting - ASM Disk Groups
Collecting - ASM Disk I/O stats
Collecting - ASM Diskgroup Attributes
Collecting - ASM disk partnership imbalance
Collecting - ASM diskgroup attributes
Collecting - ASM diskgroup usable free space
Collecting - ASM initialization parameters
Collecting - Active sessions load balance for orcl database
Collecting - Archived Destination Status for orcl database
Collecting - Cluster Interconnect Config for orcl database
Collecting - Database Archive Destinations for orcl database
Collecting - Database Files for orcl database
Collecting - Database Instance Settings for orcl database
Collecting - Database Parameters for orcl database
Collecting - Database Properties for orcl database
Collecting - Database Registry for orcl database
Collecting - Database Sequences for orcl database
Collecting - Database Undocumented Parameters for orcl database
Collecting - Database Undocumented Parameters for orcl database
Collecting - Database Workload Services for orcl database
Collecting - Dataguard Status for orcl database
Collecting - Files not opened by ASM
Collecting - Log Sequence Numbers for orcl database
Collecting - Percentage of asm disk  Imbalance
Collecting - Process for shipping Redo to standby for orcl database
Collecting - RDBMS Feature Usage for orcl database
Collecting - Redo Log information for orcl database
Collecting - Standby redo log creation status before switchover for orcl database
Collecting - /proc/cmdline
Collecting - /proc/modules
Collecting - CPU Information
Collecting - CRS active version
Collecting - CRS oifcfg
Collecting - CRS software version
Collecting - CSS Reboot time
Collecting - CSS disktimout
Collecting - Cluster interconnect (clusterware)
Collecting - Clusterware OCR healthcheck
Collecting - Clusterware Resource Status
Collecting - Disk I/O Scheduler on Linux
Collecting - DiskFree Information
Collecting - DiskMount Information
Collecting - Huge pages configuration
Collecting - Interconnect network card speed
Collecting - Kernel parameters
Collecting - Linux module config.
Collecting - Maximum number of semaphore sets on system
Collecting - Maximum number of semaphores on system
Collecting - Maximum number of semaphores per semaphore set
Collecting - Memory Information
Collecting - NUMA Configuration
Collecting - Network Interface Configuration
Collecting - Network Performance
Collecting - Network Service Switch
Collecting - OS Packages
Collecting - OS version
Collecting - Operating system release information and kernel version
Collecting - Oracle Executable Attributes
Collecting - Patches for Grid Infrastructure
Collecting - Patches for RDBMS Home
Collecting - Shared memory segments
Collecting - Table of file system defaults
Collecting - Voting disks (clusterware)
Collecting - number of semaphore operations per semop system call
Collecting - ACFS Volumes status
Collecting - Broadcast Requirements for Networks
Collecting - CRS Opatch version
Collecting - CRS user time zone check
Collecting - Custom rc init scripts (rc.local)
Collecting - Disk Information
Collecting - Grid Infastructure user shell limits configuration
Collecting - Interconnect interface config
Collecting - Linux Operating system health check using vmpscan.sh
Collecting - Network interface stats
Collecting - Root user limits
Collecting - Verify no database server kernel out of memory errors
Collecting - root time zone check
Collecting - slabinfo
Collecting - umask setting for GI owner


Data collections completed. Checking best practices on rac1.
------------------------------------------------------------



 INFO =>     Important Automatic Storage Management (ASM) Notes and Technical White Papers
 INFO =>     Oracle Data Pump Best practices.
 FAIL =>     Bash is vulnerable to code injection (CVE-2014-6271)
 INFO =>     Important Storage Minimum Requirements for Grid & Database Homes
 INFO =>     Most recent ADR incidents for /u01/app/oracle/product/11.2.0/dbhome_1
 INFO =>     Oracle GoldenGate failure prevention best practices
 WARNING =>  Non-default database Services are not configured for orcl
 WARNING =>  Shell limit soft nproc for GI is not configured according to recommendation
 FAIL =>     Database parameter CLUSTER_INTERCONNECTS is not set to the recommended value for orcl
 WARNING =>  Oracle patch 23665623 is not applied on RDBMS_HOME /u01/app/oracle/product/11.2.0/dbhome_1
 WARNING =>  Oracle patch 22113854 is not applied on RDBMS_HOME /u01/app/oracle/product/11.2.0/dbhome_1
 WARNING =>  Oracle patch 18498878 is not applied on RDBMS_HOME /u01/app/oracle/product/11.2.0/dbhome_1
 WARNING =>  Oracle patch 24739928 is not applied on RDBMS_HOME /u01/app/oracle/product/11.2.0/dbhome_1
 WARNING =>  Oracle patch 19174639 is not applied on RDBMS_HOME /u01/app/oracle/product/11.2.0/dbhome_1
 WARNING =>  Oracle patch 20879889 is not applied on RDBMS_HOME /u01/app/oracle/product/11.2.0/dbhome_1
 WARNING =>  Oracle patch 20476175 is not applied on RDBMS_HOME /u01/app/oracle/product/11.2.0/dbhome_1
 WARNING =>  Oracle patch 20907061 is not applied on RDBMS_HOME /u01/app/oracle/product/11.2.0/dbhome_1
 WARNING =>  Oracle patch 19855835 is not applied on RDBMS_HOME /u01/app/oracle/product/11.2.0/dbhome_1
 FAIL =>     ASM_DISKSTRING parameter is either null or set to /dev/*
 WARNING =>  ARCHIVELOG mode is disabled for orcl
 FAIL =>     The RMAN snapshot controlfile location is NOT shared on all database nodes in the cluster for orcl
 WARNING =>  OCR is not being backed up daily
 INFO =>     $CRS_HOME/log/hostname/client directory has too many older log files.
 INFO =>     user_dump_dest has trace files older than 30 days for orcl
 INFO =>     background_dump_dest has files older than 30 days for orcl
 INFO =>     At some times checkpoints are not being completed for orcl
 WARNING =>  $ORACLE_HOME/bin/oradism setuid bit is NOT set for /u01/app/oracle/product/11.2.0/dbhome_1
 INFO =>     audit_file_dest  has audit  files older than 30 days for orcl
 WARNING =>  Controlfile is NOT multiplexed for orcl
 WARNING =>  One or more redo log groups are not multiplexed for orcl
 WARNING =>  Oracle database software owner soft nproc shell limit is not configured according to recommendation
 WARNING =>  Database Parameter memory_target is not set to the recommended value on orcl1 instance
 FAIL =>     Operating system hugepages count does not satisfy total SGA requirements
 WARNING =>  NIC bonding is not configured for interconnect
 WARNING =>  NIC bonding is NOT configured for public network (VIP)
 WARNING =>  RAC interconnect network card speed does not meet recommendation
 WARNING =>  OSWatcher is not running as is recommended.
 INFO =>     Jumbo frames (MTU >= 9000) are not configured for interconnect
 WARNING =>  All disk groups should have compatible.rdbms attribute set to recommended values
 WARNING =>  All disk groups should have compatible.advm attribute set to recommended values
 WARNING =>  All disk groups should have compatible.asm attribute set to recommended values
 FAIL =>     Database parameter DB_BLOCK_CHECKSUM is not set to recommended value on orcl1 instance
 FAIL =>     Database parameter DB_LOST_WRITE_PROTECT is not set to recommended value on orcl1 instance
 WARNING =>  CSS log file size has not been increased from default (50 MB) .
 WARNING =>  Database parameter DB_BLOCK_CHECKING on PRIMARY is NOT set to the recommended value. for orcl
 FAIL =>     Flashback on PRIMARY is not configured for orcl
 INFO =>     Operational Best Practices
 INFO =>     Database Consolidation Best Practices
 INFO =>     Computer failure prevention best practices
 INFO =>     Data corruption prevention best practices
 INFO =>     Logical corruption prevention best practices
 INFO =>     Database/Cluster/Site failure prevention best practices
 INFO =>     Client failover operational best practices
 WARNING =>  fast_start_mttr_target should be greater than or equal to 300. on orcl1 instance
 INFO =>     Information about hanganalyze and systemstate dump
 WARNING =>  Package -ksh-20120801-10.el6-x86_64 does not meet recommendation for ksh-20100621-12.el6-x86_64
 FAIL =>     Table AUD$[FGA_LOG$] should use Automatic Segment Space Management for orcl
 INFO =>     Database failure prevention best practices
 WARNING =>  Database Archivelog Mode should be set to ARCHIVELOG for orcl
 FAIL =>     Primary database is not protected with Data Guard (standby database) for real-time data protection and availability for orcl
 WARNING =>  Redo log write time is more than 500 milliseconds for orcl
 INFO =>     Parallel Execution Health-Checks and Diagnostics Reports for orcl
 WARNING =>  vm.min_free_kbytes should be set as recommended.
 INFO =>     Oracle recovery manager(rman) best practices
 WARNING =>  RMAN controlfile autobackup should be set to ON for orcl
 INFO =>     Consider increasing the COREDUMPSIZE size
 WARNING =>  Consider investigating changes to the schema objects such as DDLs or new object creation for orcl
 WARNING =>  Consider investigating the frequency of SGA resize operations and take corrective action for orcl
 FAIL =>     One or more network card used by clusterware do not have HOTPLUG=NO
Best Practice checking completed.Checking recommended patches on rac1
--------------------------------------------------------------------------------
Collecting patch inventory on CRS HOME /u01/app/11.2.0/grid_1
Collecting patch inventory on ORACLE_HOME /u01/app/oracle/product/11.2.0/dbhome_1
--------------------------------------------------------------------------------
1 Recommended CRS patches for 112040 from /u01/app/11.2.0/grid_1 on rac1
--------------------------------------------------------------------------------
Patch#   CRS  ASM    RDBMS RDBMS_HOME                              Patch-Description
--------------------------------------------------------------------------------
22502505 no          no    /u01/app/oracle/product/11.2.0/dbhome_1 ACFS PSU 11.2.0.4.160419                                         
26392168 no          no    /u01/app/oracle/product/11.2.0/dbhome_1 DB PSU 11.2.0.4.171017 (INCLUDES CPUOCT2017)                     
26609929 no          no    /u01/app/oracle/product/11.2.0/dbhome_1 OCW PSU 11.2.0.4.170814                                         
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
1 Recommended RDBMS patches for 112040 from /u01/app/oracle/product/11.2.0/dbhome_1 on rac1
--------------------------------------------------------------------------------
Patch#   RDBMS    ASM     type                Patch-Description
--------------------------------------------------------------------------------
26392168 no               merge                DB PSU 11.2.0.4.171017 (INCLUDES CPUOCT2017)
26609929 no               merge                OCW PSU 11.2.0.4.170814
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
              Clusterware patches summary report
--------------------------------------------------------------------------------
Total patches  Applied on CRS Applied on RDBMS Applied on ASM
--------------------------------------------------------------------------------
1              0              0                0
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
              RDBMS homes patches summary report
--------------------------------------------------------------------------------
Total patches  Applied on RDBMS Applied on ASM ORACLE_HOME
--------------------------------------------------------------------------------
1              2              0                /u01/app/oracle/product/11.2.0/dbhome_1
--------------------------------------------------------------------------------



Copying results from rac2 and generating report. This might take a while. Be patient.


Collecting - ACFS Volumes status
Collecting - Broadcast Requirements for Networks
Collecting - CRS Opatch version
Collecting - CRS user time zone check
Collecting - Disk Information
Collecting - Grid Infastructure user shell limits configuration
Collecting - Interconnect interface config
Collecting - Linux Operating system health check using vmpscan.sh
Collecting - Network interface stats
Collecting - Root user limits
Collecting - Verify no database server kernel out of memory errors
Collecting - root time zone check
Collecting - slabinfo
Collecting - umask setting for GI owner

============================================================
                   Node name - rac2
============================================================

Collecting - /proc/cmdline
Collecting - /proc/modules
Collecting - CPU Information
Collecting - CRS active version
Collecting - CRS oifcfg
Collecting - CRS software version
Collecting - Cluster interconnect (clusterware)
Collecting - Disk I/O Scheduler on Linux
Collecting - DiskFree Information
Collecting - DiskMount Information
Collecting - Huge pages configuration
Collecting - Interconnect network card speed
Collecting - Kernel parameters
Collecting - Linux module config.
Collecting - Maximum number of semaphore sets on system
Collecting - Maximum number of semaphores on system
Collecting - Maximum number of semaphores per semaphore set
Collecting - Memory Information
Collecting - NUMA Configuration
Collecting - Network Interface Configuration
Collecting - Network Performance
Collecting - Network Service Switch
Collecting - OS Packages
Collecting - OS version
Collecting - Operating system release information and kernel version
Collecting - Oracle Executable Attributes
Collecting - Patches for Grid Infrastructure
Collecting - Patches for RDBMS Home
Collecting - Shared memory segments
Collecting - Table of file system defaults
Collecting - number of semaphore operations per semop system call


Data collections completed. Checking best practices on rac2.
------------------------------------------------------------



 FAIL =>     Bash is vulnerable to code injection (CVE-2014-6271)
 WARNING =>  free physical memory is not at sufficient level on system
 INFO =>     Important Storage Minimum Requirements for Grid & Database Homes
 INFO =>     Most recent ADR incidents for /u01/app/oracle/product/11.2.0/dbhome_1
 INFO =>     Oracle GoldenGate failure prevention best practices
 WARNING =>  Non-default database Services are not configured for orcl
 WARNING =>  Shell limit soft nproc for GI is not configured according to recommendation
 FAIL =>     Database parameter CLUSTER_INTERCONNECTS is not set to the recommended value for orcl
 WARNING =>  Oracle patch 23665623 is not applied on RDBMS_HOME /u01/app/oracle/product/11.2.0/dbhome_1
 WARNING =>  Oracle patch 22113854 is not applied on RDBMS_HOME /u01/app/oracle/product/11.2.0/dbhome_1
 WARNING =>  Oracle patch 18498878 is not applied on RDBMS_HOME /u01/app/oracle/product/11.2.0/dbhome_1
 WARNING =>  Oracle patch 24739928 is not applied on RDBMS_HOME /u01/app/oracle/product/11.2.0/dbhome_1
 WARNING =>  Oracle patch 19174639 is not applied on RDBMS_HOME /u01/app/oracle/product/11.2.0/dbhome_1
 WARNING =>  Oracle patch 20879889 is not applied on RDBMS_HOME /u01/app/oracle/product/11.2.0/dbhome_1
 WARNING =>  Oracle patch 20476175 is not applied on RDBMS_HOME /u01/app/oracle/product/11.2.0/dbhome_1
 WARNING =>  Oracle patch 20907061 is not applied on RDBMS_HOME /u01/app/oracle/product/11.2.0/dbhome_1
 WARNING =>  Oracle patch 19855835 is not applied on RDBMS_HOME /u01/app/oracle/product/11.2.0/dbhome_1
 FAIL =>     ASM_DISKSTRING parameter is either null or set to /dev/*
 FAIL =>     The RMAN snapshot controlfile location is NOT shared on all database nodes in the cluster for orcl
 INFO =>     $CRS_HOME/log/hostname/client directory has too many older log files.
 INFO =>     user_dump_dest has trace files older than 30 days for orcl
 INFO =>     background_dump_dest has files older than 30 days for orcl
 WARNING =>  $ORACLE_HOME/bin/oradism setuid bit is NOT set for /u01/app/oracle/product/11.2.0/dbhome_1
 INFO =>     audit_file_dest  has audit  files older than 30 days for orcl
 WARNING =>  Oracle database software owner soft nproc shell limit is not configured according to recommendation
 WARNING =>  Database Parameter memory_target is not set to the recommended value on orcl2 instance
 FAIL =>     Operating system hugepages count does not satisfy total SGA requirements
 WARNING =>  NIC bonding is not configured for interconnect
 WARNING =>  NIC bonding is NOT configured for public network (VIP)
 WARNING =>  RAC interconnect network card speed does not meet recommendation
 WARNING =>  OSWatcher is not running as is recommended.
 INFO =>     Jumbo frames (MTU >= 9000) are not configured for interconnect
 FAIL =>     Database parameter DB_BLOCK_CHECKSUM is not set to recommended value on orcl2 instance
 FAIL =>     Database parameter DB_LOST_WRITE_PROTECT is not set to recommended value on orcl2 instance
 WARNING =>  CSS log file size has not been increased from default (50 MB) .
 WARNING =>  Database parameter DB_BLOCK_CHECKING on PRIMARY is NOT set to the recommended value. for orcl
 WARNING =>  fast_start_mttr_target should be greater than or equal to 300. on orcl2 instance
 WARNING =>  Package -ksh-20120801-10.el6-x86_64 does not meet recommendation for ksh-20100621-12.el6-x86_64
 WARNING =>  Redo log write time is more than 500 milliseconds for orcl
 WARNING =>  vm.min_free_kbytes should be set as recommended.
 INFO =>     Consider increasing the COREDUMPSIZE size
 FAIL =>     One or more network card used by clusterware do not have HOTPLUG=NO
Best Practice checking completed.Checking recommended patches on rac2
--------------------------------------------------------------------------------
Collecting patch inventory on CRS HOME /u01/app/11.2.0/grid_1
Collecting patch inventory on ORACLE_HOME /u01/app/oracle/product/11.2.0/dbhome_1
--------------------------------------------------------------------------------
1 Recommended CRS patches for 112040 from /u01/app/11.2.0/grid_1 on rac2
--------------------------------------------------------------------------------
Patch#   CRS  ASM    RDBMS RDBMS_HOME                              Patch-Description
--------------------------------------------------------------------------------
22502505 no          no    /u01/app/oracle/product/11.2.0/dbhome_1 ACFS PSU 11.2.0.4.160419                                         
26392168 no          no    /u01/app/oracle/product/11.2.0/dbhome_1 DB PSU 11.2.0.4.171017 (INCLUDES CPUOCT2017)                     
26609929 no          no    /u01/app/oracle/product/11.2.0/dbhome_1 OCW PSU 11.2.0.4.170814                                         
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
1 Recommended RDBMS patches for 112040 from /u01/app/oracle/product/11.2.0/dbhome_1 on rac2
--------------------------------------------------------------------------------
Patch#   RDBMS    ASM     type                Patch-Description
--------------------------------------------------------------------------------
26392168 no               merge                DB PSU 11.2.0.4.171017 (INCLUDES CPUOCT2017)
26609929 no               merge                OCW PSU 11.2.0.4.170814
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
              Clusterware patches summary report
--------------------------------------------------------------------------------
Total patches  Applied on CRS Applied on RDBMS Applied on ASM
--------------------------------------------------------------------------------
1              0              0                0
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
              RDBMS homes patches summary report
--------------------------------------------------------------------------------
Total patches  Applied on RDBMS Applied on ASM ORACLE_HOME
--------------------------------------------------------------------------------
1              2              0                /u01/app/oracle/product/11.2.0/dbhome_1
--------------------------------------------------------------------------------




------------------------------------------------------------
                      CLUSTERWIDE CHECKS
------------------------------------------------------------

------------------------------------------------------------
Detailed report (html) -  /u01/oracle_software/orachk/orachk_rac1_orcl_051618_215243/orachk_rac1_orcl_051618_215243.html


UPLOAD [if required] - /u01/oracle_software/orachk/orachk_rac1_orcl_051618_215243.zip


[root@rac1 orachk]#


=====================================================================
ORAchk Report
======================================================================


Oracle RAC Assessment Report

System Health Score is 86 out of 100 (detail)

Cluster Summary

Cluster Namerac-cluster
OS/Kernel VersionLINUX X86-64 OELRHEL 6 3.8.13-16.2.1.el6uek.x86_64
CRS Home - Version/u01/app/11.2.0/grid_1 - 11.2.0.4.0
DB Home - Version - Names/u01/app/oracle/product/11.2.0/dbhome_1 - 11.2.0.4.0 - orcl
Number of nodes2
   Database Servers2
ORAchk Version12.2.0.1.4_20171212
Collectionorachk_rac1_orcl_051618_215243
Duration19 mins, 29 seconds
Executed byroot
Arguments
Collection Date16-May-2018 21:57:42

Note! This version of ORAchk is considered valid for 0 days from today or until a new version is available

Table of Contents


  • Database Server


  • Cluster Wide - All Checks Passed


  • Report Feature


  •  


  • Show checks with the following status:
  •                 


  • Show details of the following regions:
  •         
            
            
            
            


  • Show details of the checks:
  •        Expand AllCollapse All




    Database Server

    StatusTypeMessageStatus OnDetails
    FAILOS CheckOne or more network card used by clusterware do not have HOTPLUG=NOAll Database Servers
    FAILSQL CheckTable AUD$[FGA_LOG$] should use Automatic Segment Space ManagementAll Databases
    FAILOS CheckOperating system hugepages count does not satisfy total SGA requirementsAll Database Servers
    FAILOS CheckThe RMAN snapshot controlfile location is NOT shared on all database nodes in the clusterAll Database Servers
    FAILASM CheckASM_DISKSTRING parameter is either null or set to /dev/*All ASM Instances
    FAILOS CheckDatabase parameter CLUSTER_INTERCONNECTS is not set to the recommended valueAll Database Servers
    FAILOS CheckBash is vulnerable to code injection (CVE-2014-6271)All Database Servers
    WARNINGOS Checkfree physical memory is not at sufficient level on systemrac2
    WARNINGSQL CheckConsider investigating the frequency of SGA resize operations and take corrective actionAll Databases
    WARNINGSQL CheckConsider investigating changes to the schema objects such as DDLs or new object creationAll Databases
    WARNINGOS Checkvm.min_free_kbytes should be set as recommended.All Database Servers
    WARNINGOS CheckRedo log write time is more than 500 millisecondsAll Database Servers
    WARNINGOS CheckPackage -ksh-20120801-10.el6-x86_64 does not meet recommendation for ksh-20100621-12.el6-x86_64All Database Servers
    WARNINGOS CheckCSS log file size has not been increased from default (50 MB) .All Database Servers
    WARNINGASM CheckAll disk groups should have compatible.asm attribute set to recommended valuesAll ASM Instances
    WARNINGASM CheckAll disk groups should have compatible.advm attribute set to recommended valuesAll ASM Instances
    WARNINGASM CheckAll disk groups should have compatible.rdbms attribute set to recommended valuesAll ASM Instances
    WARNINGOS CheckOSWatcher is not running as is recommended.All Database Servers
    WARNINGOS CheckRAC interconnect network card speed does not meet recommendationAll Database Servers
    WARNINGOS CheckNIC bonding is NOT configured for public network (VIP)All Database Servers
    WARNINGOS CheckNIC bonding is not configured for interconnectAll Database Servers
    WARNINGSQL Parameter CheckDatabase Parameter memory_target is not set to the recommended valueAll Instances
    WARNINGOS CheckOracle database software owner soft nproc shell limit is not configured according to recommendationAll Database Servers
    WARNINGSQL CheckOne or more redo log groups are not multiplexedAll Databases
    WARNINGSQL CheckControlfile is NOT multiplexedAll Databases
    WARNINGOS Check$ORACLE_HOME/bin/oradism setuid bit is NOT setAll Database Servers
    WARNINGOS CheckOCR is not being backed up dailyAll Database Servers
    WARNINGSQL CheckARCHIVELOG mode is disabledAll Databases
    WARNINGPatch CheckOracle patch 19855835 is not applied on RDBMS_HOMEAll Homes
    WARNINGPatch CheckOracle patch 20907061 is not applied on RDBMS_HOMEAll Homes
    WARNINGPatch CheckOracle patch 20476175 is not applied on RDBMS_HOMEAll Homes
    WARNINGPatch CheckOracle patch 20879889 is not applied on RDBMS_HOMEAll Homes
    WARNINGPatch CheckOracle patch 19174639 is not applied on RDBMS_HOMEAll Homes
    WARNINGPatch CheckOracle patch 24739928 is not applied on RDBMS_HOMEAll Homes
    WARNINGPatch CheckOracle patch 18498878 is not applied on RDBMS_HOMEAll Homes
    WARNINGPatch CheckOracle patch 22113854 is not applied on RDBMS_HOMEAll Homes
    WARNINGPatch CheckOracle patch 23665623 is not applied on RDBMS_HOMEAll Homes
    WARNINGOS CheckShell limit soft nproc for GI is not configured according to recommendationAll Database Servers
    INFOOS CheckConsider increasing the COREDUMPSIZE sizeAll Database Servers
    INFOOS CheckParallel Execution Health-Checks and Diagnostics ReportsAll Database Servers
    INFOOS CheckInformation about hanganalyze and systemstate dumpAll Database Servers
    INFOOS CheckJumbo frames (MTU >= 9000) are not configured for interconnectAll Database Servers
    INFOOS Checkaudit_file_dest has audit files older than 30 daysAll Database Servers
    INFOOS CheckAt some times checkpoints are not being completedrac1
    INFOOS Checkbackground_dump_dest has files older than 30 daysAll Database Servers
    INFOOS Checkuser_dump_dest has trace files older than 30 daysAll Database Servers
    INFOOS Check$CRS_HOME/log/hostname/client directory has too many older log files.All Database Servers
    INFOOS CheckMost recent ADR incidentsAll Database Servers
    INFOOS CheckImportant Storage Minimum Requirements for Grid & Database HomesAll Database Servers
    INFOASM CheckOracle Data Pump Best practices.All ASM Instances
    INFOOS CheckImportant Automatic Storage Management (ASM) Notes and Technical White PapersAll Database Servers

    Cluster Wide

    StatusTypeMessageStatus OnDetails

    Top

    Maximum Availability Architecture (MAA) Scorecard

    Outage TypeStatusTypeMessageStatus OnDetails
    DATABASE FAILURE PREVENTION BEST PRACTICESPASS
     [Updated: 03/09/17]
    
    Oracle database can be configured with best practices that are applicable to all Oracle databases, including single-instance, Oracle RAC databases, Oracle RAC One Node databases, and the primary and standby databases in Oracle Data Guard or Oracle GoldenGate configurations.
    
    Key HA Benefits:
    
    (1) Improved recoverability
    (2) Improved stability
    
     
    
    WARNINGSQL CheckDatabase Archivelog Mode should be set to ARCHIVELOGAll Databases
    .
    COMPUTER FAILURE PREVENTION BEST PRACTICESINFO
     [Updated: 03/09/17]
    
    Oracle RAC and Oracle Clusterware allow Oracle Database to run any packaged or custom application across a set of clustered servers. This capability provides server side high availability and scalability. If a clustered server fails, then Oracle Database continues running on the surviving servers. When more processing power is needed, you can add another server without interrupting access to data.
    
    
    Oracle RAC and Oracle Clusterware supports rolling upgrade for most hardware and software changes excluding Oracle RDBMS patch sets and new database releases.
    
    
     To achieve zero or near zero application downtime, integrated client failover best practices need to be incorporated which is covered in client failover operational best practices section of the MAA scorecard.
    
    
    Key HA Benefits:
    
    • Zero database downtime for node and instance failures. Application brownout can be zero or seconds compared to minutes and an hour with third party cold cluster failover solutions.
    • Zero database and potentially zero application downtime for most planned maintenance activities involving operating system, database or Grid Infrastructure software changes.
    WARNINGSQL Parameter Checkfast_start_mttr_target should be greater than or equal to 300.All Instances
    .
    DATA CORRUPTION PREVENTION BEST PRACTICESPASS
     [Updated: 03/09/17]
    
    To achieve the most comprehensive data corruption prevention and detection , use Oracle Active Data Guard and configure DB_BLOCK_CHECKSUM,DB_LOST_WRITE_PROTECT and DB_BLOCK_CHECKING database initialization parameters on the primary database and all standby databases in a Data Guard environment. Workload specific testing is required to assess whether the performance overhead with especially DB_BLOCK_CHECKING is acceptable.
    
    Using ASM, RMAN, Exadata Storage and Zero Data Loss Recovery Appliance (Recovery Appliance) provide additional data protection checks and repair for Oracle databases and backups.    
    
     Key HA Benefits
    
    • Application downtime due to data corruptions can be reduced from hours and days to seconds to no downtime.
    • Prevention, quick detection and fast repair of data block corruptions.
    • With Active Data Guard, physical data block corruptions can be repaired automatically using current blocks from primary or standby databases.
    • With ASM, Exadata Storage and Recovery Appliance, data corruptions can be detected in the background and in some cases repaired automatically.
    • With DB_BLOCK_CHECKING=MED or FULL, logical data block corruptions can be detected and prevented on the primary or standby database.
    FAILSQL Parameter CheckDatabase parameter DB_LOST_WRITE_PROTECT is not set to recommended valueAll Instances
    FAILSQL Parameter CheckDatabase parameter DB_BLOCK_CHECKSUM is not set to recommended valueAll Instances
    WARNINGOS CheckDatabase parameter DB_BLOCK_CHECKING on PRIMARY is NOT set to the recommended value.All Database Servers
    .
    LOGICAL CORRUPTION PREVENTION BEST PRACTICESPASS
     [Updated: 03/09/17]
    
    Oracle Flashback Technology enables fast logical failure repair. Oracle recommends that you use automatic undo management with sufficient space to attain your desired undo retention guarantee, enable Oracle Flashback Database, and allocate sufficient space and I/O bandwidth in the fast recovery area.  Application monitoring is required for early detection.  Effective and fast repair comes from leveraging and rehearsing the most common application specific logical failures and using the different flashback features effectively (e.g flashback query, flashback version query, flashback transaction query, flashback transaction, flashback drop, flashback table, and flashback database, and 12.2 flashback pluggable database (PDB)).
    
    Key HA Benefits:
    
    • With application monitoring and rehearsed repair actions with flashback technologies, application downtime can reduce from hours and days to the time to detect the logical inconsistency.
    • Fast repair for logical failures caused by malicious or accidental DML or DDL operations.
    • Effect fast point-in-time repair at the appropriate level of granularity: transaction, table, pluggable database, or database.
    Questions that need to be addressed by your application and operations team:
    1. Can your application or monitoring infrastructure detect logical inconsistencies?
    2. Is your operations team prepared to use various flashback technologies to repair quickly and efficiently?
    3. Is security practices enforced to prevent unauthorized privileges that can result logical inconsistencies?
    FAILSQL CheckFlashback on PRIMARY is not configuredAll Databases
    .
    DATABASE/CLUSTER/SITE FAILURE PREVENTION BEST PRACTICESINFO
     [Updated: 03/09/17]
    
    Active Data Guard is the real-time data protection and availability solution that eliminates single point of failure by maintaining one or more synchronized physical replicas of the production database. If an unplanned outage of any kind impacts the production database, applications and users can quickly failover to a synchronized standby, minimizing downtime and preventing data loss. An Active Data Guard standby can be used to offload read-only applications, ad-hoc queries, and backups from the primary database or be dual-purposed as a test system at the same time it provides disaster protection. An Active Data Guard standby can also be used to minimize downtime for planned maintenance when upgrading to new Oracle Database patch sets and major database releases and for select migrations.  
     
    For zero data loss protection and fastest recovery time, deploy a local Data Guard standby database with Data Guard Fast-Start Failover and integrated client failover. For protection against outages impacting the entire data center, or a broad geography, deploy a Data Guard standby database at a remote location. Oracle 12c Far Sync Standby can achieve zero data loss protection across Wide Area Network or across regions.
    
    Key HA Benefits:
    
    • Active Data Guard provides optimal data protection by using physical replication and comprehensive Oracle validation to maintain an exact byte-for-byte copy of the primary database that can be open read-only to offload reporting, ad-hoc queries and backups.
    • With Oracle 11g release 2 and higher Active Data Guard and real time apply, data block corruptions can be repaired automatically and downtime can be reduced from hours and days of application impact to zero downtime with zero data loss.
    • With MAA best practices, Data Guard Fast-Start Failover and integrated client failover, downtime from database, cluster and site failures can be reduced from hours to days to seconds.
    • With remote standby database (Disaster Recovery Site), you have protection from complete site failures.
    • In all cases, the Active Data Guard instances can be active and used for other activities.
    • Data Guard can reduce risks and downtime for planned maintenance activities by using Database rolling upgrade with transient logical standby or DBMS rolling, standby-first patch apply and database migrations.
    • For other advanced replication requirements where read-write access to a replica database is required while it is being synchronized with the primary database see Oracle GoldenGate logical replication. Oracle GoldenGate can be used to support heterogeneous database platforms and database releases, an effective read-write full or subset logical replica and to reduce or eliminate downtime for application, database or system changes. Oracle GoldenGate flexible logical replication solution's main trade-off is the additional administration for application developer and database administrators.
    FAILSQL CheckPrimary database is not protected with Data Guard (standby database) for real-time data protection and availabilityAll Databases
    CLIENT FAILOVER OPERATIONAL BEST PRACTICESPASS
     [Updated: 03/09/17]
    
    A highly available architecture requires the ability of the application tier to transparently fail over to a surviving instance or database advertising the required service. This ensures that applications are generally available or minimally impacted in the event of node failure, instance failure, or database failures.
     
    
    WARNINGOS CheckNon-default database Services are not configuredAll Database Servers
    WARNINGSQL CheckRMAN controlfile autobackup should be set to ONAll Databases
    .
    ORACLE GOLDENGATE FAILURE PREVENTION BEST PRACTICESINFO
     [Updated: 03/09/17]
    
    Oracle GoldenGate is Oracle's strategic logical replication solution for data distribution and data integration. Unlike replication solutions from other vendors, Oracle GoldenGate is more closely integrated with Oracle Database while also providing an open, modular architecture ideal for replication across heterogeneous database management systems. This combination of attributes eliminates compromise, making Oracle GoldenGate the preferred replication solution for addressing requirements that span Oracle Database and non-Oracle Database environments.
    
    Key HA Benefits:
    
    • Potential zero or near zero application downtime for platform migration, database or application upgrades.
    • Active/Active environment with the ability to update both databases. Conflict resolution techniques will need to be considered.
    To achieve the highest levels of availability resulting in zero or near-zero downtime for both unplanned outages and all planned maintenance activities, customers use the combination of Oracle Active Data Guard and Oracle GoldenGate. Oracle Active Data Guard and Oracle GoldenGate are essential components of the Gold and Platinum MAA tiers.
    .
    OPERATIONAL BEST PRACTICESINFO
     [Updated: 03/09/17]
    
    Operational best practices are an essential prerequisite to high availability.
     
    
    .
    DATABASE CONSOLIDATION BEST PRACTICESINFO
     [Updated: 03/09/17]
    
    Database consolidation requires additional planning and management to ensure HA requirements are met.
     
    

    Top

    Patch Recommendation

    Database server "rac1"




    1 Recommended CRS patches for 112040 from /u01/app/11.2.0/grid_1
    PatchCRSASMRDBMSRDBMS_HOMEPatch-Description
    22502505not-appliedn/anot-applied/u01/app/oracle/product/11.2.0/dbhome_1ACFS PSU 11.2.0.4.160419
    26392168not-appliedn/anot-applied/u01/app/oracle/product/11.2.0/dbhome_1DB PSU 11.2.0.4.171017 (INCLUDES CPUOCT2017)
    26609929not-appliedn/anot-applied/u01/app/oracle/product/11.2.0/dbhome_1OCW PSU 11.2.0.4.170814
    Top 

    1 Recommended RDBMS patches for 112040 from /u01/app/oracle/product/11.2.0/dbhome_1
    PatchRDBMSASMTypePatch-Description
    26392168not-appliedn/amergeDB PSU 11.2.0.4.171017 (INCLUDES CPUOCT2017)
    26609929not-appliedn/amergeOCW PSU 11.2.0.4.170814
    Top

    Database server "rac2"




    1 Recommended CRS patches for 112040 from /u01/app/11.2.0/grid_1
    PatchCRSASMRDBMSRDBMS_HOMEPatch-Description
    22502505not-appliedn/anot-applied/u01/app/oracle/product/11.2.0/dbhome_1ACFS PSU 11.2.0.4.160419
    26392168not-appliedn/anot-applied/u01/app/oracle/product/11.2.0/dbhome_1DB PSU 11.2.0.4.171017 (INCLUDES CPUOCT2017)
    26609929not-appliedn/anot-applied/u01/app/oracle/product/11.2.0/dbhome_1OCW PSU 11.2.0.4.170814
    Top 

    1 Recommended RDBMS patches for 112040 from /u01/app/oracle/product/11.2.0/dbhome_1
    PatchRDBMSASMTypePatch-Description
    26392168not-appliedn/amergeDB PSU 11.2.0.4.171017 (INCLUDES CPUOCT2017)
    26609929not-appliedn/amergeOCW PSU 11.2.0.4.170814
    Top

    Top

    Component Elapsed Times

    Component NameComponent TypeElapsed Time
    rac1Database Server6 mins, 20 seconds

    Top

    Clusterwide Linux Operating system health check(VMPScan)


    Note! This is summary of the VMPScan report. To browse full report, please open ORAchk report present under the 'reports' folder of ORAchk collection, otherwise below links will not work


    2 node report generated on: 2018-05-16 22:20:50    Report Name: orachk_rac1_orcl_051618_215243-2018-05-16 22:20:50



    Top

    Top 10 Time Consuming Checks

    NOTE: This information is primarily used for helping Oracle optimize the run time of ORAchk.

    These timings are not necessarily indicative of any problem and may vary widely from one system to another.
    NameTypeTargetExecution Duration
    Patches for Grid InfrastructureOS Collectionrac2:None1 mins and 6 secs
    Patches for Grid InfrastructureOS Collectionrac1:None1 mins and 2 secs
    Patches for RDBMS HomeOS Collectionrac2:None56 secs
    OS PackagesOS Collectionrac1:None45 secs
    Patches for RDBMS HomeOS Collectionrac1:None41 secs
    Parallel Execution Health-Checks and Diagnostics ReportsOS Checkrac1:orcl29 secs
    OS PackagesOS Collectionrac2:None24 secs
    Disk I/O Scheduler on LinuxOS Collectionrac1:None12 secs
    Verify Non-Default Database Services Were Created for Each DatabaseOS Checkrac1:orcl10 secs
    Is ASM storage being used?OS Checkrac2:orcl8 secs


    Switch to old format
       

    No comments:

    Post a Comment