What we check

# 200+ Oracle health checks.
Every edition. Every layer.

From tablespace pressure to SQL plan regressions — TuneVault runs comprehensive diagnostics across every layer of your Oracle stack and surfaces exactly what needs attention.

100+ diagnostic checks
15 check categories
51 EBS-specific checks
Autonomous monitoring + email alerts
Editions: SE / SE2 EE RAC ASM EBS 11g → 21c
CATEGORY 01

## Storage & Tablespaces

Tablespace utilization, autoextend health, segment growth patterns, temp space pressure, and undo configuration.

SE / SE2 EE RAC
18 checks
TS01 Tablespace usage %

Percent-full flag with warn/crit thresholds per tablespace.

TS02 Autoextend status

Identifies datafiles with autoextend off when tablespace is filling.

TS03 Segment growth trend

Top growing segments and projected days-to-full.

TS04 Temp tablespace pressure

Current temp usage and sort-to-disk events.

TS05 Undo configuration

UNDO_RETENTION setting vs. peak active transaction duration.

TS06 SYSAUX growth

SYSAUX occupant inventory and top consumers.

CATEGORY 02

## Performance & Wait Events

Top wait events, latch contention, active session history (ASH), and resource saturation indicators.

SE / SE2 EE RAC
14 checks
PF01 Top 10 wait events

Session wait events ranked by total wait time.

PF02 DB CPU ratio

CPU vs. wait time breakdown from recent workload.

PF03 Latch contention

Top latches with sleep ratios and wait counts.

PF04 Buffer cache hit ratio

Logical vs. physical read efficiency.

PF05 I/O distribution

Datafile I/O hotspots and response time outliers.

PF06 Shared pool utilization

Library cache hit rate, parse-to-execute ratio.

CATEGORY 03

## SQL Tuning & Execution Plans

Worst-performing SQL by elapsed time, CPU, and logical I/O. Full-table scan detection, cartesian join flags, and index suggestion.

SE / SE2 EE EE: DBMS_SQLTUNE
12 checks
SQ01 Top SQL by elapsed time

Top 5 high-elapsed SQL with execution count and plan info.

SQ02 Full table scans

Large FTS candidates with row count and missing index hints.

SQ03 Cartesian joins

Plans containing MERGE JOIN CARTESIAN operations.

SQ04 High-parse SQL

Statements with parse count > executions (unshared cursors).

SQ05 Index usage efficiency

Unused or rarely-used indexes that add DML overhead.

SQ06 DBMS_SQLTUNE advisor

Tuning task results for top workload SQL (EE only).

CATEGORY 04

## Security & Privilege Audit

Privileged user inventory, default passwords, audit trail health, role proliferation, and public grants.

SE / SE2 EE RAC
13 checks
SEC01 DBA-privileged users

All users with DBA role or ANY system privilege.

SEC02 Default password accounts

Oracle-supplied accounts that retain default credentials.

SEC03 Audit trail status

Audit trail enabled, trail size, and cleanup schedule.

SEC04 Excessive PUBLIC grants

Sensitive privileges granted to PUBLIC role.

SEC05 Password profile compliance

UNLIMITED password lifetime and no complexity check profiles.

SEC06 Role proliferation

Custom roles with excessive privilege counts.

VAULT

## Vault — Security Posture & Resilience

Scored 0–100. PDF + XLSX export.

SE / SE2 EE RAC
13 checks
Default password detection

DBA_USERS_WITH_DEFPWD — Oracle-supplied accounts retaining factory credentials.

Privilege escalation surface

ANY grants, ADMIN OPTION holders, and EXECUTE on powerful packages (DBMS_JAVA, DBMS_SQL, UTL_FILE).

Dangerous PUBLIC grants

UTL_FILE, DBMS_JAVA, DBMS_SCHEDULER, and other high-risk packages granted to PUBLIC role.

Security init parameters

remote_os_authent, o7_dictionary_accessibility, utl_file_dir, remote_login_passwordfile, and 7 more V$PARAMETER security settings.

Password policy

DEFAULT profile verify function and expiry settings — unlimited lifetime profiles flagged.

Audit trail configuration

audit_trail parameter, unified audit status, and DDL logging coverage.

TDE encryption status

Wallet open/closed state and unencrypted non-system tablespaces. Advisory — no pass/fail.

Account hygiene

No-authentication accounts, DBA privilege sprawl, and open user inventory.

RMAN backup currency

Last backup age vs 24h threshold — warn at 24h, critical at 48h.

Data Guard lag

Apply lag vs 60s/300s thresholds. Advisory when no standby is configured.

FRA headroom

V$RECOVERY_FILE_DEST usage percentage — warn at 70%, critical at 85%.

Redo log health

Single-member redo log groups and INVALID/STALE members flagged for remediation.

CVE exposure

Missing Oracle CPU patches mapped by CVSS score against the quarterly patch index.

CATEGORY 05

## RMAN Backup Health

Backup job success rate, archive log gap, last successful full backup age, and RMAN catalog status.

SE / SE2 EE RAC
8 checks
BK01 Last full backup age

Hours since last successful full or level-0 incremental backup.

BK02 Backup failure rate

Failed vs. completed backup jobs over the last 7 days.

BK03 Archivelog generation rate

Archivelog volume per hour and retention gap.

BK04 FRA utilization

Fast Recovery Area space used vs. allocated.

BK05 RMAN catalog connectivity

Recovery catalog accessible and metadata current.

BK06 Backup duration trend

Backup window growth over 30 days — catches silent expansion.

CATEGORY 06

## Memory: SGA & PGA

SGA component sizes, shared pool fragmentation, PGA target adherence, and overallocation indicators.

SE / SE2 EE RAC
9 checks
MEM01 SGA breakdown

Shared pool, buffer cache, redo buffer sizes vs. totals.

MEM02 Shared pool fragmentation

Free chunk count and largest contiguous free chunk ratio.

MEM03 PGA target adherence

Actual PGA usage vs. PGA_AGGREGATE_TARGET.

MEM04 Memory advisor

DBMS_ADVISOR memory recommendations for SGA/PGA tuning.

MEM05 Large pool utilization

Large pool usage and ORA-4031 risk indicator.

MEM06 Java pool pressure

Java pool used vs. allocated (EBS and Java-heavy workloads).

CATEGORY 07

## Sessions & Locking

Active session inventory, blocking lock chains, long-running queries, and deadlock history.

SE / SE2 EE RAC
8 checks
LK01 Active blocking sessions

Lock chain depth, blocked session count, waiter SQL.

LK02 Long-running operations

Sessions with estimated completion time and percent done.

LK03 Deadlock frequency

ORA-00060 events in alert log over rolling 7 days.

LK04 Session limit utilization

Active vs. max sessions and processes parameter headroom.

CATEGORY 08

## Index Health

Unusable indexes, stale statistics, invisible indexes, and index fragmentation candidates.

SE / SE2 EE RAC
7 checks
IDX01 Unusable indexes

Indexes with UNUSABLE status requiring rebuild.

IDX02 Stale statistics

Tables with row churn > 10% since last analyze.

IDX03 Invisible indexes

INVISIBLE indexes not visible to the optimizer.

IDX04 Index fragmentation

Indexes with BLKS_GETS_PER_ACCESS ratio indicating need for coalesce.

CATEGORY 09

## ADDM & AWR Diagnostics

Automatic Diagnostic Database Monitor findings, workload repository snapshots, and ADDM task recommendations.

EE only Diagnostics Pack required
6 checks
ADDM01 Top ADDM findings

Most impactful ADDM task recommendations from recent period.

ADDM02 SQL consuming top DB time

AWR top SQL by DB time contribution from last snapshot pair.

ADDM03 Segment I/O hotspots

Top segments by physical reads from AWR.

ADDM04 AWR snapshot lag

Hours since last successful AWR snapshot — alerts on collection gaps.

CATEGORIES 10 – 15

## Housekeeping, Parameters, Objects & More

Auto optimizer stats tasks, SQL Tuning Advisor status, invalid objects, network latency, key parameter review, and OS-level resource indicators.

SE / SE2 EE RAC
14+ checks
HK01 Auto optimizer stats task

DBMS_STATS auto gather job status and last run time.

HK02 SQL Tuning Advisor status

Automatic STA task completion, recommendations count.

OBJ01 Invalid objects

Compiled invalid procedures, packages, triggers, views.

OBJ02 Disabled constraints

Foreign key and check constraints left disabled after load.

PAR01 Key parameter review

35 parameters reviewed: memory, security, undo, performance groups.

OS01 OS resource indicators

CPU, memory, swap, disk I/O signals from V$ views (proxy mode).

PLATFORM FEATURE

## Autonomous Monitoring & Email Alerts

Schedule health checks on a cadence (hourly, daily, weekly) and receive email alerts the moment new critical or warning findings are detected. Delta-aware logic suppresses noise — you only get alerted when the finding is new or changes severity, not on every run.

All editions EBS
Live shipped
MON01 Scheduled health checks

Configure cadence per connection: every N minutes, daily, or weekly. Runs automatically in the background.

MON02 Delta-aware alerting

Compares each run against prior findings. Alerts only on new or worsened findings — no duplicate noise on stable issues.

MON03 Email notifications

Configurable alert email per connection. Severity threshold filter: alert on CRITICAL only, or include WARNING findings.

MON04 Snooze control

Snooze alerts per connection for a defined window. Useful during planned maintenance windows.

MON05 Finding history

Per-check finding history across runs: first_seen, last_seen, resolved_at. Track when issues first appeared and when they cleared.

MON06 Fleet overview

Dashboard showing latest health score and alert status across all monitored connections at a glance.

EBS LAYER

## Oracle E-Business Suite

51 dedicated checks activate automatically when TuneVault detects an EBS environment. Non-EBS databases see none of these.

Auto-detected at connection time. TuneVault queries `APPS.DUAL` — if it resolves, EBS checks activate in your report. No flag to set, no separate connection.

#### Concurrent Managers CM01–CM10 · 12 checks

Manager status, load, request backlogs, and long-running requests.

- CM01ICM (Internal Concurrent Manager) status
- CM02Standard Manager load and request queue
- CM03Long-running concurrent requests (>1h)
- CM05CM running/inactive worker ratio
- CM06Output Post Processor (OPP) status
- CM09Concurrent request error rate (last 24h)
- CM10Completed-with-warning request inventory

#### Workflow & Mailer WF01–WF09 · 13 checks

Workflow agent status, error log depth, notification backlog, and purgeable items.

- WF01Workflow agent status (Java/background)
- WF02Workflow error log depth
- WF03Deferred queue depth
- WF07Notification mailer status
- WF08Purgeable workflow items
- WF09Notification backlog (unread >7 days)

#### EBS Security FB01–FB04 · 7 checks

Sign-on audit anomalies, sysadmin users, and password policy compliance.

- FB01Sign-on audit log anomalies
- FB03SYSADMIN-level user inventory
- FB04Password policy — complexity and expiry

#### ADOP & App Tier SC/OT/CD · 19 checks

ADOP session health, OACore services, Forms availability, and app-tier observability.

- SC12ADOP patch session status
- SC14Abandoned ADOP sessions
- OT05OACore connection pool health
- CD07Forms server process status

🖥️

### Self-Hosted — No Data Leaves Your Network

TuneVault runs entirely inside your own datacenter on Oracle Linux 8 or RHEL. Every health check, AI analysis, and EBS operation stays within your network. Install in 15 minutes with a single command. Ideal for banks, government, and regulated industries with strict data residency requirements.

Download Self-Hosted →
🛡️
Safe for production Oracle environments
Outbound-only HTTPS agent · No inbound ports opened on your server · AES-256 encrypted credentials · Command allowlist enforced on-agent · Every EBS control action audit-logged
Security review →

## See the checks in action.

See a real Oracle diagnostic report — anonymized data from a representative deployment. No sign-up, no credentials.

View Sample Report → Connect Your Database →