How to Monitor an Oracle PDB Without Using the CDB (4378959)

This article explains how to monitor an Oracle Pluggable Database (PDB) directly in Foglight, without requiring access to the Container Database (CDB).

When attempting to add a PDB directly, users may encounter the following error:

"Monitoring Oracle 12c is only supported if using a common user and connection details that log in to CDB$ROOT container. The connection details entered are unsuitable."

Note: The term "Oracle 12c" in this message applies to all Oracle versions 12c and higher.

Cause 1: User Not Scoped to the PDB

The monitoring user was not created while connected directly to the PDB. To monitor a PDB independently, the user must be created within the PDB context.

Cause 2: Outdated Privileges Script

An older version of the grant privileges script was used (pre-7.3.2.11), which lacks the necessary permissions for PDB-only monitoring.

Requirements

• Foglight Oracle cartridge version 7.3.2.11 or higher
• A user created within the PDB, not the CDB

Steps to Monitor a PDB

Connect to the PDB

Assuming your PDB is named ORCLPDB1, and you are using a SQL query utility like Toad or SQL*Plus, connect using the Admin account directly to the PDB 

sqlplus sys@ORCLPDB1 as sysdba

Create a Local User

CREATE USER my_newuser IDENTIFIED BY my_password;

Grant required privileges

GRANT CREATE SESSION TO my_newuser;
GRANT CONNECT TO my_newuser;

Creating the Oracle agent

1. Go to Databases > Monitor > Oracle
2. Enter the PDB service name or SID
3. Use the PDB-local user credentials
4. Complete the remaining fields (OS platform, SQL PI, listener, etc.)
   
5. Click the Monitor button
6. Grant Additional Privileges (if prompted)
   Use the SYSDBA account temporarily or Download and run the updated grant privileges script from the popup
   
7. When the confirmation popup appears, click the Add Another or Close button.

The new agent should be created in the dashboard and populated in a moment.

Important Notes

• • The user must be created while connected to the PDB to ensure it is scoped correctly.
  • PDB-local users cannot access other PDBs or the CDB unless explicitly created there.
  • If the CDB is already monitored, the PDB cannot be monitored separately.
  • PDB monitoring is intended for environments where CDB access is restricted (e.g., Oracle RDS).
  • Always use the latest grant privileges script from version 7.3.2.11 or higher.

   

STATUS

• Enhancement ID: FOG-10986
• Purpose: Improve error messaging when adding PDB agents
• Current behavior is by design; improvements are under consideration