The SAP ECC 6.0 EHP8 Management Cockpit is a web-based dashboard for monitoring and operating the SAP ECC IDES demonstration environment hosted on sapidesecc8.fivetran-internal-sales.com. This system runs on an Oracle 19c database, unlike the S/4HANA environment which uses HANA.
From a single page you can:
https://sapidesecc8.fivetran-internal-sales.com/sap_skills/docs/SAP_ECC6_EHP8.html
The Server Details card displays static and dynamic information about the SAP server:
| Field | Description |
|---|---|
| Hostname | Server hostname: sapidesecc8.fivetran-internal-sales.com. Includes an SSH button that auto-copies the root password from the vault to your clipboard. |
| SAP System | SAP ECC 6.0 EHP8 IDES |
| SID | System ID: ABA |
| Instance Nr | Instance number: 00 |
| Client | SAP client 800 (used for all operations) |
| DB SID | Oracle database SID: ABA |
| Database | Oracle 19c (19.0.0.0.0), retrieved live from the server |
| OPatch Version | Oracle OPatch utility version, retrieved live via the hardware info API |
| MOPatch Version | SAP MOPatch utility version, retrieved live via the hardware info API |
| OS | SUSE Linux Enterprise Server 15 SP5 |
| Private IP | 10.128.15.241 (GCP VPC internal) |
| Public IP | 35.226.121.169 |
| CPUs | 4 vCPUs, retrieved live via nproc |
| Memory | 23 GB RAM, retrieved live via free -g |
Click the Refresh button at the top right of the section to re-query the database version, OPatch/MOPatch versions, CPUs, and memory from the live server.
The Disk Space card appears alongside Server Details and shows all mounted filesystems with visual progress bars. Data is retrieved via the /sap_skills/api/ecc_disk_space endpoint which runs df -h on the server.
| Bar Color | Usage Level | Action |
|---|---|---|
| Green | Below 70% | Normal — no action needed |
| Yellow | 70% – 85% | Monitor — plan cleanup soon |
| Red | Above 85% | Critical — free space immediately |
Each filesystem row shows: mount point, usage percentage bar, total size, and available space. Click Refresh to update the data.
The Status section contains two cards that show the real-time state of the system components. Click Check Status to query both at once.
| Card | What it monitors | Details |
|---|---|---|
| SAP Application Server | SAP NetWeaver ABAP stack | SID ABA, instance 00, user abaadm. Shows process count and kernel version. |
| Oracle Database | Oracle 19c database instance | DB SID ABA, user oraaba. Shows last backup time, next scheduled backup, and live countdown. |
The SAP card monitors the ABAP application server and displays:
sapcontrol -nr 00disp+work -vThe Oracle card monitors the database instance and displays:
sqlplus connectivity check/oracle/ABA/sapbackup/backABA.log.Each card displays a colored dot and status text:
| Indicator | Meaning |
|---|---|
| Green dot + Active | The service is running and responding to queries |
| Red dot + Inactive | The service is down or unreachable |
| Grey dot + Unknown | Status has not been checked yet (page just loaded, waiting for response) |
The ECC system uses SAP BR*Tools (brbackup / brarchive) for Oracle database backups — NOT HANA Backint. The process is two-phase: local disk backup first, then copy to Google Cloud Storage.
| Component | Detail |
|---|---|
| Backup Tooling | SAP BR*Tools (brbackup, brarchive) |
| GCS Bucket | gs://sap-hana-backint/SAP_ON_ORACLE_BACKUP/ |
| Bucket Console | https://console.cloud.google.com/storage/browser/sap-hana-backint |
| Local Backup Dir | /media/oraclebackup |
| Backup Logs | /oracle/ABA/sapbackup/backABA.log |
| Local Retention | Last 6 backups (-n 6 flag) |
Three scheduled jobs run automatically via cron on sapidesecc8:
| Job | Schedule | Script | Purpose |
|---|---|---|---|
| Archive Log Backup | Sundays 06:00 | /usr/local/bin/brarchive_aba.sh | Archives Oracle redo logs to disk |
| Full Database Backup | Sundays 07:00 | /usr/local/bin/brbackup_aba.sh | Offline force full backup to disk, then GCS copy |
| Web Portal Backup | Mon–Fri 23:00 | /usr/local/bin/backup_webserver.sh | Backs up the web portal configuration and files |
0 6 * * 0 /usr/local/bin/brarchive_aba.sh0 7 * * 0 /usr/local/bin/brbackup_aba.sh0 23 * * 1-5 /usr/local/bin/backup_webserver.sh
Performs an offline force backup locally, then copies the output to the GCS bucket:
Key flags: -t offline_force forces an offline backup (SAP is stopped), -d disk backs up to local disk, -m all includes all datafiles, -n 6 keeps 6 backup generations.
Archives Oracle redo logs to disk using the archive log profile:
brarchive runs: archives Oracle redo logs to disk using profile initABA_archlog.sap.brbackup runs: offline_force full backup to /media/oraclebackup, then gsutil copies output to gs://sap-hana-backint/SAP_ON_ORACLE_BACKUP/./oracle/ABA/sapbackup/backABA.log./media/oraclebackup.-n 6 flag ensures only the last 6 backups are kept locally.| Path | Contents |
|---|---|
gs://sap-hana-backint/SAP_ON_ORACLE_BACKUP/ABA/ | Oracle datafile copies |
gs://sap-hana-backint/SAP_ON_ORACLE_BACKUP/b*/ | Individual backup run directories |
/mnt/sap-hana-backint/SAP_ON_ORACLE_BACKUP/brbackup_cron.log/mnt/sap-hana-backint/SAP_ON_ORACLE_BACKUP/brarchive_cron.log
The Oracle Database card includes a Backup Now button to trigger an immediate backup.
The brbackup command executed on the server is the same as the cron script:
brbackup -u / -p /oracle/ABA/sapprof/initABA.sap -d disk -t offline_force -c -m all -n 6
offline_force mode means the Oracle database will be temporarily shut down during the backup (typically 60–90 minutes). SAP ECC is unusable during this time. Plan manual backups during maintenance windows when users are not active on the system.
Download the saporaclebackup skill for full reference: BR*Tools commands, initABA.sap / initABA_archlog.sap profile templates, gcsfuse mount unit, cron schedule, and troubleshooting for ORA-01102 / ORA-28001 / ORA-01017.
Each status card has a green Start button:
| Button | What it does | OS user |
|---|---|---|
| Start SAP | Runs startsap R3 — starts the ABAP application server (ASCS + dialog instance) | abaadm |
| Start DB | Runs sqlplus / as sysdba then STARTUP — starts the Oracle database | oraaba |
A confirmation dialog asks you to confirm before starting. If the service is already running, you will see an informational message instead of starting it again.
Each status card has a red Stop button. Stopping is a two-step authorization process:
| Button | What it does | OS user | Pre-check |
|---|---|---|---|
| Stop SAP | Runs stopsap R3 | abaadm | If SAP is already down, returns info message |
| Stop DB | Runs sqlplus / as sysdba then SHUTDOWN IMMEDIATE | oraaba | If Oracle is already down, returns info message |
The Disk Space card shows all mounted filesystems with visual progress bars. Data is fetched from the /sap_skills/api/ecc_disk_space endpoint which runs df -h on the server.
| Mount | Contains | Why it matters |
|---|---|---|
/oracle/ABA | Oracle database files (datafiles, control files, redo logs) | If full, Oracle stops accepting writes and the database may crash |
/oracle/ABA/sapbackup | Backup logs and metadata | Backup operations fail if insufficient space for logs |
/media/oraclebackup | Local backup destination (brbackup output) | Backups fail if this filesystem is full |
/usr/sap | SAP binaries, profiles, and work files | SAP cannot start or function properly if this is full |
/oracle/ABA/oraarch | Oracle archive logs | If full, Oracle halts all transactions until space is freed |
brarchive may be needed.
The Links section provides quick access to external tools and documentation:
| Link | Description |
|---|---|
| GCP VM Settings | Google Cloud Compute Engine instance details for sapidesecc8 |
| GCP DNS | Google Cloud DNS zone for fivetran-internal-sales.com |
| Slab Technical Details | Slab documentation for the ECC demo environment with detailed technical specifications |
The Server Details card includes an SSH button next to the hostname. Clicking this button:
/sap_skills/api/ecc_ssh_credential endpoint to retrieve the root password from the encrypted vault.You can then open your terminal and connect:
ssh root@sapidesecc8.fivetran-internal-sales.comThe cockpit follows a strict no-hardcoded-passwords policy. All credentials are stored in the encrypted vault on the server and retrieved at runtime.
| Credential | How it's used | Vault access |
|---|---|---|
| SSH root password | Copied to clipboard via SSH button | Auto-read (no master password needed) |
SAP OS user (abaadm) | Start/stop SAP via startsap R3 / stopsap R3 | Auto-read for start; master password required for stop |
Oracle OS user (oraaba) | Start/stop Oracle via sqlplus STARTUP / SHUTDOWN | Auto-read for start; master password required for stop |
| Master password | Required for all stop operations and manual backup triggers | Validates against vault encryption key |
This server is configured to send email via smtp2go relay using Postfix.
| Property | Value |
|---|---|
| MTA | Postfix (SUSE, lmdb maps) |
| Relay | mail.smtp2go.com:2525 |
| From Address | sapidesecc8@fivetran-internal-sales.com |
| Auth | SASL (credentials in vault key smtp2go) |
| TLS | Enabled (opportunistic) |
| Config | /etc/postfix/main.cf, /etc/postfix/sasl_passwd |
Send a test email:
echo "Test" | mailx -s "Test from sapidesecc8" -r "sapidesecc8@fivetran-internal-sales.com" recipient@email.com
| Problem | Cause | Solution |
|---|---|---|
| All status cards show "Error" | API endpoints unreachable or web server down | Check if the sapidesecc8 VM is running in GCP. All API endpoints run locally on this server. |
| SAP shows Inactive but Oracle is Active | SAP application server is stopped while the database is still running | Click "Start SAP" to start the ABAP stack. The database must be running first. |
| Oracle shows Inactive | Oracle database has been shut down or crashed | Click "Start DB" on the Oracle card. Check /oracle/ABA/saptrace/ for Oracle alert logs if it crashed. |
| Backup Now button is disabled | Next scheduled backup is less than 6 hours away | This is the 6-hour safety block. Wait for the scheduled backup to complete, then retry. |
| Backup Now returns "Error" | Oracle instance is down, or brbackup configuration issue | Ensure Oracle is Active first. Check /oracle/ABA/sapbackup/backABA.log for error details. Verify initABA.sap exists at /oracle/ABA/sapprof/. |
| Stop button says "Wrong master password" | Incorrect master password entered | Retry with the correct master password. Contact SAP Specialist team if forgotten. |
| Start/Stop says "Already running" or "Already stopped" | The service is already in the requested state | This is informational — no action needed. Click "Check Status" to confirm current state. |
| Disk Space shows "Error loading" | API endpoint unreachable or server restart needed | Try clicking "Refresh". If persistent, the sap_skills service on sapidesecc8 may need a restart. |
| SSH button does not copy password | Vault read failed or clipboard API blocked by browser | Ensure you are on HTTPS (clipboard API requires secure context). Check browser console for errors. |
| Last backup date is very old | Scheduled backup cron may have stopped or failed | Check crontab -l on sapidesecc8 and review /oracle/ABA/sapbackup/backABA.log for errors. |
| Archive log filesystem full | brarchive has not run or archive logs growing faster than expected | Run brarchive manually as oraaba to clear old archive logs. Check cron schedule (Sundays at 06:00). |
| Page returns 404 | HTML file missing from server | Re-deploy: scp SAP_ECC6_EHP8.html root@sapidesecc8:/usr/sap/sap_skills/docs/ |
The cockpit page is a static HTML file served by the Python HTTPS server on sapidesecc8 (port 443). All dynamic data comes from API endpoints running locally on the same server. Unlike the S/4HANA cockpit, there is no SSH hop to a remote server — all commands (sapcontrol, sqlplus, brbackup) execute directly on sapidesecc8.
| API Endpoint | Method | Purpose | Auth |
|---|---|---|---|
/sap_skills/api/ecc_system_status |
GET | SAP status (sapcontrol -nr 00), Oracle status (sqlplus), kernel version (disp+work -v), last backup (backABA.log), next backup (cron Sunday 07:00) |
None |
/sap_skills/api/ecc_hardware_info |
GET | CPU count (nproc), total memory (free -g), OPatch version, MOPatch version |
None |
/sap_skills/api/ecc_disk_space |
GET | Disk usage for all mounted filesystems (df -h) |
None |
/sap_skills/api/ecc_ssh_credential |
GET | Root password from encrypted vault (auto-decrypt, no master password) | None |
/sap_skills/api/ecc_sap_control |
POST | Start/stop SAP application server (abaadm: startsap R3 / stopsap R3) |
Master password for stop |
/sap_skills/api/ecc_db_control |
POST | Start/stop Oracle database (oraaba: sqlplus STARTUP / SHUTDOWN IMMEDIATE) |
Master password for stop |
/sap_skills/api/ecc_trigger_backup |
POST | Manual brbackup (offline_force). Blocked if next scheduled backup < 6 hours away. |
Master password |
The Oracle SQL Console provides an interactive query interface directly from the cockpit. Queries are executed on the Oracle 19c database via sqlplus on sapidesecc8 (local execution, no SSH).
| Property | Value |
|---|---|
| Tool | sqlplus (via su - abaadm) |
| Execution Host | sapidesecc8 (local) |
| Database SID | ABA |
| Output Format | Pipe-delimited (COLSEP '|') |
| Query Timeout | 120 seconds |
| API Endpoint | POST /sap_skills/api/oracle_sql_execute |
| Authentication | No master password required — credentials retrieved from server-side vault |
| Connect As | Authentication | Default Schema | Vault Key |
|---|---|---|---|
/ as sysdba | OS authentication (no password) | SYS | sapidesecc8_oracle |
| SYSTEM | Password from vault | SYSTEM | sapidesecc8_oracle |
| SAPSR3 | Password from vault | SAPSR3 (SAP application data) | sapidesecc8_oracle |
abaadm via su - abaadm -c "sqlplus ...". The SQL script is written to a temporary file to avoid shell escaping issues, then piped to sqlplus. The temp file is deleted after execution.
/ as sysdba, SYSTEM, or SAPSR3ALTER SESSION SET CURRENT_SCHEMA-- Instance status
SELECT INSTANCE_NAME, STATUS, HOST_NAME FROM V$INSTANCE
-- Database size
SELECT TABLESPACE_NAME, ROUND(SUM(BYTES)/1024/1024/1024, 2) AS SIZE_GB
FROM DBA_DATA_FILES GROUP BY TABLESPACE_NAME ORDER BY SIZE_GB DESC
-- SAP client list (connect as SAPSR3)
SELECT MANDT, MTEXT FROM T000 ORDER BY MANDT
-- Active sessions
SELECT SID, SERIAL#, USERNAME, STATUS, PROGRAM
FROM V$SESSION WHERE USERNAME IS NOT NULL
-- Top 10 largest SAP tables (connect as SAPSR3)
SELECT TABLE_NAME, NUM_ROWS, ROUND(NUM_ROWS * AVG_ROW_LEN / 1024 / 1024, 2) AS SIZE_MB
FROM USER_TABLES ORDER BY NUM_ROWS DESC NULLS LAST
FETCH FIRST 10 ROWS ONLY