User SYS logged on from xxxxxxxx.
Hello,
I am running Oracle Database 12c SE2 and OEM 12c on Windows. I get alerts from OEM about user SYS being logged on. I understand why I get the alerts when I connect as SYS remotely from my PC or when I connect as SYS from OEM. However, I get an alert in the evening at 10 PM almost every night that I cannot explain. Here is an example:
Host=dbserver.mysite.com
Target type=Database Instance
Target name=IDMAKER_dbserver.mysite.com
Categories=Security
Message=User SYS logged on from dbserver.
Severity=Warning
Event reported time=Apr 12, 2016 10:00:33 PM EDT