This module connected logical data movement, archived redo protection, corruption handling, change investigation, and backup reporting. Together, these capabilities help an administrator answer a practical question: what evidence supports the recovery plan for this database? A completed job, an archive filename, and a successful query each answer part of that question. A dependable plan brings those observations together and tests the result against the application's requirements.
Oracle AI Database 26ai provides different tools for different tasks. Data Pump moves selected objects and data. RMAN manages physical backups and recovery. Archive destinations preserve redo outside online log reuse. LogMiner helps investigate recorded changes. SQL views and RMAN reports make the associated metadata visible. Choose the tool from the required outcome, then define how that outcome will be checked.
Use the following review map to revisit an individual lesson. Each learning outcome includes the evidence needed to distinguish a configured feature from a usable operational process.
| Lesson | Learning outcome | Evidence to retain |
|---|---|---|
| 1. Backup and recovery in OCI | Separate logical transfer from physical recovery and identify the service's supported workflow. | Source and target identities, service requirements, and acceptance criteria. |
| 2. Data Pump export and import | Plan a consistent export, prepare its destination, and verify the imported application data. | Parameters, complete dump set, job logs, and reconciliation results. |
| 3. Multiple archive destinations | Configure an appropriate archive policy and verify matching redo copies. | Destination settings, errors, redo identities, and storage checks. |
| 4. Corrupted blocks | Diagnose damage and distinguish recovery from salvage. | Affected files and blocks, selected response, and post-recovery checks. |
| 5. LogMiner | Investigate a bounded change interval and interpret transaction evidence. | Redo coverage, dictionary choice, transaction context, and limitations. |
| 6. Backup lists and reports | Inventory recorded objects and evaluate backup requirements. | Database scope, report criteria, output, and follow-up findings. |
| 7. Backup sets and copies | Explain physical pieces, image copies, and retention assessments. | File coverage, accessibility findings, and policy-specific conclusions. |
| 8. Recovery metadata views | Use SQL to inspect jobs, pieces, archived redo, and repository history. | Query source, container scope, observation time, and verification results. |
The opening lessons established the role of expdp and impdp. A Data Pump job can select tables, schemas, and rows for a migration, validation environment, or controlled logical recovery. The export's scope determines what the dump can supply later. An export containing selected products cannot recover orders that were never included.
Plan the source PDB, destination PDB, object selection, and consistency boundary together. A parameter such as QUERY filters rows; it does not automatically include every related parent or child record. A flashback export boundary helps define a consistent point, subject to the necessary undo and privileges. Changes made afterward still require a cutover or reconciliation strategy.
For filesystem jobs, a Data Pump directory object identifies server-side storage. The client parameter file and database dump location have different roles. OCI services can offer supported Object Storage procedures, but their access and storage rules must be checked for the actual service. Keep all dump members and the job logs, and verify transferred files before relying on them.
Import into a prepared validation destination first. Review generated DDL where appropriate, investigate failed objects, and compare meaningful keys, values, relationships, and business totals. Matching row counts are useful but incomplete evidence. A filtered dataset can also need different optimizer statistics from its source; review representative application queries after import.
A tested logical copy complements the physical recovery plan. Database-file loss still calls for the relevant RMAN or managed-service recovery procedure, with its control-file, configuration, backup, and redo dependencies. Keep these two acceptance questions explicit: can the selected application content be imported, and can the database be restored to the required recovery point?
Shell export assigns environment variables; it does not configure Oracle archive destinations. Data Pump export creates logical dump files and does not direct archived redo to multiple locations. For an administrator-managed database, the numbered LOG_ARCHIVE_DEST_n parameters and their states define the archive destinations through the supported database configuration procedure.
Lesson 3 demonstrated two local destinations using reviewed ALTER SYSTEM statements. Before applying such a configuration, identify unused destination slots, accessible storage, the container and instance context, persistence requirements, and the existing recovery policy. A replacement parameter string can remove attributes that were already serving a standby or another protection requirement.
Multiple archive destinations and multiplexed online redo are separate protections. Online members belong to redo groups used by LGWR. Archived copies preserve redo after a group is archived. Adding an online member does not create a second archive destination. Likewise, two archive paths on the same failing storage system do not provide independent protection against that failure.
Destination numbering alone does not establish a primary-first, fallback-second policy. Destination attributes, states, mandatory requirements, and the minimum-success setting determine log-reuse behavior. A requirement for both local copies improves protection against losing one copy, but an unavailable required destination can eventually prevent further log reuse. Document this availability consequence before changing the policy.
Verification must connect configuration to actual archived redo. Compare the intended destinations for the same resetlogs identity, thread, and sequence; investigate destination errors and check the files through approved storage procedures. Repeated rows in a control-file view are not sufficient by themselves. Also monitor capacity so that the protection continues after the initial demonstration.
A corruption incident needs a recorded scope before a repair decision. Preserve the error stack, database and container identity, file and block information, diagnostic output, and the application operation that failed. Use suitable validation to investigate the affected files and assess whether the damage extends beyond the first reported block.
Physical block corruption, logical block inconsistency, and a valid but mistaken business update are different problems. A block can pass structural checks while holding an incorrect salary entered by a valid transaction. Conversely, a storage fault can prevent reading otherwise legitimate business data. The distinction helps select a recovery method and the appropriate acceptance checks.
RMAN block media recovery can recover a bounded set of damaged blocks when a supported good-block source and the required archived redo are available. Widespread or uncertain damage may need a broader restore plan. An index rebuild can address appropriate index damage when the underlying data is healthy, but cannot manufacture missing table rows.
After recovery, repeat the relevant validation and application checks. Explain any remaining damage or missing data. A report that runs again is useful evidence of availability; reconciliation establishes whether its business content is complete enough for the intended use. Retain the before-and-after results with the incident record.
The reference image below summarizes seven package procedures. Its central distinction remains important in Oracle 26ai: CHECK_OBJECT identifies corruption, FIX_CORRUPT_BLOCKS marks affected blocks software corrupt, and SKIP_CORRUPT_BLOCKS controls skipping during supported scans. Marking or skipping a block does not reconstruct its lost rows.
Assess the actual object and access path before using a salvage procedure. Support and limitations differ for LOB data, index-organized tables, index types, and particular package operations. A successful scan can omit marked blocks and return an incomplete dataset. Review the Oracle 26ai DBMS_REPAIR reference and the detailed corruption lesson before planning those operations.
When complete recovery is unavailable, salvage becomes a business decision about accepted loss. Preserve the damaged evidence, identify a trusted source for reconstruction where possible, and reconcile related records. Rehearse the replacement dataset before returning it to service. Record unresolved gaps explicitly so later users do not mistake accessible data for a complete historical record.
LogMiner provides evidence from supported redo for a defined investigation. Start with the affected database, PDB, objects, and interval, then confirm redo coverage and an appropriate dictionary. Logging choices made before the event affect what can be reconstructed; enabling additional logging afterward cannot restore information missing from earlier redo.
Preserve transaction identity and continuation information with reconstructed SQL. A row-level filter can locate a symptom while excluding other changes in the same transaction. Expand the investigation when dependencies require it, and report missing logs, unsupported operations, or uncertain interpretation. A database username may identify an application account rather than one person.
Unified Auditing and application records supply complementary context, including activities that redo mining does not establish. Do not interpret an empty mining result as proof that nobody accessed the data. Similarly, reconstructed SQL_UNDO is evidence for planning a correction, not an automatically safe rollback script. Later legitimate work and related business records must be considered.
For example, discovering the transaction that doubled a salary is only the investigative result. The recovery decision must account for subsequent authorized changes and payroll processing. Test the proposed correction against an appropriate copy, compare its effects with the business requirement, and obtain the necessary operational authorization before applying it.
Lessons 6 and 7 distinguished inventory from assessment. RMAN LIST shows recorded backups, pieces, copies, and related objects. REPORT evaluates repository information against a question such as backup need or retention. A backup set can contain several physical pieces; counting those pieces does not establish an equal number of independent backups.
The following illustrative sequence collects a compact review in an already authorized RMAN session. Record the target, container, repository source, and execution time with its output. These commands are RMAN commands, rather than SQL statements.
SHOW ALL;
REPORT SCHEMA;
LIST INCARNATION;
LIST BACKUP SUMMARY;
LIST BACKUP OF DATABASE;
LIST BACKUP OF ARCHIVELOG ALL;
LIST BACKUP OF CONTROLFILE;
LIST COPY OF DATABASE;
REPORT NEED BACKUP;
REPORT OBSOLETE;
REPORT UNRECOVERABLE DATABASE;
Review configuration first because unqualified policy-dependent reports rely on it. Keep command errors in the record; an error is not an empty, successful report. Use detailed or file-oriented listings when a summary leaves uncertainty about which datafiles a job protected. A tag helps locate output but does not prove its scope.
Keep three findings separate. Obsolete is a conclusion under a retention criterion. Expired describes repository status after an accessibility check. Unrecoverable operations identify files needing suitable protection after changes that cannot be reproduced from sufficient redo. They require different follow-up actions.
A recovery window is not a simple age-based deletion rule. Older backups can remain necessary to reach a point within the window. Likewise, a redundancy requirement is evaluated against file protection rather than the number of job names in a directory. Reports should state the criterion used, and cleanup should follow a separately reviewed maintenance procedure.
Lesson 8 added SQL reporting through dynamic performance views. Recent job status appears in V$RMAN_BACKUP_JOB_DETAILS; sets, physical pieces, and their contents have separate views. Archived redo records include thread, sequence, and incarnation context. Use explicit columns and filters, and state whether the report covers the root, a PDB, or the intended database-wide scope.
Repository records describe what Oracle knows. They can outlive a file removed outside RMAN, or disappear from reusable control-file history while a physical backup remains elsewhere. Recovery catalog history offers additional reporting possibilities but depends on synchronization and maintenance. Neither an available flag nor a positive archived-log backup count proves that a complete recovery chain can be read now.
Choose the next check according to the uncertainty. CROSSCHECK reconciles accessibility and updates repository status. Validation reads the selected material. A restore and recovery rehearsal exercises a broader procedure, including storage access, required keys, recovery inputs, and application acceptance. Save each result with its scope instead of collapsing all of them into a single claim that backups are good.
Consider a sales application with a nightly physical backup, several archive destinations, and a periodic Data Pump export for selected reference tables. One morning a storage error interrupts an order report. Start by recording the failure and determining whether the problem is block damage, a missing file, or incorrect business data. The existence of all three protection mechanisms does not choose the response automatically.
If the evidence identifies a small physical block problem, assess a supported block recovery and its inputs. If the evidence instead identifies an unwanted committed update, use the relevant transaction and application records to plan a logical correction. If a logical export supplies useful reference data, compare its snapshot and selection with the recovery requirement before importing anything.
In the rehearsal environment, define the expected recovery point and acceptable completion time. Verify access to the required backup pieces and archived redo, execute the selected procedure, and record the actual elapsed time and outcome. Then repeat meaningful business operations and reconcile representative totals and relationships. Technical completion and application acceptance belong in the same recovery record.
Finish by identifying the gap the rehearsal revealed and assigning a corrective action. A missing archive interval needs a different response from an expired repository entry caused by temporary storage disconnection. Repeat the relevant check after correction. This closes the review with evidence another administrator can use during a later incident.
Before taking the quiz, explain why an export does not configure archiving, why two archive records need matching redo identities, why skipping corruption can lose rows, and why a successful backup listing does not demonstrate recovery. Then describe which evidence you would collect for one physical corruption incident and one unwanted business update. Use the lesson links above wherever the distinction remains unclear.
The next module explores Enterprise Manager for backup and recovery. Its interface changes how operations are submitted and monitored; the need to verify the target, protection policy, recovery inputs, and final outcome remains the same.
Use the Data Dictionary Recovery Views Quiz to review the module's terminology and reporting concepts.