Editorial photograph of an Oracle LMS audit script review with output traces on screen and a buyer side worksheet next to a coffee cup
Article · Oracle · Audit Defense

Oracle LMS script. What it reads.

The Oracle LMS Collection Tool runs across the estate and returns a fingerprint of every database. It captures option usage, named user counts, partitioning evidence, and Java traces. Read the script before submission.

Read the Article Audit Defense Guide
LMSCollection Tool
4Audit lines
65%Settlements
48hReview window
Industry Recognized
500+ Enterprise Clients
$2B+ Under Advisory
11 Vendor Practices
100% Buyer Side Independent
Key Takeaways

What this article delivers

  • The LMS script is a fingerprint. It reads option usage, named users, partitioning evidence, and Java installs.
  • Oracle reads the script first. The audit narrative is built from the script output, not the contract.
  • Buyer side can run the script in advance. Pre review catches purge candidates before submission.
  • Five options drive most findings. Partitioning, Advanced Compression, Diagnostics, Tuning, Lifecycle Management.
  • VMware partitioning is a separate audit line. The script supports the case, the contract resolves it.
  • Java SE detection runs on file system traces. Document the OpenJDK migration before submission.
  • Forty eight hours of pre review pays for the audit defense. The cover narrative shapes the rest of the engagement.

The Oracle LMS Collection Tool is the data gathering script set used in Oracle audits. The output is a database by database fingerprint that drives the audit narrative. The buyer side that reads the script before submission writes a defensible cover.

This article walks through what the script captures, what each output line means, and what the buyer side does in the forty eight hours before submission.

What the LMS script captures

The LMS package is several scripts run in sequence. Each script returns a different set of rows. The output bundle is a complete audit picture of the estate.

Database feature use

The script reads DBA_FEATURE_USAGE_STATISTICS. The table records every option and feature that has ever been activated. A single use within the prior twelve months returns a current usage flag.

Option pack tracking

The script reads the option pack tables and the management pack tables. Each pack returns a usage and a last used date. The output reveals which packs the database has touched.

Named user lists

The script reads DBA_USERS and the role assignments. The output is the full account list including disabled accounts and integration service accounts.

License view data

The script reads V$LICENSE. The view records the maximum concurrent sessions, the high water mark, and the named user count if set at the database parameter level.

  • DBA_FEATURE_USAGE_STATISTICS. Captures every option activation since database creation.
  • Option pack tables. Returns the option pack and management pack usage flag.
  • DBA_USERS. Returns the full account list including disabled and service accounts.
  • V$LICENSE. Returns the concurrent session high water mark and the named user count.
  • Operating system data. Returns processor model and physical core count for the host.

Option usage signals

Database options drive the largest audit findings. The script captures every option activation in DBA_FEATURE_USAGE_STATISTICS. Five options carry the most weight.

Partitioning

Partitioning activates on table creation with the PARTITION BY clause. The activation is permanent in the feature usage table even if the partition is later dropped. The script returns the activation date.

Advanced Compression

Advanced Compression activates with OLTP compression, basic table compression beyond direct load, or RMAN compression beyond basic. The script captures each activation type.

Diagnostics Pack

Diagnostics Pack covers AWR, ADDM, and ASH. AWR snapshots run by default in Enterprise Edition. The Diagnostics Pack license is required to read or use the snapshots.

Tuning Pack

Tuning Pack covers SQL Tuning Advisor, SQL Access Advisor, and the SQL Profile feature. Activation triggers from explicit advisor calls or implicit calls from Enterprise Manager.

Database Lifecycle Management Pack

The Lifecycle Management Pack covers patching, provisioning, and configuration management features in Enterprise Manager. Activation triggers from a single use of a managed patch or a configuration job.

Partitioning evidence beyond the database

The VMware partitioning audit line is the largest single exposure in many Oracle audits. The LMS script supports the position but does not resolve it.

Soft partitioning rule

Oracle defines VMware, KVM, Hyper V, and most server virtualization as soft partitioning. Soft partitioning requires licensing every physical core on every host in the cluster that could host an Oracle VM.

Hard partitioning exceptions

Oracle accepts a short list of technologies as hard partitioning. The accepted list includes Oracle VM Server with pinned vCPUs, Solaris zones with capped CPU resource pools, and IBM LPARs with capped resource limits.

Approved sub capacity rules

Oracle Cloud Infrastructure and Oracle Cloud at Customer accept OCPU based licensing. The OCPU rate equates to two vCPUs for non Oracle Linux and one vCPU for Oracle Linux.

VirtualizationOracle classificationLicensing requiredBuyer side counter
VMware vSphereSoft partitioningAll physical cores on clusterIsolate Oracle to a dedicated cluster
Oracle VM Server pinned vCPUsHard partitioningPinned vCPUs onlyDocument the affinity config
IBM LPAR cappedHard partitioningCapped LPAR cores onlyCapture the LPAR profile
Solaris zones cappedHard partitioningCapped resource pool coresConfirm the resource cap
OCI ComputeSub capacity by OCPUOCPU countOCPU matches contract

Named user counts

The script returns the full account list. The audit counts active and disabled accounts. The buyer side cleanup before submission closes most of the gap.

Service account inclusion

Service accounts used by integrations, batch jobs, and replication count as named users. A cleanup before the script run removes orphaned service accounts and reduces the count.

Multiplexing rule

The named user count includes every human and machine that connects directly or indirectly to the database. Application pooling does not reduce the count. The end users behind the pool count.

Named User Plus minimum

Named User Plus carries a minimum of twenty five users per processor on EE and ten per processor on SE2. The audit finding floors at the minimum even if the actual count is lower.

Java SE detection

Oracle Java SE moved to the Employee metric in January 2023. The audit detection runs through a separate script. The exposure can dwarf the database exposure.

JCST script behavior

The JavaOne Compliance Script Tool walks file paths, package managers, and installation registry entries. It returns every Oracle Java SE install on every audited host.

Employee metric scope

The Employee metric counts the global employee count plus contractors regardless of who uses Java. A single production Oracle Java SE installation triggers the metric across the entire workforce.

OpenJDK migration evidence

The buyer side counter is OpenJDK migration with documented timestamps. Eclipse Temurin, Amazon Corretto, and Azul Zulu are the common targets. The cover note ties the disable timeline to the audit window.

Pre submission review

The forty eight hour pre submission review is the highest impact engagement window in any Oracle audit. The buyer side runs the script in a sandbox and reads the output before Oracle does.

The first script run

Run the LMS scripts in a controlled environment. Capture the full output. Compare against the licensed entitlement.

The option usage trace

Identify each option usage event. For each event capture the date, the database, and the disable status. Build the timeline of activation and disable.

The cover narrative

Write the cover narrative before submission. The narrative names the legitimate use cases, the non material activations, and the rectification evidence. The narrative ships with the script output.

Oracle audit pre submission review with LMS script output, option trace timelines, and cover narrative draft on a desk
Across seventy four Oracle audit engagements the pre submission review reduces the initial Oracle finding by a median of sixty two percent.

What to do next

The checklist takes the customer from receipt of the Oracle audit letter to a submitted package that holds up under audit review. The earlier the work starts the wider the option set.

  1. Acknowledge the letter. Acknowledge receipt but do not commit to a script run window.
  2. Engage independent counsel. The buyer side audit team works alongside counsel from day one.
  3. Run the LMS script in a sandbox. Capture the output without releasing it to Oracle.
  4. Trace every option activation. Build the timeline and the disable record.
  5. Cleanse the user base. Remove orphaned and disabled accounts.
  6. Document the Java SE position. Capture OpenJDK migration evidence.
  7. Write the cover narrative. The narrative shapes the audit conversation.
  8. Submit with Vendor Shield review. Independent buyer side review at every gate.

Frequently asked questions

What is the Oracle LMS Collection Tool?

The Oracle License Management Services Collection Tool is the official audit data gathering script set. It includes SQL scripts that read DBA_FEATURE_USAGE_STATISTICS, DBA_USERS, V$LICENSE, and the option pack tables. It also includes operating system scripts that read processor data and Java install paths. The output is a fingerprint of every database covered by the audit.

Does Oracle have the right to run the LMS script in production?

Oracle contracts typically allow the LMS team to request the script output. The customer runs the script and submits the output. The customer is not required to grant Oracle direct access to the production database. Independent counsel reviews the exact wording in each order document.

Can the buyer side run the LMS script in advance?

Yes. The LMS script is technically available to any DBA with the right privileges. Running it in advance lets the buyer side read what Oracle will read. The pre review catches option usage that an option purge can resolve before submission.

Which database options trigger the largest audit findings?

The high impact options are Partitioning, Advanced Compression, Diagnostics Pack, Tuning Pack, and Database Lifecycle Management Pack. These options enable through a parameter or a feature use. The script captures the feature use trace in DBA_FEATURE_USAGE_STATISTICS. A single enable event creates a finding.

Does the script capture partitioning across VMware?

The script captures partitioning option usage within the database. The VMware partitioning question is separate. Oracle counts every physical core on the cluster that could host an Oracle database VM. The cluster wide count drives the partitioning audit line. The script supports the case but does not resolve it.

How does Oracle detect Java SE Universal Subscription exposure?

Oracle uses the JCST script and JavaOne data. The script walks file paths and inventory tables to find Oracle Java installations. The Employee metric applies if any production Java SE is in scope. The buyer side response is OpenJDK migration evidence or a defensible counter on the Employee count.

How long does the pre submission review take?

An independent pre submission review takes about forty eight hours for a typical estate. The review runs the script in a sandbox, reads the output, identifies the option usage to purge, and writes the cover narrative. The time is well spent against the audit cost.

What happens if the script output shows out of scope deployment?

Out of scope deployment becomes an audit finding. The buyer side counter cases include a clarifying statement on the script, evidence of the disable timeline, and the run rate calculation. Most findings settle through a contract revision rather than a back fee.

How Redress engages

Redress runs this practice inside the Vendor Shield subscription, the Renewal Program, the Oracle Hub, and the Software Spend Assessment. Independent buyer side advisory means no vendor partner conflicts and no resale margin.

Related reading: the benchmarking service, the Benchmark Program, the case studies, the white paper library, the blog, and the news room.

Score the overall software spend with the Software spend health check.
Open the Tool →
White Paper · Oracle

Download the Oracle Audit Defense Guide.

The companion guide covers the LMS audit motion, the buyer side counter cases, and the settlement math from contract receipt to written close.

Independent. Written for CIOs, CFOs, and procurement leaders. No vendor partner affiliation.

Oracle Audit Defense Guide.

Open the playbook in your browser. Corporate email only.

Open the Paper →
LMS
Collection Tool
4
Audit lines
90d
Response window
65%
Settlement rate
48h
Pre review

The LMS script tells Oracle what is enabled. The audit team reads the script first and the contract second. The buyer side that reads the script before submission writes a different narrative than the one Oracle drafts.

Independent Oracle audit defense lead
Seventy four Oracle audit engagements completed since 2014
More Reading

More from this practice.

Oracle Hub →
Oracle Audit Defense Guide
Oracle · Audit
Oracle Audit Defense Guide
Inside the LMS playbook.
18 min read
Oracle Licensing Calculator
Oracle · Cost
Oracle Licensing Calculator
Twenty input cost model.
21 min read
Oracle CIO Playbook
Oracle · Pillar
Oracle CIO Playbook
CIO playbook for Oracle estates.
22 min read
Oracle Audit Defense Service
Oracle · Service
Oracle Audit Defense Service
Independent buyer side audit team.
9 min read
Oracle Hub
Oracle · Hub
Oracle Licensing Knowledge Hub
All Oracle research in one place.
9 min read
Boardroom photograph of an Oracle audit defense review with CIO and counsel

Read the script. Then submit.

Independent audit defense reviews the LMS script output before submission. Vendor Shield subscribers run the script on a forty eight hour cycle ahead of every audit submission.

Buyer side intelligence, monthly.

Cost benchmarks, license rightsizing patterns, and the negotiation moves that worked. Written for buyer side teams running active vendor decisions.