Oracle Audit records and Splunk

From: John Jones <john.jones_at_duke.edu>
Date: Wed, 18 Nov 2015 20:51:03 +0000
Message-ID: <DM2PR0501MB140863EA70CA7BA592581D58EF1C0_at_DM2PR0501MB1408.namprd05.prod.outlook.com>

Is there any one out there using Splunk to look at your Oracle Audit logs.

We are trying to set this up and running into problems with the way that Oracle writes the audit files in different formats. We are mostly looking at tracking Oracle Logins and notice that the format of the audit record can change depending on the error encountered.

Any pointers or suggestions are welcome.

John Jones

--
http://www.freelists.org/webpage/oracle-l

Received on Wed Nov 18 2015 - 21:51:03 CET