Re: Oracle Audit records and Splunk
From: Karth Panchan <keyantech_at_gmail.com>
Date: Wed, 18 Nov 2015 16:10:12 -0500
Message-Id: <93F4C634-D9ED-4711-83A2-83B465584731_at_gmail.com>
In my previous place we wrote Java PL/SQL wrapper on database which was feeding data to Splunk from database. Used to send do metrics,monitoring,health check and application logging.
Date: Wed, 18 Nov 2015 16:10:12 -0500
Message-Id: <93F4C634-D9ED-4711-83A2-83B465584731_at_gmail.com>
In my previous place we wrote Java PL/SQL wrapper on database which was feeding data to Splunk from database. Used to send do metrics,monitoring,health check and application logging.
HTH Karth
Sent from my IPhone
> On Nov 18, 2015, at 3:51 PM, John Jones <john.jones_at_duke.edu> wrote:
>
> Is there any one out there using Splunk to look at your Oracle Audit logs.
>
> We are trying to set this up and running into problems with the way that Oracle writes the audit files in different formats. We are mostly looking at tracking Oracle Logins and notice that the format of the audit record can change depending on the error encountered.
>
> Any pointers or suggestions are welcome.
>
> John Jones
-- http://www.freelists.org/webpage/oracle-lReceived on Wed Nov 18 2015 - 22:10:12 CET