All Apps and Add-ons

How to use Splunk Oracle admin-level log audits

evgueni
New Member

Good afternoon, Ma'am/Sir,

I am trying to figure if I could leverage Splunk to automate audit of admin-level logs in Oracle. How can I do that?

Tags (1)
0 Karma

pmdba
Builder

If you haven't already figured it out by now, there's a paper available for download here: http://apps.splunk.com/app/1538/ that lays it all out, step by step. It also details a lot of other ways to get data from Oracle and its log files into Splunk.

0 Karma

gkanapathy
Splunk Employee
Splunk Employee

It should be pretty straightforward. If you write the Oracle Audit logs to OS files, it's quite easy to bring them into Splunk. From there, you can use normal Splunk log search, alerting, reporting, and other functionality on them.

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...