Splunk Search

Oracle 12c UNIFIED_AUDIT_TRAIL to syslog server

paulopires16
New Member

Dear community,

I have to implement Oracle 12c audit and save/export audit data to a shared drive on the SYSLOG server. Splunk will get the data for this SYSLOG server.

In a configuration like that, what is the best approach? Mixed auditing or Pure auditing?

My approach is to define pure audit and create 2 procedures:

  • Transfer UNIFIED_AUDIT_TRAIL to the SYSLOG server;
  • Clean up the auditing data from time to time.

With DBConnect, I must create a specific user, which I don't want.

Is there a step-by-step guide in windows to implement Oracle 12c auditing?

Thanks

 

Labels (1)
0 Karma