Dear community,
I have to implement Oracle 12c audit and save/export audit data to a shared drive on the SYSLOG server. Splunk will get the data for this SYSLOG server.
In a configuration like that, what is the best approach? Mixed auditing or Pure auditing?
My approach is to define pure audit and create 2 procedures:
- Transfer UNIFIED_AUDIT_TRAIL to the SYSLOG server;
- Clean up the auditing data from time to time.
With DBConnect, I must create a specific user, which I don't want.
Is there a step-by-step guide in windows to implement Oracle 12c auditing?
Thanks
