Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Table of Contents

...

Log in to the Oracle server as root.
Run the command : vi /etc/rsyslog.conf
Add the lines as below:

Info

$ModLoad imfile
$InputFilePollInterval 1
#### GLOBAL DIRECTIVES ####

$InputFileName rdbms\orcl\orcl\trace

$InputFileTag oracle_logs

$InputFileStateFile state-oracle-access

$InputRunFileMonitor

After adding, configure CCE-IP at the end of file:
*.* @CCE_IP:514

# ### end of the forwarding rule ###


 In the place of CCE IP put you actual CCE IP 

Info

Verification

Verification through UI


STEP1: Login to UI >> SYSTEM>> LOGS AND FLOWS COLLECTION STATUS .

...

Login to the server as seceon user and run the below command

sudo tcpdump -i any host 514 and host <IP address> -AAA


Filter by label (Content by label)
showLabelsfalse
max5
spacescom.atlassian.confluence.content.render.xhtml.model.resource.identifiers.SpaceResourceIdentifier@a56
showSpacefalse
sortmodified
reversetrue
typepage
cqllabel = "kb-how-to-article" and type = "page" and space = "SI"
labelskb-how-to-article

...