Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Table of Contents

...

Oracle Configuration collects client configuration information and uploads it to the Oracle repository. When client configuration data is uploaded regularly, customer support representatives can analyze this data and provide better customer service.

We are providing you with the steps providing steps to integrate your Oracle with Seceon SIEM so One can to have Comprehensive visibility and Proactive Threat Detection in your Environment. There will be a log transfer between your firewall to APE(Analytics and Policy Engine) via CCE (Collection and Control Engine ). In this document, we are guiding you through the steps for logs forwarding. 

Pre-Requisite

Note: SELinux must be disabled else rsyslog will be denied access to the Oracle logs.

...

Log in to the Oracle server as root.
Run the command : vi /etc/rsyslog.conf
Add the lines as below:

Info

$ModLoad imfile
$InputFilePollInterval 1
#### GLOBAL DIRECTIVES ####

$InputFileName rdbms\orcl\orcl\trace

$InputFileTag oracle_logs

$InputFileStateFile state-oracle-access

$InputRunFileMonitor

After adding, configure CCE-IP at the end of file:
*.* @CCE_IP:514

# ### end of the forwarding rule ###


...