configuration of Oracle Database 12c on QRadar

Posted by Roshan on Nov 13, 2017; 6:48pm
URL: http://erman-arslan-s-oracle-forum.124.s1.nabble.com/configuration-of-Oracle-Database-12c-on-QRadar-tp4416.html

Oracle Database 12.1.0.2
Red Hat Linux 6

Hi Erman,

I configured auditing on Oracle Database 12c test instance. I have enabled unified auditing

https://geodatamaster.com/tag/how-to-enable-oracle-12c-unified-auditing/

I notice the log entries are not getting displayed on QRadar.

/etc/rsyslog.conf entries are correct and services restarted also.

Please find below display from QRadar
dblog.png

I have tried same configuration on Oracle Database 11.2.0.4 and it is working.

Please advise.


ROshan