1. Using Oracle CASB Cloud Service
  2. Enhancing Security
  3. Discovering Shadow Applications
  4. Manually Uploading a Log File

Manually Uploading a Log File

Learn how to manually upload a log file to Oracle CASB Cloud Service — Discovery as a test.

Objective: Manually uploading a firewall log file is a one-time task that it’s recommended that you perform as a test, so that you can catch and resolve any issues that you encounter before you attempt to set up an ongoing, automated upload of log files from your firewall.

Prerequisites:

  1. Oracle CASB Cloud Service — Discovery must be enabled on your Oracle CASB Cloud Service tenant.

    If the Discovery option does not appear on the Navigation menu, Oracle CASB Cloud Service — Discovery is not enabled. To enable it, see Subscribing to Oracle CASB Cloud Service — Discovery.

  2. Your firewall must be one of those listed in the Upload log file for analysis dialog box, opened from the Discovery page by clicking the Import from Logs button.

    To enable your firewall in the list, see About Discovering Shadow Applications.

  3. You must have a sample log file from your firewall available for you to upload.

    The sample log file should contain a representative sample of the traffic through your firewall that involves applications or plug-ins that do not have explicit organizational approval. For a list of the fields that are required for processing by Oracle CASB Cloud Service — Discovery, see Required Log Fields.

    Note:

    The maximum size for log file to be uploaded manually is 1 GB.

To manually upload a log file:

  1. Select Discovery from the Navigation menu in the Oracle CASB Cloud Service console.

    If the Discovery option does not appear on the Navigation menu, Oracle CASB Cloud Service — Discovery is not enabled on your Oracle CASB Cloud Service tenant. See Prerequisites above.

  2. Click the Import from Logs button on the right side of the page.

    If there is a summary of a previous manual log file upload, or ongoing automated uploads, scroll down below the summary information to locate the Import from Logs button.

  3. Select the firewall brand from which you are uploading the sample log file and click Browse.
  4. Navigate to the location of the sample log file, select it, and click Open.
  5. In the Upload firewall log for analysis dialog box, click Import.

    A progress bar appears.

    • At first the progress bar shows that the file is being uploaded, then that the file is being processed, and finally that the analysis is being performed. After that, the information about stealth applications or plug-ins appears.

    • If the log file is very large, it may take up to 30 minutes or more before the information appears.

    • If with the log file, an error message displays, indicating what the problem is, for example:

      • Domain mapping not present for given log file: No valid domain or destination IP address is present in the log file, or the support added for the firewall had incorrect values for indexes.

      • Unable to process your log file. Either the uploaded file does not contain valid data, or LORIC does not yet support this vendor's logs: Either the format of the log file being uploaded does not match the firewall selected, or there is a failure in the analytics phase.

      • Unable to process your log file. Please contact CASB support: Uploading of the log file has failed, due to network or other issues.

    If you encounter an error that you are unable to resolve, contact Oracle Support (http://support.oracle.com).  If you have not registered yet, you will need your Customer Support Identifier (CSI) in order to register to submit service request tickets.  As an alternative, you can also contact your Oracle CASB Customer Success Manager..

What to Do Next

  • If the log file uploads correctly, you are ready to proceed with Setting Up Automatic Upload of Log Files.

    If you would first like to examine the information discovered in the sample log file, see Viewing Discovered Applications and Understanding the Results.

  • If the log file does not progress through the processing stages, or if you see error messages that you can’t resolve, contact Oracle Support (http://support.oracle.com).  If you have not registered yet, you will need your Customer Support Identifier (CSI) in order to register to submit service request tickets.  As an alternative, you can also contact your Oracle CASB Customer Success Manager..