Oracle Database
This section provides configuration details for collecting Oracle Database logs data.
Support Specifications
Version:
- 11g - .AUD, XML File Audit and Oracle Audit
- 12c and 18c - .AUD, XML and Oracle Database Unified Audit Trail
Setup Prerequisites
| Prerequisite | Description | For additional details, see... |
|---|---|---|
| Access Oracle Management Cloud | Create an Oracle Cloud account and an OMC instance. | How Do I Access Oracle Management Cloud? in Managing and Monitoring Oracle Cloud |
| Cloud agent(s) installed and Log Analytics licensing enabled |
- Install a cloud agent on the host where an Oracle database is installed. - Ensure that the agent has access to the database log files. |
Install the Cloud Agent and Enable Oracle Log Analytics in Using Log Analytics Environment Requirements in Installing and Managing Oracle Management Cloud Agents |
| Security Monitoring and Analytics licensing enabled | Navigate to the OMC main menu > Administration > Entity Configuration. On the Licensing page, click DISABLED in the SMA Enrichment tile. Toggle and Apply. | Enabling Automatic Log Analytics and Security Monitoring and Analytics Data Collection in Getting Started with Oracle Management Cloud |
| Auditing enabled on your Oracle Database | Oracle database auditing is enabled by default. However, unified auditing is disabled by default starting with version 12c, where it was first introduced. | See your Oracle Database documentation for more details. |
Configuration Steps
| STEP | Task Details / Requirements | For more details, see... |
|---|---|---|
| STEP 1. - Add the Oracle database credentials to the OMC cloud agents. | This is required if your audit data is stored in the Oracle Database. | Providing Entity Credentials section in Set Up Database Instance Monitoring in Using Oracle Log Analytics |
| STEP 2. - Add and Discover the Oracle database from your Management Cloud console. | Add a new database entity to your OMC environment then associate with your newly discovered Oracle database. | Add Entities for Infrastructure Monitoring in Using Oracle Infrastructure Monitoring |
| STEP 3. - Review existing log sources supported in Log Analytics and associate your database entity with the Oracle database log sources.
Note: Several database auditing sources are supported out of the box. |
Your newly added database entity must generate a log type that matches with one supported by OMC.
Navigate to Log Analytics > Log Admin > Sources, and search for Entity Type = Oracle Database Instance. For example, select the Oracle DB Audit Log Source Stored in the Database, or Database Audit XML Logs. Audit data will be extracted from the Oracle database based on the SQL query provided in the log source configuration. |
Work with Entity Associations in Using Log Analytics |
| STEP 4. - Validate your log collection in Security Monitoring and Analytics. | To ensure all setup is complete, validate your collection. Navigate to Security Analytics > Security Data Explorer. | Validate Log Collections |
For additional compatibility info, see Database Sources.