Accountability

Oracle GoldenGate includes functional security capabilities such as REST API call auditing and system event logging.

Auditing and Logging

In Oracle GoldenGate, auditing is enabled by default. The following auditing features are available with Oracle GoldenGate:
  • You have the $OGG_HOME/lib/utl/logging/ogg-audit.xml file that defines the audit conditions.

  • By default, the syslog appender is used, which writes the audit into system security log. The system log messages are stored in the /var/log/secure directory.

    Note:

    System-level events are logged to /var/log/secure, while Oracle GoldenGate-specific logs are written to $OGG_VAR_HOME/log.
  • As the ogg-audit.xml file is in the software directory, it manages all deployments for this software.

    You can copy this file into $OGG_ETC_HOME/config/logging and modify the file. It is only specific to the Oracle GoldenGate deployment.

  • You can configure logging for all deployments in the installation directory $OGG_HOME/ lib/utl/logging.

  • You can configure logging for a specific deployment in the installation directory $OGG_ETC_HOME/etc/conf/logging.

Structure of the Log Files

The structure of log files includes the following information:
  • Date

  • Info | Warning | Error

  • Message

Service Manager Deployment Logs

The Service Manager deployment logs include the following log files:
  • ServiceManager.log

  • AdminClient.log

  • RESTAPI.log

  • Pluginsrvr.log (only if the Plugging Service is installed).

User Deployment Logs

The user deployment logs include the following files:
  • adminsrvr.log

  • distsrvr.log

  • recvsrvr.log

  • pmsrvr.log

  • extract.log

  • replicat.log

  • ER-events.log

  • ggserr.log

  • adminclient.log

  • restapi.log