This discussion is archived
7 Replies Latest reply: Sep 20, 2012 8:13 AM by mdrake RSS

XMLDB log-level configuration

felizc Newbie
Currently Being Moderated
I've been searching for a document that will advise what the different log-level settings are that can be put into the xdbconfig.xml but I can't seem to find anything on this. The default level is set to 0 on install. That is what we current have it as. We are being required to make this a log-level of 1 but I don't know the implications of doing this.

Does anyone know where I can find more information regarding this? We have an Oracle 11.1.0.7 installation on AIX 7.1 -- any help would be appreciated.
  • 1. Re: XMLDB log-level configuration
    odie_63 Guru
    Currently Being Moderated
    We are being required to make this a log-level of 1 but I don't know the implications of doing this.
    Just out of curiosity :

    What is requiring you to set level 1 when you don't know what it does?
  • 2. Re: XMLDB log-level configuration
    felizc Newbie
    Currently Being Moderated
    We are being audited by the IRS Safeguard team. They are telling us that if we are using XMLDB that we must set this log-level to 1 to capture unsuccessful login attempts. However, I want to read more about this setting in general to get more familiar with it. I don't know what the default level of 0 does; I don't know where the logs are generated; I don't know what other settings are available; etc. etc. etc.

    Thanks for any help.
  • 3. Re: XMLDB log-level configuration
    odie_63 Guru
    Currently Being Moderated
    Unimplemented features (as of year 2007) : {thread:id=506038}

    I don't know how that has evolved since then.
    Maybe Mark or Marco could tell us more :)

    ... or your audit team, as they "seem" to know a lot about it.
  • 4. Re: XMLDB log-level configuration
    felizc Newbie
    Currently Being Moderated
    Unfortunately, the audit team is not a technical team. It is only a compliance team. I will open an SR with Oracle. I'll leave this open in case the others you mentioned do have an insight into this. Thanks again.
  • 5. Re: XMLDB log-level configuration
    MarcoGralike Oracle ACE Director
    Currently Being Moderated
    Apparently the IRS does know, once again, more then I do ;-)

    Seriously; The status of 2007 does not have changed for this feature.

    The following is a feature that does work: http://www.liberidu.com/blog/2010/01/17/ora-31098-internal-event-to-turn-on-xdb-tracing
    Also you can enable the listener logging/tracing which will also mention login attempts (and TCP/IP#, FQDN info btw).
    The XFiles demo XMLDB app also shows a method on how to program this feature via XDB events and stuff...
    The needed info, probably, can also retrieved by implementing Database Vault or the Database Firewall software (and yes, security comes at a cost).

    http://www.oracle.com/technetwork/products/database-firewall/overview/index.html

    Edited by: Marco Gralike on Sep 20, 2012 3:07 AM
  • 6. Re: XMLDB log-level configuration
    felizc Newbie
    Currently Being Moderated
    Thank you, Marco, for the information. Oracle Support stated the following in the SR I opened -- in case anyone is wondering:
    This feature has not been implemented. Actually, it's being removed. If it's needed, an Enhancement Request could be pursued in which we'd need to specify why exactly it's needed and what information it should return. If approved, it would be implemented in some future release.

    Thank you to you and Odie for your assistance!
  • 7. Re: XMLDB log-level configuration
    mdrake Expert
    Currently Being Moderated
    COuld you contact me directly to discuss this requirement (mark dot drake at oracle dot com).. Thx

Legend

  • Correct Answers - 10 points
  • Helpful Answers - 5 points