Skip to Main Content
Forums

Database Software

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Interested in getting your voice heard by members of the Developer Marketing team at Oracle? Check out this post for AppDev or this post for AI focus group information.

Auditing events - Include database name on syslog header

User_S9CR1Mar 28 2022

Hi Experts!
I need to enabled audit monitoring in Oracle Database, and i want to do it trought syslog. I've done a configuration and the result are (e.g.):
<174>Mar 25 11:08:59 suarbuxorad02 Oracle Audit[11472]: LENGTH: "160" SESSIONID: "94827539" ENTRYID: "1" ACTION: "102" RETURNCODE: "0" LOGOFF$PREAD: "446" LOGOFF$LREAD: "3167" LOGOFF$LWRITE: "0" LOGOFF$DEAD: "0" SESSIONCPU: "21"
How it is possible to have more than a database per server, i ask if its possible change the server name (suarbuxorad02) by the name of the database in the event, e.g.:
<174>Mar 25 11:08:59 DATABASE_NAME Oracle Audit[11472]: LENGTH: "160" SESSIONID: "94827539" ENTRYID: "1" ACTION: "102" RETURNCODE: "0" LOGOFF$PREAD: "446" LOGOFF$LREAD: "3167" LOGOFF$LWRITE: "0" LOGOFF$DEAD: "0" SESSIONCPU: "21"
Thanks!

Comments

Post Details

Added on Mar 28 2022
#audit, #audit-vault-and-database-firewall, #database-security, #security
0 comments
200 views