Oracle Audit records and Splunk

  • From: John Jones <john.jones@xxxxxxxx>
  • To: "'oracle-l@xxxxxxxxxxxxx'" <oracle-l@xxxxxxxxxxxxx>
  • Date: Wed, 18 Nov 2015 20:51:03 +0000

Is there any one out there using Splunk to look at your Oracle Audit logs.

We are trying to set this up and running into problems with the way that Oracle
writes the audit files in different formats. We are mostly looking at tracking
Oracle Logins and notice that the format of the audit record can change
depending on the error encountered.

Any pointers or suggestions are welcome.

John Jones

Other related posts: