Re: Oracle and ISA Logging

  • From: "Jim Harrison" <jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 1 Nov 2001 12:25:47 -0800

The only "supported" database logging is to a SQL database.
That said, if you do manage to get it working, you have an article to write!

Jim Harrison
MCP(NT4, 2K), A+, Network+, PCG


----- Original Message -----
From: "Euticio Montelongo" <tko@xxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Thursday, November 01, 2001 11:29
Subject: [isalist] Oracle and ISA Logging


http://www.ISAserver.org


I would like to know if it is possible to log to an Oracle Database. I
have modified the provided scripts to create the tables in oracle and
created a DSN. I'm able to connect to oracle from my ISA server and view
the firewalllog, packetfilterlog, and webproxylog. However whenever I set
isa to enable odbc logging nothing happens. I have provided the modified
scripts below for each table.

CREATE TABLE WEBPROXYLOG (
  CLIENTIP            VARCHAR2 (32),
  CLIENTUSERNAME      VARCHAR2 (32),
  CLIENTAGENT         VARCHAR2 (128),
  CLIENTAUTHENTICATE  VARCHAR2 (5),
  LOGDATE             DATE,
  LOGTIME             DATE,
  SERVICE             VARCHAR2 (16),
  SERVERNAME          VARCHAR2 (32),
  REFERREDSERVER      VARCHAR2 (32),
  DESTHOST            VARCHAR2 (255),
  DESTHOSTIP          VARCHAR2 (32),
  DESTHOSTPORT        NUMBER,
  PROCESSINGTIME      NUMBER,
  BYTESRECVD          NUMBER,
  BYTESSENT           NUMBER,
  PROTOCOL            VARCHAR2 (12),
  TRANSPORT           VARCHAR2 (8),
  OPERATION           VARCHAR2 (8),
  URI                 VARCHAR2 (255),
  MIMETYPE            VARCHAR2 (32),
  OBJECTSOURCE        VARCHAR2 (12),
  RESULTCODE          NUMBER,
  CACHEINFO           NUMBER,
  RULE#1              VARCHAR2 (128),
  RULE#2              VARCHAR2 (128));

CREATE INDEX IX_WEBPROXYLOG_DATE ON WEBPROXYLOG(LOGDATE));

CREATE INDEX IX_WEBPROXYLOG_DATETIME ON WEBPROXYLOG(LOGDATE, LOGTIME));

CREATE TABLE PACKETFILTERLOG (
  PFLOGDATE           DATE,
  PFLOGTIME           DATE,
  SOURCEADDRESS       VARCHAR2 (25),
  DESTINATIONADDRESS  VARCHAR2 (25),
  PROTOCOL            VARCHAR2 (8),
  PARAM#1             VARCHAR2 (8),
  PARAM#2             VARCHAR2 (8),
  TCPFLAGS            VARCHAR2 (255),
  FILTERRULE          VARCHAR2 (16),
  INTERFACE           VARCHAR2 (25),
  IPHEADER            VARCHAR2 (255),
  PAYLOAD             VARCHAR2 (255));

CREATE INDEX IX_PACKETFILTERLOG_DATE ON PACKETFILTERLOG(PFLOGDATE));

CREATE INDEX IX_PACKETFILTERLOG_DATETIME ON PACKETFILTERLOG(PFLOGDATE,
PFLOGTIME));

REATE TABLE FIREWALLLOG (
  CLIENTIP            VARCHAR2 (32),
  CLIENTUSERNAME      VARCHAR2 (32),
  CLIENTAGENT         VARCHAR2 (128),
  CLIENTAUTHENTICATE  VARCHAR2 (5),
  LOGDATE             DATE,
  LOGTIME             DATE,
  SERVICE             VARCHAR2 (12),
  SERVERNAME          VARCHAR2 (32),
  REFERREDSERVER      VARCHAR2 (32),
  DESTHOST            VARCHAR2 (255),
  DESTHOSTIP          VARCHAR2 (32),
  DESTHOSTPORT        NUMBER,
  PROCESSINGTIME      NUMBER,
  BYTESSENT           FLOAT,
  BYTESRECVD          FLOAT,
  PROTOCOL            VARCHAR2 (8),
  TRANSPORT           VARCHAR2 (8),
  OPERATION           VARCHAR2 (8),
  URI                 VARCHAR2 (255),
  MIMETYPE            VARCHAR2 (32),
  OBJECTSOURCE        VARCHAR2 (12),
  RESULTCODE          NUMBER,
  CACHEINFO           NUMBER,
  RULE#1              VARCHAR2 (128),
  RULE#2              VARCHAR2 (128),
  SESSIONID           NUMBER,
  CONNECTIONID        NUMBER);

CREATE INDEX IX_FIREWALLLOG_DATE ON FIREWALLLOG(LOGDATE));

CREATE INDEX IX_FIREWALLLOG_DATETIME ON FIREWALLLOG(LOGDATE, LOGTIME));

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')




Other related posts: