configuration of Oracle Database 12c on QRadar

[Roshan]

Oracle Database 12.1.0.2
Red Hat Linux 6

Hi Erman,

I configured auditing on Oracle Database 12c test instance. I have enabled unified auditing

https://geodatamaster.com/tag/how-to-enable-oracle-12c-unified-auditing/

I notice the log entries are not getting displayed on QRadar.

/etc/rsyslog.conf entries are correct and services restarted also.

Please find below display from QRadar
dblog.png

I have tried same configuration on Oracle Database 11.2.0.4 and it is working.

Please advise.


ROshan

[Roshan]

It's ok. issue solved. The listener was not configured with the correct SID

[ErmanArslansOracleBlog]

Good Roshan :)