Forum Discussion

FahadAhmed's avatar
FahadAhmed
Brass Contributor
Sep 27, 2021

How to integrate ORACLE 12.1.0.2 logs to Azure Sentinel??

Hello,

 

I would like to know How to integrate ORACLE 12.1.0.2 logs to Azure Sentinel?? The server is on-premise, what are the possible options available. 

 

I see there are no out of the box data connectors for this, an expedited response is much appreciated.

 

Thanks

Fahad.

  • FahadAhmed's avatar
    FahadAhmed
    Brass Contributor
    Sep 29, 2021
    Doing a bit of research I came across following two solutions:

    Solution 1: Oracle Database Audit (Preview)
    Currently Oracle Database audit solution is currently in preview mode, wait until its available for public.

    Solution 2: Use Logstash
    Searched one video on youtube that talks about using Logstash in general, it uses JDBC input plugin to connect to database, read the table in which the database is writing the logs and use output plugin to forward it to azure sentinel.

    Any other options available?

Resources