Is there any oracle logs parser for azure sentinel we are not using oracle unified agent

Question

Is there any oracle logs parser for azure sentinel we are not using oracle unified agent

Kumar, Deepak 16

Givary-MSFT 35,786 Reputation points Microsoft Employee Moderator

2024-04-25T06:37:16.0266667+00:00

@Kumar, Deepak Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back.

1 answer

Your answer

Givary-MSFT 35,786 Reputation points Microsoft Employee Moderator

2024-04-25T06:37:16.0266667+00:00

@Kumar, Deepak Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back.

Answer 1

Clive Watson 7,951 MVP Volunteer Moderator

Hi, you can use the parsers that Oracle supply as a guide, however you'll have to adapt them to support your ingestion product and the schema it ingests. You may want to look at the ASIM guides as well, especially the column naming conventions. https://learn.microsoft.com/EN-US/AZURE/sentinel/normalization-parsers-overview

Sample Oracle parser: https://github.com/Azure/Azure-Sentinel/blob/606b995237604929b290b502bf7c21313cd0441c/Solutions/OracleWebLogicServer/Parsers/OracleWebLogicServerEvent.yaml

0 comments

Share via

Is there any oracle logs parser for azure sentinel we are not using oracle unified agent

1 answer

Your answer