Hi, you can use the parsers that Oracle supply as a guide, however you'll have to adapt them to support your ingestion product and the schema it ingests. You may want to look at the ASIM
guides as well, especially the column naming conventions. https://learn.microsoft.com/EN-US/AZURE/sentinel/normalization-parsers-overview
Sample Oracle parser: https://github.com/Azure/Azure-Sentinel/blob/606b995237604929b290b502bf7c21313cd0441c/Solutions/OracleWebLogicServer/Parsers/OracleWebLogicServerEvent.yaml