Expanding Oracle Logging
My clients would like to expand our oracle logging to include a couple of other columns from the oracle audit logs. Also, I see some columns on the Database Audit table where this data could be parse to.
Guess I'd like to know how others handled such requests (slight modifications to out of box device xml). Can I just add some new parsing DML to the oracle device xml.... or is it better to do a separate UDS solution? I see content updates will overlay the any modifications to the out of box xml, so would have to manage that.
I'm pretty new with UDS so am looking for advise...any opinions out there?
If information you are looking for is not present in raw format (event viewer) you will have to create custom ODBC or file reader source and UDS for it. If it is present, you will need only to look into EventExplorer and probably in some fields , you'll find requested information. When you need report, than custom UDS is required.
PS. In my opinion Oracle audit logs are hardly usefull. Your customer should consider some DAM tools to monitor their DB environment.
It all depends on what the client wants to audit. Are you sure that there are other columns in the audit table that need to be included or is it just a matter of the client wanting to see more events in envision.
I find the Oracle logs quite useful for doing things like seeing when a user is logging into the Oracle database with a service or privileged account. When users are created and when they are added to DB roles.