Hi,
As I have issue with LogCollector service, I had to create another method to send log from database to LogDecoder by syslog, I test it on oracle 11c an works fine but I have trouble with 12c version. I run the same query that use the xml file "oracle_unified_audit_12c.xml", with the correct delimiter '^^' and tag, but when I send the log It doesn't recognize it. Can anyone that have an oracle 12c working, help me with the correct structure of log?
This looks very much like an ODBC driver issue where the fix is currently targeted for 10.6.7 and 11.2.1.
If you don't wish to wait until very late this year or early next year to get these versions then I recommend that you open a Support case. You can reference SACE-9241 as part of your inquiry.