RSA Admin

Oracle - multiple SIDs from the same host

Discussion created by RSA Admin Employee on Jun 30, 2011
Latest reply on Feb 22, 2012 by RSA Admin

When Oracle syslogs to enVision, it does not send the SID of each instance with the message. Since we have multiple instances on the same host, we lose visibility to what happened in which instance.


I found mention in a blog post that there was a bug filed to add the SID to messages. I can't see the MetaLink entry so I'm not sure if there is an available fix.


The blog post suggests assigning different facility.priority settings to each instance as a way to differentiate them. Would this help in enVision?  My understanding was that enVision ignored the priority values when parsing the data, so I'm not sure there would be a way for it to tell the instances apart.


It's not an option for us at the moment, but does using ODBC audit collection instead of syslog allow for differentiating multiple database instances on the same host?


Anyone else having this much fun with Oracle and enVision?  :smileyhappy: