Oracle Data

The Splunk Add-on for Oracle Database is required for the field extraction.

Splunkbase Download: https://splunkbase.splunk.com/app/1910

Installation and Configuration Guide: https://docs.splunk.com/Documentation/AddOns/latest/Oracle/About

The Cyences App has support following data collection mechanisms

1) Unified auditing using Splunk DB Connect app (Recommended)

• https://docs.splunk.com/Documentation/AddOns/released/Oracle/ConfigureSplunkDBConnectinputsv3
• Visit the official oracle documentation for more information:
  • Desupport of Traditional Auditing
  • Monitoring Database Activity with Auditing
  • Oracle Database Auditing Best practices

2) XML logs using File monitoring

• https://docs.splunk.com/Documentation/AddOns/released/Oracle/Configuremonitorinputs

Note: Use both index=oracle for data collection or update the macro definition for cs_oracle (Settings > Configuration).

Estimated Data Size

The license usage consumed by the Splunk Add-on for Oracle Database is based on the audit policy and database usage of your environment