Is there any oracle logs parser for azure sentinel we are not using oracle unified agent

Kumar, Deepak 16 Reputation points
2024-04-24T15:01:07.1466667+00:00

Is there any oracle logs parser for azure sentinel we are not using oracle unified agent

Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
986 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Clive Watson 5,716 Reputation points MVP
    2024-04-24T16:36:44.8833333+00:00

    Hi, you can use the parsers that Oracle supply as a guide, however you'll have to adapt them to support your ingestion product and the schema it ingests. You may want to look at the ASIM guides as well, especially the column naming conventions. https://learn.microsoft.com/EN-US/AZURE/sentinel/normalization-parsers-overview

    Sample Oracle parser: https://github.com/Azure/Azure-Sentinel/blob/606b995237604929b290b502bf7c21313cd0441c/Solutions/OracleWebLogicServer/Parsers/OracleWebLogicServerEvent.yaml

    0 comments