IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

Application Logs Integration With SIEM

  • 1.  Application Logs Integration With SIEM

    Posted Mon March 08, 2021 06:45 AM

    I have concerns regarding how to integrate application logs that are stored in Oracle databases? I have already integrated Oracle Database Audit logs and now i need to integrate the logs of the application i am using and storing logs in the same oracle database.

    I tried this integration using Log Source Type "Oracle RDBMS Audit Record" and Protocal "JDBC" and facing below mentioned error.

    Error: Unable to communicate with host [Database IP] on port [Database Port]: Listener refused the connection with the following error:

    Error: ORA-12514, TNS:listener does not currently know of service requested in connect descriptor



    #QRadar
    #Support
    #SupportMigration


  • 2.  RE: Application Logs Integration With SIEM

    Posted Mon March 08, 2021 07:54 AM

    Hello Ahmad,

    If you are looking for Oracle Application Logs, could you check if "Oracle DB Listener" logs are the ones that you are looking for?

    If yes, please check this DSM guide :

    Page 1056 : http://public.dhe.ibm.com/software/security/products/qradar/documents/iTeam_addendum/b_dsm_guide.pdf

    Thanks,

    Ashish Kothekar



    #QRadar
    #Support
    #SupportMigration