IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only
  • 1.  Application Logs Integration With SIEM

    Posted 03/08/21 06:45 AM

    I have concerns regarding how to integrate application logs that are stored in Oracle databases? I have already integrated Oracle Database Audit logs and now i need to integrate the logs of the application i am using and storing logs in the same oracle database.

    I tried this integration using Log Source Type "Oracle RDBMS Audit Record" and Protocal "JDBC" and facing below mentioned error.

    Error: Unable to communicate with host [Database IP] on port [Database Port]: Listener refused the connection with the following error:

    Error: ORA-12514, TNS:listener does not currently know of service requested in connect descriptor



    #QRadar
    #Support
    #SupportMigration


  • 2.  RE: Application Logs Integration With SIEM

    Posted 03/08/21 07:54 AM

    Hello Ahmad,

    If you are looking for Oracle Application Logs, could you check if "Oracle DB Listener" logs are the ones that you are looking for?

    If yes, please check this DSM guide :

    Page 1056 : http://public.dhe.ibm.com/software/security/products/qradar/documents/iTeam_addendum/b_dsm_guide.pdf

    Thanks,

    Ashish Kothekar



    #QRadar
    #Support
    #SupportMigration