Oracle 9i audit logs to syslog

[Kenan Erdey]

Hi,

we have an oracle 9i database running on 11.11. now we'd like to forward audit logs to syslog server. i am able to continously tailing a log file and send it with logger. But 9i opens a file for each session and does not directly support unix like logging.

What is done or can be done for directing logs to a logserver.

thanks.

[Steven E. Protter]

Shalom,

The user oracle does not have rights to syslog.

It would be a security violation and a mistake to give it write access to the syslog.

root however has rights to the oracle 9i logs and can cat the output anywhere it wants.

SEP

[Kenan Erdey]

ok, root should do it. so oracle users can't kill log directing process.

[Eric Antunes]

Hi,

What is the purpose of this?

I think you should not mix root information with oracle information in syslog.

Best Regards,

Eric Antunes

[Dennis Handly]

>SEP: The user oracle does not have rights to syslog. It would be a security violation and a mistake to give it write access to the syslog.

Anybody can write to syslog with the appropriate APIs: syslog(3) openlog(3) closelog(3)

[Kenan Erdey]

Hi Eric,

purpose is to monitor what oracle users have done. this is for PCI/DSS.

[Kenan Erdey]

any suggestions please ?

[Eric Antunes]

Hi Kenan,

Metalink Note 293973.1 should be a good help in doing this.

Best Regards,

Eric Antunes