Oracle BEA WebLogic

The Oracle BEA WebLogic DSM allows IBM QRadar to retrieve archived server logs and audit logs from any remote host, such as your Oracle BEA WebLogic server.

About this task

QRadar uses the log file protocol to retrieve events from your Oracle BEA WebLogic server and provides information on application events that occur in your domain or on a single server.

QRadar supports Oracle events by using the Log File protocol from Oracle BEA Weblogic v12.2.1.3.0.

To integrate Oracle BEA WebLogic events, take the following steps:

  1. Enable auditing on your Oracle BEA WebLogic server.
  2. Configure domain logging on your Oracle BEA WebLogic server.
  3. Configure application logging on your Oracle BEA WebLogic server.
  4. Configure an audit provider for Oracle BEA WebLogic.
  5. Configure QRadar to retrieve log files from Oracle BEA WebLogic.