Oracle RDBMS OS Audit Record

The IBM QRadar DSM for Oracle RDBMS OS Audit Record collects events from an Oracle device.

To integrate Oracle RDBMS OS Audit Record with QRadar, complete the following steps:
  1. If automatic updates are not enabled, RPMs are available for download from the IBM® support website (http://www.ibm.com/support). Download and install the most recent version of the following RPMs on your QRadar Console:
    • DSM Common RPM
    • OracleOSAudit DSM RPM
  2. Configure your Oracle RDBMS OS Audit Record device to send events to QRadar. For more information, see Configuring Oracle RDBMS OS Audit Record to communicate with QRadar®.
  3. If QRadar does not automatically detect the log source, add an Oracle RDBMS OS Audit Record log source on the QRadar Console by using the Syslog or Log File protocol. For more information, see Syslog log source parameters for Oracle RDBMS OS Audit Record or Log File log source parameters for Oracle RDBMS OS Audit Record.