FortiSIEM and Oracle DB

[MohammadAbureesh]

Hello everyone,

Regarding oracle logging, FortiSIEM is collecting audit logs from the oracle audit trail extended mode but missing a field "sqltext" with datatype is CLOB from the audit table.

 How can we capture this field on FortiSIEM?

[DanielHanman]

Hi Mohammed,

Have you got an example of the table field content?

What version of Oracle are you using?

Thanks-------------------------------------------
Original Message:
Sent: Jun 14, 2020 03:20 AM
From: Mohammed Abureesh
Subject: FortiSIEM and Oracle DB

Hello everyone,

Regarding oracle logging, FortiSIEM is collecting audit logs from the oracle audit trail extended mode but missing a field "sqltext" with datatype is CLOB from the audit table.

 How can we capture this field on FortiSIEM?

[MohammadAbureesh]

Hi Daniel,
Thanks for your help and support.
I contacted with TAC and informed me "There is an already Feature request for this situation:
RFE 0519255 - Discovery | Perf Monitoring | Doc |
JDBC SQL Monitoring - add an additional column to pull for user auditing on SQL

I added this ticket to the RFE above to inform developers that is
still an active request.
As Technical Assistance Center, we are not involved on NFR, RFE and development Roadmaps.
If you would like to be updated on the above request you need to contact your SE or regional sale channel ."-------------------------------------------
Original Message:
Sent: Jun 18, 2020 02:35 AM
From: Daniel Hanman
Subject: FortiSIEM and Oracle DB

Hi Mohammed,

Have you got an example of the table field content?

What version of Oracle are you using?

Thanks
Original Message:
Sent: Jun 14, 2020 03:20 AM
From: Mohammed Abureesh
Subject: FortiSIEM and Oracle DB

Hello everyone,

Regarding oracle logging, FortiSIEM is collecting audit logs from the oracle audit trail extended mode but missing a field "sqltext" with datatype is CLOB from the audit table.

 How can we capture this field on FortiSIEM?

[DanielHanman]

Thanks Mohammed, I'll look into this.-------------------------------------------
Original Message:
Sent: Jun 18, 2020 11:32 AM
From: Mohammed Abureesh
Subject: FortiSIEM and Oracle DB

Hi Daniel,
Thanks for your help and support.
I contacted with TAC and informed me "There is an already Feature request for this situation:
RFE 0519255 - Discovery | Perf Monitoring | Doc |
JDBC SQL Monitoring - add an additional column to pull for user auditing on SQL

I added this ticket to the RFE above to inform developers that is
still an active request.
As Technical Assistance Center, we are not involved on NFR, RFE and development Roadmaps.
If you would like to be updated on the above request you need to contact your SE or regional sale channel ."
Original Message:
Sent: Jun 18, 2020 02:35 AM
From: Daniel Hanman
Subject: FortiSIEM and Oracle DB

Hi Mohammed,

Have you got an example of the table field content?

What version of Oracle are you using?

Thanks
Original Message:
Sent: Jun 14, 2020 03:20 AM
From: Mohammed Abureesh
Subject: FortiSIEM and Oracle DB

Hello everyone,

Regarding oracle logging, FortiSIEM is collecting audit logs from the oracle audit trail extended mode but missing a field "sqltext" with datatype is CLOB from the audit table.

 How can we capture this field on FortiSIEM?