Enterasys Security Information and Event Manager, Configuration Manual

Page: 291 / 426

Configuring DSMs
Oracle DB Listener 275
Collecting Events
Using the Oracle
Database Listener
Protocol
The Oracle Database Listener protocol source allows SIEM to monitor log files
generated from an Oracle Listener database. Before you configure the Oracle
Database Listener protocol to monitor log files for processing, you must obtain the
directory path to the Oracle Listener database log files.
To configure SIEM to monitor log files from Oracle Database Listener:
Step 1
Log in to SIEM.
Step 2
Click the Admin tab.
Step 3
In the navigation menu, click Data Sources .
The Data Sources panel is displayed.
Step 4
Click the Log Sources icon.
The Log Sources window is displayed.
Step 5
From the Log Source Type drop-down list box, select Oracle Database Listener .
Step 6
Using the Protocol Configuration drop-down list box, select Oracle Database
Listener .
Step 7
Configure the following parameters:
Table 51-3 Oracle Database Listener Parameters
Parameter Description
Log Source Identifier Type the IP address or hostname for the log source.
Server Address Type the IP address of the Oracle Database Listener.
Domain Type the domain required to access the Oracle Database
Listener. This parameter is optional.
Username Type the username required to access the host running the
Oracle Database Listener.
Password Type the password required to access the host running the
Oracle Database Listener.
Confirm Password Confirm the password required to access the Oracle
Database Listener.
Log Folder Path Type the directory path to access the Oracle Database
Listener log files.
File Pattern Type the regular expression (regex) required to filter the
filenames. All matching files are included in the processing.
The default is
listener\.log
This parameter does not accept wildcard or globbing
patterns in the regular expression. For example, if you want
to list all files starting with the word log, followed by one or
more digits and ending with tar.gz, use the following entry:
log[0-9]+\.tar\.gz. Use of this parameter requires knowledge
of regular expressions (regex). For more information, see the
following website:
http://download.oracle.com/javase/tutorial/essential/regex/