We have 4 oracle DB PRD servers and 1 UAT. We followed the below steps (the linux part) to config the audit logs.
All 5 servers have the same settings. We have touch the local6.log in /var/log in each server. However, we cannot see anything in the 4 PRD servers in local6.log meanwhile the UAT one could receive few auth logs then stopped by then.
Anyone have clue for troubleshooting? We have already restart the syslog service many times and verified the config.
Thanks a lot.
I'm still a n00b too, but...
Is there a firewall in the way? Is everything on the same subnet? Same network? Can you ping from your Oracles to the SEM?
Also look for unmatched connector data. No matter how hard I try, or convince myself that X logs to Y, they somehow show up in different places.
the best way to be contacting our Support team. They should help you configure your DB to send the syslog to on SEM Manager or configuring SEM Agent on the Oracle DB servers. There might be unmatched data as well. That would definitely require the Support help.
SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 150,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process.