Hello community, I'm looking for a simple and cost-effective solution that would allow to "exfiltrate" on a regularly frequency, ORACLE archived redo logs.
We develop and administer a dozen of ORACLE standard 19C small databases on Windows 2k19 server boxes (approx 4 Gb) for one of our main customers. Servers are run as VMWARE VM.
Infra security (including backup) is handled by the customer IT team.
VM backup is done every day.
We are concerned mainly with ORACLE part.
All the DB run in archived log mode. We run an automated RMAN backup every night.
The ORACLE DB runs on C drive while the FRA for archived redo log is located on another D volume.
The redo log switching is done every 30 minutes.
My questioning concerns the archived redo log security in case of disaster: suppose we’re hit by a ransomware that encrypts both C and D volumes.
So we restore the VM from backup then we can recover ORACLE DB with latest RMAN backup and then apply the latest redo log.
But the redo logs that are applied are from the latest VM backup that can be max one day old while redo logs are meant to recover nearly before disaster.
So I’m looking for a simple and cost effective solution to exfiltrate (FTP, API etc.), archived redo logs on regularly basis frequency (for instance, every 30 minutes).
Is my questioning relevant, or I’m going a wrong way in my thinking?
Thank’s in advance.
Olivier