Hi Experts!
I need to enabled audit monitoring in Oracle Database, and i want to do it trought syslog. I've done a configuration and the result are (e.g.):
<174>Mar 25 11:08:59 suarbuxorad02 Oracle Audit[11472]: LENGTH: "160" SESSIONID: "94827539" ENTRYID: "1" ACTION: "102" RETURNCODE: "0" LOGOFF$PREAD: "446" LOGOFF$LREAD: "3167" LOGOFF$LWRITE: "0" LOGOFF$DEAD: "0" SESSIONCPU: "21"
How it is possible to have more than a database per server, i ask if its possible change the server name (suarbuxorad02) by the name of the database in the event, e.g.:
<174>Mar 25 11:08:59 DATABASE_NAME Oracle Audit[11472]: LENGTH: "160" SESSIONID: "94827539" ENTRYID: "1" ACTION: "102" RETURNCODE: "0" LOGOFF$PREAD: "446" LOGOFF$LREAD: "3167" LOGOFF$LWRITE: "0" LOGOFF$DEAD: "0" SESSIONCPU: "21"
Thanks!