Anonymous_User Absent Member.
Absent Member.
324 views

SLM - how to configure severity


SLM 1.2.0.2

based on "Text" within a Message of an Event, may I decide/set the
Severity Level ?

IBM AIX is configured to send its logs to SLM via Syslog. On my AIX
server Oracle is configure to log 'SYS' user events into syslog, also
AIX is configured to receive logs from Oracle into syslog. So any
activity performed by user 'SYS' is available to Syslog on AIX, and/or
to SLM too.

SLM presents all the events/logs from AIX(via Syslog) that contains any
information(Text within the Message of any event) about Oracle with
'Severity 1'.. and we have no issue. But my Customer wants to set the
Severity to "4" of all the Events that contains the text "Oracle Audit
AND drop user" in the Message.

possible ? how ? please assist.

Regards
Muhammad Sharfuddin


--
sharfuddin
------------------------------------------------------------------------
sharfuddin's Profile: http://forums.novell.com/member.php?userid=63087
View this thread: http://forums.novell.com/showthread.php?t=453515

0 Likes
1 Reply
Anonymous_User Absent Member.
Absent Member.

Re: SLM - how to configure severity

Hi Muhammad,

>>> On 16.03.2012 at 07:46, sharfuddin<sharfuddin@no-mx.forums.novell.com>

wrote:

> SLM 1.2.0.2
>
> based on "Text" within a Message of an Event, may I decide/set the
> Severity Level ?
>
> IBM AIX is configured to send its logs to SLM via Syslog. On my AIX
> server Oracle is configure to log 'SYS' user events into syslog, also
> AIX is configured to receive logs from Oracle into syslog. So any
> activity performed by user 'SYS' is available to Syslog on AIX, and/or
> to SLM too.
>
> SLM presents all the events/logs from AIX(via Syslog) that contains any
> information(Text within the Message of any event) about Oracle with
> 'Severity 1'.. and we have no issue. But my Customer wants to set the
> Severity to "4" of all the Events that contains the text "Oracle Audit
> AND drop user" in the Message.
>
> possible ? how ? please assist.


Such customization would have to be done in a collector. See
http://www.novell.com/developer/collector_customization.html

I've created an enhancement request to support the Operating System Audit
Trail in the Oracle Database collector. See
https://bugzilla.novell.com/show_bug.cgi?id=739168

Norbert

>
> Regards
> Muhammad Sharfuddin
>





0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.