You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: security/security-design/shared-assets/fn-datasafe-dbaudit-to-oci-logging/README.md
+13-11Lines changed: 13 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -11,7 +11,9 @@ Oracle Functions is a serverless, highly scalable, fully managed Functions-as-a-
11
11
This Reference Architecture describes OCI Logging based solution for collecting Oracle Datasafe Oracle DB Audit Logs for continuous monitoring and troubleshooting. An OCI Function pulls audit logs from Data Safe REST API Endpoints regularly and ingest them in OCI Logging.
12
12
From OCI Logging Data Safe DB Audit Logs, can be send to OCI Logging Analytics, external SIEM and OCI Object Storage. See [Design Guidance for SIEM Integration](https://docs.oracle.com/en-us/iaas/Content/cloud-adoption-framework/siem-integration.htm)
13
13
14
-
## Prerequisites
14
+
Reviewed: 01.02.2024
15
+
16
+
# Prerequisites
15
17
16
18
- Configure Data Safe to get Database Audit Events from Oracle DataBase.
17
19
@@ -25,7 +27,7 @@ From OCI Logging Data Safe DB Audit Logs, can be send to OCI Logging Analytics,
25
27
26
28
If you don't have the required permissions and quota, contact your tenancy administrator. See [Policy Reference](https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Reference/policyreference.htm), [Service Limits](https://docs.cloud.oracle.com/en-us/iaas/Content/General/Concepts/servicelimits.htm), [Compartment Quotas](https://docs.cloud.oracle.com/iaas/Content/General/Concepts/resourcequotas.htm).
27
29
28
-
##Deploy Using Oracle Resource Manager
30
+
# Deploy Using Oracle Resource Manager
29
31
30
32
1. Click [](https://cloud.oracle.com/resourcemanager/stacks/create?region=home&zipUrl=https://github.com/oracle-devrel/technology-engineering/releases/download/fn-datasafe-to-oci-logging/fn-datasafe-dbaudit-to-oci-logging.zip)
31
33
@@ -47,14 +49,14 @@ If you don't have the required permissions and quota, contact your tenancy admin
47
49
48
50
## Deploy Using the Terraform CLI
49
51
50
-
###Clone the Module
52
+
## Clone the Module
51
53
Now, you'll want a local copy of this repo. You can make that with the commands:
cd security/security-design/fn-datasafe-dbaudit-to-oci-logging
55
57
ls
56
58
57
-
###Prerequisites
59
+
## Prerequisites
58
60
First off, you'll need to do some pre-deploy setup for Docker and Fn Project inside your machine:
59
61
60
62
```
@@ -84,7 +86,7 @@ curl -LSs https://raw.githubusercontent.com/fnproject/cli/master/install | sh
84
86
Also, please follow this [note](https://docs.oracle.com/en-us/iaas/Content/Functions/Tasks/functionsinstalldocker.htm#Install_Docker_for_Use_with_Oracle_Functions__section_podman_instead_of_docker). By default, Fn Project (and by extension, OCI Functions) assumes the use of Docker to build and deploy function images. However, Fn Project also supports Podman as an alternative to Docker. When using Fn Project CLI version 0.6.12 and above, you can set a configuration setting to specify that you want to use Podman instead of Docker.
85
87
86
88
87
-
###Set Up and Configure Terraform
89
+
## Set Up and Configure Terraform
88
90
89
91
1. Complete the prerequisites described [here](https://github.com/cloud-partners/oci-prerequisites).
Please note that the `terraform.tfvars` file will include sensitive information and needs to be protected from unauthorized usage.
116
118
117
-
###Create the Resources
119
+
## Create the Resources
118
120
Run the following commands:
119
121
120
122
terraform init
121
123
terraform plan
122
124
terraform apply
123
125
124
-
###Test the stack
126
+
## Test the stack
125
127
126
128
You can test the stack by login/logout in the DB already integrated with Data Safe that generates DB audit log. The function will load the logs in 1 minutes and you can see it in Logging Console.
127
129
In Logging Console will be present a new Log Group (ex. loggr-test-eu-milan-1-fn_ds_to_ol-d54e) and relative 2 logs:
128
130
- Log with data from Data Safe: Log Type Custom (example log name: log-test-eu-milan-1-fn_ds_to_ol-d54e)
129
131
- Log execution function: Log Type Service (example log name: fn-datasafe-dbaudit-test-eu-milan-1-fn_ds_to_ol-d54e)
130
132
131
-
###Destroy the Deployment
133
+
## Destroy the Deployment
132
134
When you no longer need the deployment, you can run this command to destroy the resources:
133
135
134
136
terraform destroy
135
137
136
138
If there is error in destroying the object storage bucket, manually delete the bucket and run "terraform destroy" again.
137
139
138
-
###Test Environment
140
+
## Test Environment
139
141
We tested the terraform script in [Oracle Linux Cloud Developer Image](https://docs.oracle.com/en-us/iaas/oracle-linux/developer/index.htm) and Oracle Resource Manager.
0 commit comments