We are trying to index oracle database Audit Logs which is in .xml format in splunk. The docs section suggests it can be done through splunk universal forwarder and DB connect. But we're unable to see any templates in DB connect to query audit logs. We can see templates only for unified audit logs.
We are using DB Connect 3.1.3 with oracle add-on 3.7.0.
Is it possible to fetch logs through DB Connect or should we be using universal forwarders?
↧