AIX

My windows developers want to scan an Oracle log live; samba won't give them what they want. They are trying to scan logs with Microsoft Operations Monitoring. I set up syslog to export to the external windows server and that is working, but is there a way to send the updates to the oracle log to the syslog?
Someone suggested a named pipe. Seems like a hack, but they want to do this through their MOM product.

This would depend on the Oracle software. Syslog is a set of system functions which are called by the software to create syslog entries. These entries are received by the syslogd and written to the various destinations, depending on the configuration in "/etc/syslog.conf". To generate a syslog entry is the job of the application (or "facility" in syslogs wording), the syslogd just directs this to some place.

I'm no Oracle expert, so i don't know if Oracle can do this. It should be possible to write a small daemon program doing exactly what you want via syslogs mechanisms (that is: using the correct system calls, ...) in case Oracel provides no such service. I suppose this would be a better solution than to "mechanically" write into some file with some syslog-unaware means.

Forcefully overriding system mechanisms will cause trouble sooner or later, is my experience.

I hope this helps.

bakunin

In reality for Oracle they ought to be using the Oracle Enterprise Manager to manage their Oracle setup, not crappy windows tools like MOM - which isn't fit for the purpose that they want to use here.

Some Security Auditing for Oracle can be written to the syslog using the AUDIT_SYSLOG_LEVEL parameter.

That said if the want to monitor a regular oracle log to debug stuff, that isn't the purpose of the syslog - or MOM. It would be easier for all concerned to teach them:

Code:

cd /oracle/adm/log
tail -f logfile

Thanks, I ended up writing a dumb script to scan their log and send error messages to syslog using logger, and directing syslog to their MOM server.
It does what they want, and involves the windows team so they can keep their jobs.