Oracle Server X2-4(formerly Sun Fire X4470 M2) ORACLE Integrated Lights Out Manager syslog mapping in rsa netwitness 11.7 log decoder

[pmodcnrma]

i am unable to find  which parser use for Oracle Server X2-4 (formerly Sun Fire X4470 M2) ORACLE Integrated Lights Out Manager syslog mapping in rsa netwitness 11.7 log decoder.

i am able forward syslog of Oracle server to my log collector by below mention steps

Configure Syslog IP Address for Event Logging

Before You Begin

• Admin (a) role is required in Oracle ILOM to modify syslog properties.

• To populate the IP address in one of the two Syslog properties, do the following:
  • Web:

    Click ILOM Administration > Notifications > Syslog.

    Type the IP address for the Syslog server in the Server 1 or Server 2 text box, and then click Save.

  • CLI:

    Type:

    set /SP | CMM/clients/syslog destination_ip=syslog_server_ipto ma

but  unable to find right parser for maping in my log decoder.

please guide me. 

@Anonymous 

@NaushadKasu1 

@PawanP 

@Parichay_Saxena 

@Davis 

@nwadmin @JeevanNarayanan 

@NW-IDD-Team 

@Anonymous 

@vijayakala

[JohnKisner]

pmodcnrma,

I do not think we have a log parser prebuilt for this particular log. All our log integration guides can be found at https://community.netwitness.com/t5/netwitness-platform-integrations/tkb-p/netwitness-integrations. If you search for Oracle in the upper left search field it will provide you all the guides that we have for Oracle along with what exactly each is for. If there is nothing there, you will have to create one on your own, engage our professional services, or open a Support case and requesting to see if our Content team can create one to be added into the product. Just realize that the last option can take months or more depending on the backlog of the Content team.

I hope this helps.