Hello. I just wanted to post some information related to some things I have been attempting to make work in MARS related to Oracle database logging. Currently, MARS will only support one database instance of an Oracle database per 'reporting IP' on a server. If you have one physical server and multiple database instances, you cannot support logging from all of them into MARS. I have tried a few different ways to make this work, but I have been unsuccessful so far. I attempted to created the host OS separately and then create multiple 'generic' hosts with the Oracle database 'sw app' applied, but I can still only get one instance to report correctly.
I just wanted to post this so no one else wastes several days trying to get this to work. I have a few TAC cases open related to this and SQL server. The response from Cisco is that they know about this limitation for Oracle and that there is a feature request for this and they are adding my TAC case to it.
I'm not an Oracle guru so perhaps I'm using the term instance incorrectly. In the situation I'm describing they run differen't Oracle database on the same server but on differn't ports. MARS seems to only allow one Oracle database entry per host. I want to add multiple Oracle database entries (on differn't ports) per host.
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...