Oracle Cloud Infrastructure (via CCP) – Preview

Connect to OCI Streaming API to start collecting Event logs in Microsoft Sentinel

1) Log in to the OCI console and access the navigation menu. 2) In the navigation menu, go to "Analytics & AI" → "Streaming". 3) Click "Create Stream". 4) Select an existing "Stream Pool" or create a new one. 5) Enter the following details: - "Stream Name" - "Retention" - "Number of Partitions" - "Total Write Rate" - "Total Read Rate" (based on your data volume) 6) In the navigation menu, go to "Logging" → "Service Connectors". 7) Click "Create Service Connector". 8) Enter the following details: - "Connector Name" - "Description" - "Resource Compartment" 9) Select the "Source": "Logging". 10) Select the "Target": "Streaming". 11) (Optional) Configure "Log Group", "Filters", or use a "custom search query" to stream only the required logs. 12) Configure the "Target" by selecting the previously created stream. 13) Click "Create". 14) Follow the documentation to create a [Private Key and API Key Configuration File](https://docs.oracle.com/en-us/iaas/Content/API/Concepts/apisigningkey.htm).

Stream OCID

Service Endpoint Base URL

Cursor Type

Individual Cursor

Partition Id

Tenant ID

User ID

Pem File Content

Pass Phrase

Fingerprint