Introduction
New Features/Enhancements in 1.3.0:
1. Omega Core Audit App for Splunk highlighted.
The Omega Core Audit NT Agent version 1.3.0 now supports Omega Core Audit App for its Splunk operations. Support for existing Splunk app Omega Core Audit NT App for Splunk is recalled, as the Omega Core Audit NT App for Splunk is itself deprecated. All DATAPLUS products of the Omega Core Audit family (the full version/enterprise, the Light and the NT Agent) will be supported on the Splunk side solely by the Omega Core Audit App for Splunk.
2. Changes in the initialization parameters highlighted.
New parameters added
new parameters added: SP_Enabled, SP_DB_Name, SP_DB_Full_Name, SP_App_Schema, SP_Conn_Eval, SP_Charset and SP_NT_Fields
All parameters under Splunk section!
Existing parameters renamed
parameters renamed from-to: Ora_Ext_Adm Ora_Mon_Adm Ora_Ext_Std Ora_Mon_Std
The above parameters are found inside section Oracle
NT_Source SP_NT_Source NT_Timestamp SP_NT_Timestamp NT_Record_No SP_NT_Record_No NT_Rec_Max SP_NT_Rec_Max NT_Rec_Limit SP_NT_Rec_Limit
The above parameters are also moved from section Oracle to Splunk
3. Escape for special XML characters on Splunk
Escape for Splunk XML special characters < > & is applied before delivery to the fields eventually containing such.
4. Search Extra Options (SEO) fields available to Splunk dataset
SEO – Search Extra Options – same Security Categorization as of the Omega Core Audit application, are now available as part of the Splunk dataset