Hunters allows you to connect data sources from different products through an intermediary Oracle Cloud bucket.
This process is comprised of the following steps:
Create an Oracle Cloud bucket
Direct logs to the bucket
Create a user with relevant permissions
Generate a secret key
Provide information to Hunters
💡Before you start
To complete the steps below you must have Oracle Cloud admin permissions.
STEP 1: Create an Oracle Cloud bucket
Follow this Oracle guide to create your bucket, which will eventually store the logs you want Hunters to ingest.
📘Note
Upon naming your bucket, make sure to follow the AWS S3 bucket naming conventions.
STEP 2: Direct logs to the bucket
📘 Note
Hunters currently supports the ingestion of several types of Oracle logs via an Oracle Cloud bucket. Click here to learn which oracle logs are supported.
STEP 2.1: Enable auditing
Oracle Cloud logs must be enabled before they can be gathered and transported to the bucket.
To enable logging for Oracle Audit Logs, follow this guide.
To enable logging for Oracle Service Logs, follow this guide.
STEP 2.2: Set up a connector
Once logging is enabled, create a connector to ship the logs to the bucket.
To set up a connector:
From you Oracle Cloud platform, search for Logging and then select Logging under the Services section.
From the side menu click Connectors and then Create Connector to open a new connector which will transfer the logs to the bucket.
Name the connector and select the relevant compartment.
Under the connector Source, select Logging and under Target, select Object Storage.
Under the Configure Source section, select the Log group and log you want the connector to ship to the bucket.
📘 Note
If this connector is shipping Audit Logs, make sure to select the Include Audit in subcompartments checkbox.
Scroll down to the Configure Target section to define the target bucket.
Select the relevant compartment and the bucket name you want logs to be shipped to.
Click Show additional options to open more setup fields.
Under Batch size, enter 1. Under Batch time, enter 420000 (this is equivalent to 7 minutes).
Click Create.
📘Service Logging
Make sure the following are performed:
Logging is enabled individually for each of the service logs you want to ship.
A connector is created for each of the service logs you want to connect to Hunters.
Services that will not have logging enabled and a connector created will not be exported to the bucket and ingested properly.
STEP 3: Create a user with relevant permissions
To allow Huners to access and retreive logs, you'll need to create a designated Oracle Cloud user, create a group, and provide the group with the appropriate permission policies.
STEP 3.1 Create a designated Oracle Cloud user
To create a user:
From the Oracle Cloud menu, navigate to Identity & Security > Identity > Domains.
Select the relevant domain from the list.
From the side menu, click Users.
Click Create user and fill in the required fields.
💡Tip
Give this user a distinctive name, such as HuntersUser, so you can find it easily in the following steps.
STEP 3.2 Create a designated Oracle Cloud group
After the Hunters user is set up, you'll need to create a new user group and add the previously created user to this group.
To create a group:
From the Oracle Cloud menu, navigate to Identity & Security > Identity > Domains.
Select the relevant domain from the list.
From the side menu, click Groups.
Click Create group and fill in the required fields.
From the Users list, find the previously created Hunters user and check its box to add it to the group.
Click Create to create the group.
STEP 3.3 Create a permission policy
After the Hunters user is assigned to the group, you'll need to give the group appropriate permissios to the bucket.
To set up a permission policy:
From the Oracle Cloud menu, navigate to Identity & Security > Identity > Policies.
Click Create policy and fill in the required fields.
Under Policy Builder, switch the toggle to Show manual editor.
Copy and paste the policy statement below into the policy box.
📘Note
Make sure to change the placeholder GroupName, CompartmentName, and BucketName to reflect your values.
Allow group GroupName to read buckets in compartment <CompartmentName> where target.bucket.name='BucketName' Allow group GroupName to read objects in compartment <CompartmentName> where target.bucket.name='BucketName'Click Create.
STEP 4: Generate a secret key and an access key
To allow Hunters to connect to your bucket with the designated user, you'll need to create a secret key and an access key for this user.
To generate a secret key and an access key:
Follow this Oracle guide to create a secret key and an access key.
Copy the secret key and access key and keep them in a safe place.
⚠️Attention
Your secret key will be presented only upon creation and will not be accessible after this time. Make sure to copy it and keep it in a safe place as you will need it in the next step of the process.
Click Close.
STEP 5: Provide information to Hunters
You'll now need to gather specific information items and provide them to Hunters using the Hunters portal.
On the Hunters platform, navigate to Data > Data sources.
Click ADD DATA SOURCES.
From the integration tiles, locate the product you want to connect.
From the Oracle Cloud tile, click Connect.
Enable the data type you want to connect by making sure the toggle is switched on.
For each data type enabled, provide the following information:
Bucket name - The Oracle bucket that contains the logs, as defined in step 2.
Bucket Namespace - Each Oracle bucket is attached to a top-level compartment called Namespace.
Prefix - In case the provided bucket contains prefixes that are not accessible within our product or you do not wish to be ingested, provide an example of an accessible prefix. The Prefix must be in the following format:
<base_prefix>.Bucket Region - The Oracle Cloud region in which your bucket is located.
💡Where can I find this information?
From your Oracle Cloud account, navigate to Storage > Object Storage and Archive Storage > Buckets.
Click on the bucket you want to connect.
See the image below to locate the information.
Provide your Oracle account's Secret key and Access key as defined in step 4.
Click Test Connection to make sure you supplied the correct information.
Once the connection is established, click Apply.