Table of Contents
Which OCI services can you use to connect to Splunk or other SIEMs?
Learn how Logging, Service Connector, Stream, Events, and Functions work together to integrate Oracle Cloud Infrastructure with third‑party SIEM solutions like Splunk, QRadar, and others.
Question
Which OCI Services can you leverage for integrating with a third-party SIEM solution?
A. Logging Service
B. Stream
C. All of the options
D. Service Connector
E. Events
F. Functions
Answer
C. All of the options
Explanation
Oracle Cloud Infrastructure provides several services that can be chained together to integrate OCI‑generated logs and events with a third‑party SIEM. The typical pattern is:
- Logging Service (A) collects audit, service, and custom logs from your tenancy.
- Service Connector (D) routes those logs from Logging into Stream (B).
- Events (E) can carry notifications and platform events into the same or parallel streams.
- Functions (F) can normalize, enrich, or transform data before it is written to Streaming or pushed to the SIEM.
In production designs, logs go from Logging → Service Connector → Stream, then from Stream into the SIEM (often via a log shipper). Functions and Events can supplement this by adding enriched security events or custom telemetry, so all of the listed services can be leveraged in a full integration end‑to‑end.
Oracle Cloud Infrastructure Cloud Adoption Framework and Essentials certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the OCI CAF graded quizzes and final assessments, earn OCI CAF digital credential and badge.