How to resolve Sprinto check for capturing flow logs on Oracle Cloud Virtual Cloud Network (VCN)
About
Sprinto check: VCN flow logs should be captured
Monitoring the count of virtual flow logs on Oracle Cloud is essential for maintaining network visibility, detecting potential security threats, and ensuring compliance with regulatory requirements.
Purpose
The purpose of monitoring virtual flow logs count on Oracle Cloud is to:
Network Visibility: Gain insights into network traffic patterns, source, and destination IP addresses, and protocols by monitoring virtual flow logs count across your Oracle Cloud infrastructure.
Security Monitoring: Detect and investigate security incidents, anomalies, and suspicious activities by analyzing changes in virtual flow logs count and identifying potential threats or unauthorized access attempts.
Compliance Requirements: Meet regulatory compliance requirements and industry standards by ensuring comprehensive logging and monitoring of network traffic using virtual flow logs.
How to resolve
Follow the steps below to capture Oracle Cloud Virtual Cloud Networks (VCN) flow logs.
Before you begin
Ensure you have “Admin” access to the Oracle Cloud account where you wish to capture the virtual flow logs.
Capturing flow logs
Log in to Oracle Cloud using your credentials.
From the main menu, go to Networking > Flow logs.
On Flow logs configuration page, click Enable flow logs.
On Enable flow logs page, enter a file name and select a log group to capture the flow logs. If you don’t have a log group created previously, you can create a new one.
Select a log capture filter from the drop-down menu or create a new one if required. Click Next.
On Enable points page, click Add Enablement points.
On the pop-up window, select Virtual Cloud Network and click Continue.
On Add Virtual Cloud Network Enablement Points page, select your desired VCN and click Add enablement point.
Click Next.
Review your selections, and click Enable flow logs.
Once the alert is created, Sprinto retrieves the change from your integrated Oracle Cloud account on Sprinto, and sets the assigned check status to "Passing."
If you need any assistance with the Sprinto check, please contact Sprinto Support.
Last updated