Obs5

observability-and-management/LICENSE.txt

@@ -0,0 +1,35 @@
+Copyright (c) 2026 Oracle and/or its affiliates.
+
+The Universal Permissive License (UPL), Version 1.0
+
+Subject to the condition set forth below, permission is hereby granted to any
+person obtaining a copy of this software, associated documentation and/or data
+(collectively the "Software"), free of charge and under any and all copyright
+rights in the Software, and any and all patent rights owned or freely
+licensable by each licensor hereunder covering either (i) the unmodified
+Software as contributed to or provided by such licensor, or (ii) the Larger
+Works (as defined below), to deal in both
+
+(a) the Software, and
+(b) any piece of software and/or hardware listed in the lrgrwrks.txt file if
+one is included with the Software (each a "Larger Work" to which the Software
+is contributed by such licensors),
+
+without restriction, including without limitation the rights to copy, create
+derivative works of, display, perform, and distribute the Software and make,
+use, sell, offer for sale, import, export, have made, and have sold the
+Software and the Larger Work(s), and to sublicense the foregoing rights on
+either these or other terms.
+
+This license is subject to the following condition:
+The above copyright notice and either this complete permission notice or at
+a minimum a reference to the UPL must be included in all copies or
+substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

observability-and-management/README.md

@@ -2,86 +2,86 @@
 
 The Observability and Manageability (O&M) platform is a suite of OCI services that provide visibility and insights across cloud-native and traditional technologies, whether in multicloud or on-premises environments. It offers broad, standards-based ecosystem support, helping enterprises manage diverse IT portfolios, reduce troubleshooting time, prevent outages, and align IT operations with business objectives.
 
- 
-AI agent skills for OCI observability  [Link](https://github.com/adibirzu/oci-skills)
-
   
 
 Reviewed: Reviewed: 17.06.2026
 
-  
+ 
 
 
+# Team Publications
 
 |Observability Service  |  Assets Page| 
 |---|---|
 | Logging Analytics  | [Link](./logging-analytics/README.md) | 
 | Logging  | [Link](./logging/README.md) |  
 | Database Management | [Link](./database-management/README.md)|  
 | Ops Insights  | [Link](./operations-insights/README.md) | 
-| Application Performance Monitoring | [Link](./application-performance-monitoring/README.md) |   
+| Application Performance Monitoring | [Link](./application-performance-monitoring/README.md) | 
+| OCI Monitoring | [Link](./oci-monitoring/README.md) |   
 | Organization Management | WIP |  
-| Cost Management | WIP |  
-| OCI Monitoring | WIP |  
+| Cost Management | [Link](./cost-management/README.md) |  
 
-  
 
-|Observability Targets  |  Assets Page|  
+ 
+
+|Observability by Targets  |  Assets Page|  
 |---|---|
 | Autonomous Database  | [Link](./database-observability/autonomous-observability-asset/README.md) | 
 | Database Cloud Service  | [Link](./database-observability/exacs-and-dbcs-observability-assets/README.md) |  
 | Exadata cloud@customer | [Link](./database-observability/exacc-observability-assets/README.md) |  
 | Exadata Cloud Service  | [Link](./database-observability/exacs-and-dbcs-observability-assets/README.md)|  
 | Automated Observability Enablement for External Oracle Databases| [Link](./database-observability/external-database-enablement/README.md) | 
-| Automated Observability Enablement for OCI Cloud-Native Databases| [Link](https://github.com/adibirzu/oci-dbman-opsi) | 
+| Automated Observability Enablement for OCI Cloud-Native Databases| [Link](/observability-and-management/assets/oci-dbman-opsi/README.md) | 
 | DB@GCP  | [WIP](https://docs.oracle.com/en-us/iaas/Content/database-at-gcp/gcpmn-monitor.html)|  
 | DB@Azure |[WIP](https://docs.oracle.com/en-us/iaas/Content/database-at-azure/azumn-monitor.html)| 
-| DB@AWS | [Link](./oracleaws/README.md)|
+| DB@AWS | [Link](./database-observability/oracleaws/README.md)|
 | EBS | [Link](https://docs.oracle.com/en/solutions/enable-om-stack-monitoring-ebs/index.html#GUID-6D9E091F-3614-4E3E-A082-5FC82B27CD7C) | 
-| Webogic | [Link](https://karthicin.medium.com/how-to-monitor-weblogic-in-oci-and-collect-logs-for-analysis-7c5007426010) |
-| Apex | [Link](https://blogs.oracle.com/observability/oci-observability-for-oracle-apex) | 
-| OCI CI Container Instance | [Link](https://github.com/adibirzu/oci-container-monitoring)  |
-| .... |  |
-| .... |  | 
+| Observability for Golden Gate Cloud|[Link](/observability-and-management/assets/oci-observability-for-goldengate-cloud/README.md)|
+| Observability for APEX |[Link](/observability-and-management/assets/oci-observability-for-oracle-apex/README.md)|
+| OCI CI Container Instance |WIP  |
+| Monitor Weblogic in OCI | [Link](/observability-and-management//assets/monitor-weblogic-in-oci-and-collect-logs/README.md) |
+
+
+ 
+
+
+|Observability Platform Asset  |  Assets Page| 
+|---|---|
+| OCI Observability and Management best practices and checklist|[Link](https://blogs.oracle.com/observability/post/oci-observability-checklist)|
+| Observability Design Guide  | [Link](https://obs.octodemo.cloud/) |  
+| AI agent skills for OCI observability  | [Link](https://github.com/adibirzu/oci-skills) | 
+| OCI Management Dashboard Automation|[Link](/observability-and-management/assets/oci-management-dashboard-automation/README.md)|
+| Multi-cloud observability using OCI Monitoring|[Link](/observability-and-management/assets/multi-cloud-observability-using-oci-monitoring/README.md)|
+| How and why to run Wazuh in OCI|[Link](/observability-and-management/assets/why-and-how-to-run-wazuh-on-oci/README.md)|
+| OCI Metric Report Generator|[Link](/observability-and-management/assets/oci-metrics-report/README.md)|
+| Using Plumi to create OCI Resources|[Link](/observability-and-management/assets/using-pulumi-to-create-oci-resources/README.md)|
+| Wazuh running in OCI | [Link](/observability-and-management/assets/why-and-how-to-run-wazuh-on-oci/README.md)|
+| Use Cloud Guard Insight Recipes to monitor Windows Instances against Interesting Windows Event IDs for Malware/General Investigation |[Link](/observability-and-management/assets/cloud-guard-insight-recipes-windows-event-ids/README.md)|
+
+
+
 
   
 
+| 3rd Party integration  |  Assets Page| 
+|---|---| 
+| Stream Azure Event Hub logs into Log Analytics|[Link](./assets/azurelogs2oci/README.md)|
+| Stream GCP logs into Log Analytics|[Link](./assets/gcplogs2oci/README.md)|
+| OCI Logs to Splunk from OCI Object Storage|[Link](./assets/get-logs-into-splunk-from-oci-object-storage/README.md)|
+| Stream OCI Logs to Splunk|[Link](./assets/stream-oci-logs-to-splunk/README.md)|
+| OCI Logs to IBM QRadar|[Link](./assets/integrating-oci-logs-into-ibm-qradar-siem/README.md)|
+| OCI Prometheus and OTEL Monitoring|WIP|
+| Prometheus exporter in OCI |[Link](./assets/oracle-cloud-prometheus-exporter/README.md)|
+| OCI Logs to Sentinel|[Link](./assets/send-oci-logs-to-azure-sentinel-using-oracle-functions/README.md)|
+| ServiceNow integration with OCI using secrets stored in OCI Vault to create incidents|[Link](./assets/servicenow-oci-vault-incidents/README.md)|
+| ServiceNow integration with Oracle cloud alarms|[Link](./assets/servicenow-integration-with-oracle-cloud-alarms/README.md)|
 
 
-# Team Publications
 
-## Blogs
-
-- [OCI Observability and Management best practices and checklist](https://blogs.oracle.com/observability/post/oci-observability-checklist)
-- [Use Cloud Guard Insight Recipes to monitor Windows Instances against Interesting Windows Event IDs for Malware/General Investigation ](https://learnoci.cloud/use-cloud-guard-insight-recipes-to-monitor-windows-instances-against-interesting-windows-event-ids-7ef796174d37?source=friends_link&sk=682c057a61e7c2707df1895420649c2c)
-- [Stream OCI logs to Splunk](https://blogs.oracle.com/cloud-infrastructure/post/stream-oci-logs-kafka-connect-splunk)
-- [Why and how to run Wazuh on OCI](https://learnoci.cloud/why-and-how-to-run-wazuh-on-oci-6b39174b5d2d?sk=2b9185ad216f0cedbf80b2e5a8705c96)
-- [Oracle Cloud Prometheus Exporter](https://karthicin.medium.com/oracle-cloud-prometheus-exporter-c78543473d7)
-- [How to integrate Service Now with Oracle cloud Alarms](https://karthicin.medium.com/servicenow-integration-with-oracle-cloud-d3d7a1c6f68a)
-- [Oracle Cloud Observability Terraform module](https://karthicin.medium.com/oracle-cloud-observability-terraform-module-d549132892cb)
-- [Useful cli commands](https://karthicin.medium.com/useful-oci-cli-commands-f6e05b3e5eef)
-- [How to install Grafana in OCI and send OCI metrics to it](https://learnoci.cloud/how-to-install-grafana-in-oci-and-send-oci-metrics-to-it-c2582ebdfda5)
-- [How to use Templates for Console Dashboards](https://learnoci.cloud/how-to-use-templates-for-console-dashboards-3e30890e7f31)
-- [How to get logs into Splunk from OCI obj storage](https://learnoci.cloud/how-to-get-logs-into-splunk-from-oci-object-storage-7304fbf467ea?sk=6539609ba70a068fe52f39fb079df32b)
-- [Enhanced Support in OCI Console — Create Service Requests (SR) in Child Tenancies](https://learnoci.cloud/enhanced-support-in-oci-console-create-service-requests-sr-in-child-tenancies-a327cb9d2c10)
-- [Supercharge your Oracle Enterprise Manager Cloud Control 13.5 management, by using the REST API calls](https://medium.com/@eugenesimos/supercharge-your-oracle-enterprise-manager-cloud-control-13-5-d264e7371ec9)
-- [ServiceNow integration with OCI using secrets stored in OCI Vault to create incidents](https://karthicin.medium.com/servicenow-integration-with-oracle-cloud-d3d7a1c6f68a)
-- [How to enable OCI Observability Services on Exadata Cloud@Customer](https://medium.com/@erikasciunzi/how-to-enable-oci-observability-services-on-exadata-cloud-customer-9501dcaa356e)
-- [Using Pulumi to create OCI resource](https://karthicin.medium.com/using-pulumi-to-create-oci-resource-1e685a7d25fb)
-- [How to monitor Weblogic in OCI and collect logs for analysis](https://karthicin.medium.com/how-to-monitor-weblogic-in-oci-and-collect-logs-for-analysis-7c5007426010)
-- [How to run Velociraptor in OCI Container Instance](https://learnoci.cloud/how-to-run-velociraport-in-oci-container-instance-7adfb75d1df8)
-- [Multi-cloud observability using OCI Monitoring](https://karthicin.medium.com/multi-cloud-observability-using-oci-monitoring-8fa87f9c5e84)
-- [How to enable OCI Observability for Golden Gate Cloud](https://medium.com/@erikasciunzi/how-to-enable-observability-for-golden-gate-cloud-06a9702c9313)
-- [How to enable OCI Observability on Oracle APEX](https://learnoci.cloud/oci-observability-for-oracle-apex-f25369bd771a)
-- [Cost comparison in Oracle Cloud](https://karthicin.medium.com/cost-comparison-in-oracle-cloud-166f4b12dcd3)
-- [Automation of OCI Event Rule using OpenTofu/Terraform](https://karthicin.medium.com/automation-of-oci-event-rule-using-opentofu-terraform-dc3946ae7bb6)
-- [How to run Game of Active Directory in OCI — Part 1](https://learnoci.cloud/how-to-run-game-of-active-directory-in-oci-part-1-5be51387a7a2)
-- [How to monitor your OCI environment using Dynatrace](https://learnoci.cloud/how-to-monitor-your-oci-environment-using-dynatrace-8c23f376659b)
-- [OCI Management Dashboard Automation](https://karthicin.medium.com/oci-management-dashboard-automation-ea4f45cac24b)
-- [Create Dynamic Links for OCI Stack Monitoring Alarms and More](https://medium.com/@michtoeth/create-dynamic-links-for-oci-stack-monitoring-alarms-and-more-ca8e0e6fb7a5)
-- [Integrating OCI Logs into IBM QRadar SIEM](https://medium.com/@guna.sekar.sun/integrating-oci-logs-in-ibm-qradar-siem-9dcea5ed036a)
-- [How to build an Advanced Observability solution in OCI for Security purposes](https://learnoci.cloud/start-building-an-advanced-observability-solution-in-oci-for-security-purposes-using-native-and-e2ed5d806eff)
-- [Send OCI Logs to Azure Sentinel using Oracle Functions](https://medium.com/@rishabhghosh24/send-oci-logs-to-azure-sentinel-using-oracle-functions-b55c9b352d71)
+  
+
+
 
 ## Cloud Coaching Clinics (Videos)
 
@@ -98,8 +98,7 @@ Reviewed: Reviewed: 17.06.2026
 
 # Useful Links
 
-- [PMs GitHub repo](https://github.com/oracle-quickstart/oci-o11y-solutions)
-  - Observability and Manageability Product Managers GitHub
+- [Product Managers GitHub repo](https://github.com/oracle-quickstart/oci-o11y-solutions)
 - [O&M Oracle Blogs](https://blogs.oracle.com/observability/)
 - [Documentation](https://docs.oracle.com/en-us/iaas/Content/cloud-adoption-framework/monitoring-and-observability.htm)
 - [OCI Monitoring](https://docs.oracle.com/en-us/iaas/Content/Monitoring/home.htm)

observability-and-management/application-performance-monitoring/README.md

@@ -12,16 +12,12 @@ Reviewed: 12.03.2026
 
 # Team Publications
 
-- [OCI APM and Logging Analytics](https://blogs.oracle.com/observability/post/connect-apm-with-log-analytics-and-more)
-- [Create dynamic links from OCI APM to other services for efficient workflows](https://blogs.oracle.com/observability/post/connect-apm-with-log-analytics-and-more)
-- [Using Stack Monitoring to monitor a Windows Instance](https://learnoci.cloud/using-stack-monitoring-to-monitor-a-windows-instance-d5f0d64f5494)
-- [Delete Multiple Resources in OCI Stack Monitoring with the Python SDK](https://medium.com/@michtoeth/delete-multiple-resources-in-oci-stack-monitoring-with-the-python-sdk-60fa23970ac1)
-- [Process monitoring using Stack Monitoring](https://karthicin.medium.com/process-monitoring-using-stack-monitoring-99908cec31a8)
-- [Storing APM Synthetic monitor error logs in OCI Logging](https://karthicin.medium.com/storing-apm-synthetic-monitor-error-logs-in-oci-logging-c2296ce6072f)
-- [How to use OCI APM in Kubernetes Environment for Java Application](https://karthicin.medium.com/how-to-use-oci-apm-in-kubernetes-environment-for-java-application-56de2c770a69)
-- [Use Postman request code snippets for Synthetic Monitoring in OCI Application Performance Monitoring](https://medium.com/@michtoeth/use-postman-request-code-snippets-for-synthetic-monitoring-in-oci-application-performance-1fa91d51677c)
-- [.NET Application monitoring using OCI APM](https://karthicin.medium.com/net-application-monitoring-using-oci-apm-7896706ed508)
-- [OCI APM for JD Edwards: Pinpoint performance bottlenecks in business-critical services](https://blogs.oracle.com/observability/post/enable-oci-apm-for-oracle-jd-edwards)
+
+|APM Asset| Asset page|
+|---|---|
+| OCI APM and Log Analytics improve stack visibility with continuous workflows|[Link](https://blogs.oracle.com/observability/post/connect-apm-with-log-analytics-and-more)|
+| Create dynamic links from OCI APM to other services for efficient workflows|[Link](https://blogs.oracle.com/observability/post/connect-apm-with-log-analytics-and-more)|
+| OCI APM for JD Edwards: Pinpoint performance bottlenecks in business-critical services|[Link](https://blogs.oracle.com/observability/post/enable-oci-apm-for-oracle-jd-edwards)|
 
 
 # Useful Links

observability-and-management/assets/auto-enable-hosts-for-operation-insights-in-oci/README.md

@@ -0,0 +1,43 @@
+# Auto enable hosts for Operation Insights in OCI
+
+Operation Insights is an OCI(Oracle Cloud Infrastructure) native service that provides holistic insight into database and host resource utilisation and capacity.
+
+Previously to enable OCI compute hosts for operation insights you have to add it manually via OCI console or enable it via REST API.
+Operation Insights → Administration → Host Fleet → Add hosts
+
+![Picture 8](./images/image-01.png)
+
+Add hosts to operation insights via OCI console
+
+With the new feature you can automatically enable operation insights for OCI compute in a compartment when its created.
+
+Navigate to Operation Insights → Administration → Host Fleet
+
+![Picture 7](./images/image-02.png)
+
+Create the required policies using Policy Advisor for compute or you can create the policy via console as well.For example:
+
+Allow any-user to use instance-family in compartment X where ALL { request.principal.type = ‘opsihostinsight’ }
+Allow any-user to manage management-agents in compartment X where ALL { request.principal.type = ‘opsihostinsight’ }
+
+![Picture 6](./images/image-03.png)
+
+Once you launch a compute instance the workflow will trigger and enable the management agent and the operation insight plugin will get deployed.
+
+After few mins you can see the host is added to Operation Insights and wait for max 24 hours to see the data .
+
+![Picture 4](./images/image-04.png)
+
+You can use prebuilt dashboards available or can create your own customised ones.
+
+![Picture 3](./images/image-05.png)
+
+You can create customised widgets from Host Explorer .For example to know top 10 process having higher CPU usage you can write a query and save it.
+
+![Picture 2](./images/image-06.png)
+
+![Picture 1](./images/image-07.png)
+
+You can get weekly report by using [News Report feature](https://blogs.oracle.com/cloud-infrastructure/post/operations-insights-actionable-workload-news) as well.
+
+To learn more about other features please refer the operation insights [blog](https://blogs.oracle.com/observability/category/oem-operations-insights).

observability-and-management/assets/azurelogs2oci/.env.example

@@ -0,0 +1,44 @@
+# Copy to .env.local and fill in your values. Keep real secrets only in .env.local, which is ignored by git.
+
+# Azure Event Hubs (used by Function and drain script)
+EventHubsConnectionString='Endpoint=sb://<namespace>.servicebus.windows.net/;SharedAccessKeyName=RootManageSharedAccessKey;SharedAccessKey=...'
+EventHubConsumerGroup='$Default'
+EventHubName='insights-activity-logs'           # single hub used by the Function trigger
+EventHubNamesCsv='insights-activity-logs'       # optional: used by helper scripts for multi-hub drain
+EVENTHUB_RG='StreamingLogsOCI_group'
+EVENTHUB_NAMESPACE='ocitests'
+EVENTHUB_NAME='insights-activity-logs'     # must match EventHubName (the hub, not the namespace)
+
+# OCI Streaming target
+OCI_MESSAGE_ENDPOINT='https://cell-1.streaming.<region>.oci.oraclecloud.com'
+OCI_STREAM_OCID='ocid1.stream.oc1..example'
+
+# OCI API signing keys
+user='ocid1.user.oc1..example'
+key_content='-----BEGIN PRIVATE KEY----- ... -----END PRIVATE KEY-----' # keep only the key block; remove trailing comments
+pass_phrase=''
+fingerprint='<fingerprint>' # must match the private key above
+tenancy='ocid1.tenancy.oc1..example'
+region='us-ashburn-1'
+
+# OCI identifiers (used by setup_oci_log_analytics.sh and teardown)
+OCI_USER_OCID='ocid1.user.oc1..example'
+OCI_FINGERPRINT='<fingerprint>'            # same as 'fingerprint' above
+OCI_TENANCY_OCID='ocid1.tenancy.oc1..example'
+OCI_REGION='us-ashburn-1'
+
+# OCI Streaming resource tracking (populated by setup scripts)
+OCI_STREAM_POOL_ID=''
+OCI_STREAM_POOL_NAME='MultiCloud_Log_Pool'
+
+# OCI Log Analytics (used by setup_oci_log_analytics.sh)
+OCI_COMPARTMENT_ID='ocid1.compartment.oc1..example'
+OCI_LOG_ANALYTICS_NAMESPACE=''              # auto-detected if empty
+OCI_LOG_GROUP_NAME='AzureLogs'
+OCI_LOG_GROUP_ID=''
+OCI_SCH_NAME='Azure-Stream-to-LogAnalytics'
+OCI_SCH_ID=''
+
+# Optional script tuning
+COUNT=0
+INACTIVITY_TIMEOUT=30

observability-and-management/assets/azurelogs2oci/.gitattributes

@@ -0,0 +1,2 @@
+# Auto detect text files and perform LF normalization
+* text=auto