jdbc {
    type => "ash_oracle"
    jdbc_validate_connection => true
    jdbc_connection_string => "jdbc:oracle:thin:@xxxxx:4321/1234"
    jdbc_user => "aaaaaa"
    jdbc_password => "qwertyu"
    jdbc_driver_library => "/etc/logstash/jdbc/ojdbc8.jar"
    jdbc_driver_class => "Java::oracle.jdbc.driver.OracleDriver"
    statement => "SELECT * FROM dba_audit_trail WHERE sessionid > :sql_last_value"
    last_run_metadata_path => "/mnt/elk_backups/logstash_last_run/logstash-oradb.lastrun"
    use_column_value => true
    tracking_column => sessionid
    record_last_run => true
    clean_run => false
    jdbc_paging_enabled => true
    jdbc_page_size => 1000
    sql_log_level => debug
    schedule => "* * * * *"
  }