What Changed

The Oracle Cloud Infrastructure data connector was enhanced with Group Cursor support for OCI Streaming, providing customers the option to consume from group cursors instead of individual partition cursors.

Security Impact (Visibility & Fidelity)

Previously, the connector only supported Individual Cursor mode, limiting customers to consuming from specific OCI Streaming partitions. The new Group Cursor capability enables:

  • Consumption from multiple partitions within a consumer group
  • Better load balancing across streaming partitions
  • Feature parity with the legacy Function App connector
  • Improved scalability for high-volume OCI audit and security log ingestion

Organizations using OCI Streaming for security event collection can now choose the cursor type that best fits their partition management requirements, ensuring no gaps in log visibility due to partition-specific consumption limitations.

Implementation Details

The connector definition and polling configuration were updated to support a configurable cursor type selection between IndividualCursor and GroupCursor modes, with corresponding UI elements and validation logic to guide users through the appropriate configuration choices.

Affected Files

Solutions/Oracle Cloud Infrastructure/Data Connectors/Oracle_Cloud_Infrastructure_CCP/OCI_DataConnector_DCR.json
Solutions/Oracle Cloud Infrastructure/Data Connectors/Oracle_Cloud_Infrastructure_CCP/OCI_DataConnector_DataConnectorDefinition.json
Solutions/Oracle Cloud Infrastructure/Data Connectors/Oracle_Cloud_Infrastructure_CCP/OCI_DataConnector_PollingConfig.json
Solutions/Oracle Cloud Infrastructure/Package/testParameters.json
(packaging artefacts: 3.1.0.zip, ReleaseNotes.md, Solution_OCILogs.json, createUiDefinition.json, mainTemplate.json)