forked from docs/doc-exports
First upload for DBSS UMN.
Reviewed-by: Belejkanic, Lukas <lukas.belejkanic@t-systems.com> Co-authored-by: Li, Qiao <qiaoli@huawei.com> Co-committed-by: Li, Qiao <qiaoli@huawei.com>
This commit is contained in:
parent
254ba5a6c7
commit
6eff629de3
622
docs/dbss/umn/ALL_META.TXT.json
Normal file
622
docs/dbss/umn/ALL_META.TXT.json
Normal file
File diff suppressed because it is too large
Load Diff
560
docs/dbss/umn/CLASS.TXT.json
Normal file
560
docs/dbss/umn/CLASS.TXT.json
Normal file
File diff suppressed because it is too large
Load Diff
3
docs/dbss/umn/PARAMETERS.txt
Normal file
3
docs/dbss/umn/PARAMETERS.txt
Normal file
@ -0,0 +1,3 @@
|
||||
version=""
|
||||
language="en-us"
|
||||
type=""
|
34
docs/dbss/umn/dbss_01_0001.html
Normal file
34
docs/dbss/umn/dbss_01_0001.html
Normal file
@ -0,0 +1,34 @@
|
||||
<a name="dbss_01_0001"></a><a name="dbss_01_0001"></a>
|
||||
|
||||
<h1 class="topictitle1">DBSS</h1>
|
||||
<div id="body1481514797769"><p id="dbss_01_0001__p1982481116188">Database Security Service (DBSS) is an intelligent database security service. Based on the machine learning mechanism and big data analytics technologies, it can audit your databases, detect SQL injection attacks, and identify high-risk operations.</p>
|
||||
<div class="section" id="dbss_01_0001__section195094179222"><h4 class="sectiontitle">Supported Databases</h4><div class="p" id="dbss_01_0001__p769021792219">Database audit provides the audit function in out-of-path mode for the following databases on the management console:<ul id="dbss_01_0001__ul10690141782216"><li id="dbss_01_0001__li7689141716223">RDS instances</li><li id="dbss_01_0001__li6689201702214">Databases built on ECS</li><li id="dbss_01_0001__li8689217192213">Databases built on BMS</li></ul>
|
||||
</div>
|
||||
<div class="p" id="dbss_01_0001__p148274368422">Database audit supports the following database types and versions.
|
||||
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="dbss_01_0001__table1221454114112" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Database types and versions supported by database audit</caption><thead align="left"><tr id="dbss_01_0001__row1221594114115"><th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.2.3.1.2.3.1.1"><p id="dbss_01_0001__p22156416413">Database Type</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.2.3.1.2.3.1.2"><p id="dbss_01_0001__p1721584104114">Edition</p>
|
||||
</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody><tr id="dbss_01_0001__row82155413418"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.2.3.1.2.3.1.1 "><p id="dbss_01_0001__p721514184116">GaussDB(for MYSQL)</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.2.3.1.2.3.1.2 "><p id="dbss_01_0001__p121534174110">MYSQL 8.0</p>
|
||||
</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0001__section684864019232"><h4 class="sectiontitle">Service Features</h4><ul id="dbss_01_0001__ul38843461436"><li id="dbss_01_0001__li137853510503">Back up and restore database audit logs and meet the audit data retention requirements.</li><li id="dbss_01_0001__li1518155119481">Monitor risks, sessions, session distribution, and SQL distribution in real time.</li><li id="dbss_01_0001__li1465102815486">Report alarms for risky behaviors and attacks and responds to database attacks in real time.</li><li id="dbss_01_0001__li141771348164315">Locate internal violations and improper operations and keep data assets secure.</li></ul>
|
||||
<div class="p" id="dbss_01_0001__p684162804413">Deployed in out-of-path pattern, database audit can perform flexible audit on the database without affecting user services.<ul id="dbss_01_0001__ul1224439194513"><li id="dbss_01_0001__li357064865913">Monitors database login, operation type (data definition, operation, and control), and operation object based on risky operations to effectively audit the database.</li><li id="dbss_01_0001__li653619409452">Analyzes risks, sessions, and SQL injection to help you master the database situation in a timely manner.</li><li id="dbss_01_0001__li10536154034512">Provides a report template library to generate daily, weekly, or monthly audit reports according to your configurations. Sends real-time alarm notifications to help you obtain audit reports in a timely manner.</li></ul>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div>
|
||||
<div class="familylinks">
|
||||
<div class="parentlink"><strong>Parent topic:</strong> <a href="dbss_01_0138.html">Overview</a></div>
|
||||
</div>
|
||||
</div>
|
||||
|
17
docs/dbss/umn/dbss_01_0097.html
Normal file
17
docs/dbss/umn/dbss_01_0097.html
Normal file
@ -0,0 +1,17 @@
|
||||
<a name="dbss_01_0097"></a><a name="dbss_01_0097"></a>
|
||||
|
||||
<h1 class="topictitle1">FAQs</h1>
|
||||
<div id="body8662426"></div>
|
||||
<div>
|
||||
<ul class="ullinks">
|
||||
<li class="ulchildlink"><strong><a href="dbss_01_0269.html">Functions</a></strong><br>
|
||||
</li>
|
||||
<li class="ulchildlink"><strong><a href="dbss_01_0114.html">Operations</a></strong><br>
|
||||
</li>
|
||||
<li class="ulchildlink"><strong><a href="dbss_01_0323.html">Troubleshooting</a></strong><br>
|
||||
</li>
|
||||
<li class="ulchildlink"><strong><a href="dbss_01_0341.html">Logs</a></strong><br>
|
||||
</li>
|
||||
</ul>
|
||||
</div>
|
||||
|
21
docs/dbss/umn/dbss_01_0114.html
Normal file
21
docs/dbss/umn/dbss_01_0114.html
Normal file
@ -0,0 +1,21 @@
|
||||
<a name="dbss_01_0114"></a><a name="dbss_01_0114"></a>
|
||||
|
||||
<h1 class="topictitle1">Operations</h1>
|
||||
<div id="body1508807787590"></div>
|
||||
<div>
|
||||
<ul class="ullinks">
|
||||
<li class="ulchildlink"><strong><a href="dbss_01_0283.html">How Do I Disable SSL for a Database?</a></strong><br>
|
||||
</li>
|
||||
<li class="ulchildlink"><strong><a href="dbss_01_0233.html">How Do I Check the Version of Database Audit?</a></strong><br>
|
||||
</li>
|
||||
<li class="ulchildlink"><strong><a href="dbss_01_0234.html">How Do I View All Alarms in Database Audit?</a></strong><br>
|
||||
</li>
|
||||
<li class="ulchildlink"><strong><a href="dbss_01_0300.html">How Do I Audit an RDS Database Accessed through Intranet (by Applications Off the Cloud)?</a></strong><br>
|
||||
</li>
|
||||
</ul>
|
||||
|
||||
<div class="familylinks">
|
||||
<div class="parentlink"><strong>Parent topic:</strong> <a href="dbss_01_0097.html">FAQs</a></div>
|
||||
</div>
|
||||
</div>
|
||||
|
21
docs/dbss/umn/dbss_01_0138.html
Normal file
21
docs/dbss/umn/dbss_01_0138.html
Normal file
@ -0,0 +1,21 @@
|
||||
<a name="dbss_01_0138"></a><a name="dbss_01_0138"></a>
|
||||
|
||||
<h1 class="topictitle1">Overview</h1>
|
||||
<div id="body39451090"></div>
|
||||
<div>
|
||||
<ul class="ullinks">
|
||||
<li class="ulchildlink"><strong><a href="dbss_01_0001.html">DBSS</a></strong><br>
|
||||
</li>
|
||||
<li class="ulchildlink"><strong><a href="dbss_01_0237.html">Functions</a></strong><br>
|
||||
</li>
|
||||
<li class="ulchildlink"><strong><a href="dbss_01_0238.html">Advantages</a></strong><br>
|
||||
</li>
|
||||
<li class="ulchildlink"><strong><a href="dbss_01_0181.html">Deployment Architecture</a></strong><br>
|
||||
</li>
|
||||
<li class="ulchildlink"><strong><a href="dbss_01_0268.html">Editions</a></strong><br>
|
||||
</li>
|
||||
<li class="ulchildlink"><strong><a href="dbss_01_0313.html">Constraints</a></strong><br>
|
||||
</li>
|
||||
</ul>
|
||||
</div>
|
||||
|
55
docs/dbss/umn/dbss_01_0142.html
Normal file
55
docs/dbss/umn/dbss_01_0142.html
Normal file
@ -0,0 +1,55 @@
|
||||
<a name="dbss_01_0142"></a><a name="dbss_01_0142"></a>
|
||||
|
||||
<h1 class="topictitle1">Auditable Operations</h1>
|
||||
<div id="body1524537597090"><p id="dbss_01_0142__p1357272213597">Cloud Trace Service (CTS) records all cloud service operations on DBSS, including requests initiated from the management console or open APIs and responses to the requests, for tenants to query, audit, and trace.</p>
|
||||
<p id="dbss_01_0142__p8060118"><a href="#dbss_01_0142__table52008441163754">Table 1</a> lists DBSS operations recorded by CTS.</p>
|
||||
|
||||
<div class="tablenoborder"><a name="dbss_01_0142__table52008441163754"></a><a name="table52008441163754"></a><table cellpadding="4" cellspacing="0" summary="" id="dbss_01_0142__table52008441163754" frame="border" border="1" rules="all"><caption><b>Table 1 </b>DBSS operations that can be recorded by CTS</caption><thead align="left"><tr id="dbss_01_0142__en-us_topic_0111166559_row35586605163754"><th align="left" class="cellrowborder" valign="top" width="35.55%" id="mcps1.3.3.2.4.1.1"><p id="dbss_01_0142__en-us_topic_0111166559_p63942737163754">Operation</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="23.150000000000002%" id="mcps1.3.3.2.4.1.2"><p id="dbss_01_0142__en-us_topic_0111166559_p16413837105650">Resource Type</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="41.3%" id="mcps1.3.3.2.4.1.3"><p id="dbss_01_0142__en-us_topic_0111166559_p11065000163754">Trace Name</p>
|
||||
</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody><tr id="dbss_01_0142__en-us_topic_0111166559_row22991462155616"><td class="cellrowborder" valign="top" width="35.55%" headers="mcps1.3.3.2.4.1.1 "><p id="dbss_01_0142__en-us_topic_0111166559_p65646959155616">Creating an instance</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="23.150000000000002%" headers="mcps1.3.3.2.4.1.2 "><p id="dbss_01_0142__en-us_topic_0111166559_p59026800165451">dbss</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="41.3%" headers="mcps1.3.3.2.4.1.3 "><p id="dbss_01_0142__en-us_topic_0111166559_p27686863155616">createInstance</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0142__en-us_topic_0111166559_row61812375155616"><td class="cellrowborder" valign="top" width="35.55%" headers="mcps1.3.3.2.4.1.1 "><p id="dbss_01_0142__en-us_topic_0111166559_p52180953155616">Deleting an instance</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="23.150000000000002%" headers="mcps1.3.3.2.4.1.2 "><p id="dbss_01_0142__en-us_topic_0111166559_p4786566165455">dbss</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="41.3%" headers="mcps1.3.3.2.4.1.3 "><p id="dbss_01_0142__en-us_topic_0111166559_p1643209155616">deleteInstance</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0142__en-us_topic_0111166559_row38095708155616"><td class="cellrowborder" valign="top" width="35.55%" headers="mcps1.3.3.2.4.1.1 "><p id="dbss_01_0142__en-us_topic_0111166559_p51158909155616">Starting an instance</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="23.150000000000002%" headers="mcps1.3.3.2.4.1.2 "><p id="dbss_01_0142__en-us_topic_0111166559_p12500923155616">dbss</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="41.3%" headers="mcps1.3.3.2.4.1.3 "><p id="dbss_01_0142__en-us_topic_0111166559_p9980484155616">startInstance</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0142__en-us_topic_0111166559_row36966343155616"><td class="cellrowborder" valign="top" width="35.55%" headers="mcps1.3.3.2.4.1.1 "><p id="dbss_01_0142__en-us_topic_0111166559_p20363548155616">Stopping an instance</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="23.150000000000002%" headers="mcps1.3.3.2.4.1.2 "><p id="dbss_01_0142__en-us_topic_0111166559_p54846190155616">dbss</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="41.3%" headers="mcps1.3.3.2.4.1.3 "><p id="dbss_01_0142__en-us_topic_0111166559_p27978950155616">stopInstance</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0142__en-us_topic_0111166559_row62477845155616"><td class="cellrowborder" valign="top" width="35.55%" headers="mcps1.3.3.2.4.1.1 "><p id="dbss_01_0142__en-us_topic_0111166559_p5733644155616">Restarting an instance</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="23.150000000000002%" headers="mcps1.3.3.2.4.1.2 "><p id="dbss_01_0142__en-us_topic_0111166559_p45509463155616">dbss</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="41.3%" headers="mcps1.3.3.2.4.1.3 "><p id="dbss_01_0142__en-us_topic_0111166559_p4123095155616">rebootInstance</p>
|
||||
</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
</div>
|
||||
<div></div>
|
||||
|
13
docs/dbss/umn/dbss_01_0144.html
Normal file
13
docs/dbss/umn/dbss_01_0144.html
Normal file
@ -0,0 +1,13 @@
|
||||
<a name="dbss_01_0144"></a><a name="dbss_01_0144"></a>
|
||||
|
||||
<h1 class="topictitle1">Viewing Tracing Logs</h1>
|
||||
<div id="body1524537597090"><p id="dbss_01_0144__p132501813413">After you enable CTS, the system starts recording operations on DBSS. Operation records for the last seven days can be viewed on the CTS console.</p>
|
||||
<div class="section" id="dbss_01_0144__section159610420302"><h4 class="sectiontitle">Viewing a DBSS Trace on the CTS Console</h4><ol id="dbss_01_0144__ol1194546193110"><li id="dbss_01_0144__li394596113118"><span>Log in to the management console.</span></li><li id="dbss_01_0144__li42331433151114"><span>In the navigation pane on the left, click <span><img id="dbss_01_0144__image7233233121114" src="en-us_image_0000001570429773.png"></span> and choose <strong id="dbss_01_0144__b14615159104620">Management & Deployment</strong> > <strong id="dbss_01_0144__b1361559204612">Cloud Trace Service</strong>.</span></li><li id="dbss_01_0144__li8240924153816"><span>Choose <strong id="dbss_01_0144__b42162954165740">Trace List</strong> in the navigation pane.</span></li><li id="dbss_01_0144__li1199125415539"><span>Click <strong id="dbss_01_0144__b13683746114710">Region</strong> at the top of the <strong id="dbss_01_0144__b1468415465470">Trace List</strong> page to set the corresponding conditions.</span><p><div class="p" id="dbss_01_0144__p941145514539">The following four filters are available:<ul class="subitemlist" id="dbss_01_0144__ul4173195016221"><li id="dbss_01_0144__li25120207165721"><span class="parmname" id="dbss_01_0144__parmname1622918592477"><b>Trace Type</b></span>, <span class="parmname" id="dbss_01_0144__parmname18230859124713"><b>Trace Source</b></span>, <span class="parmname" id="dbss_01_0144__parmname1923185944716"><b>Resource Type</b></span>, and <span class="parmname" id="dbss_01_0144__parmname92316592470"><b>Search By</b></span><ul id="dbss_01_0144__ul138358421566"><li id="dbss_01_0144__li422110403562">Select the filter from the drop-down list. Set <strong id="dbss_01_0144__b842352706163855">Trace Source</strong> to <strong id="dbss_01_0144__b842352706163859">DBSS</strong>.</li><li id="dbss_01_0144__li5224174025618">When you select <strong id="dbss_01_0144__b842352706153249">Trace name</strong> for <strong id="dbss_01_0144__b1803301537153246">Search By</strong>, you also need to select a specific trace name.</li><li id="dbss_01_0144__li222614017560">When you select <strong id="dbss_01_0144__b1369790384153349">Resource ID</strong> for <strong id="dbss_01_0144__b1590770393153349">Search By</strong>, you also need to select or enter a specific resource ID.</li><li id="dbss_01_0144__li1822754014568">When you select <strong id="dbss_01_0144__b565110228153447">Resource name</strong> for <strong id="dbss_01_0144__b1329536783153447">Search By</strong>, you also need to select or enter a specific resource name.</li></ul>
|
||||
</li><li id="dbss_01_0144__li16990144143538"><strong id="dbss_01_0144__b842352706153633">Operator</strong>: Select a specific operator (a user other than tenant).</li><li id="dbss_01_0144__li2227630716221"><strong id="dbss_01_0144__b842352706153531">Trace Rating</strong>: Available options include <strong id="dbss_01_0144__b1447794024144642">All trace status</strong>, <strong id="dbss_01_0144__b842352706153558">normal</strong>, <strong id="dbss_01_0144__b84235270615364">warning</strong>, and <strong id="dbss_01_0144__b842352706153613">incident</strong>. You can only select one of them.</li><li id="dbss_01_0144__li2484476616221">In the upper right corner of the page, you can query traces in the last 1 hour, last 1 day, last 1 week, or within a customized period.</li></ul>
|
||||
</div>
|
||||
</p></li><li id="dbss_01_0144__li1326512181411"><span>Click <strong id="dbss_01_0144__b842352706164122">Query</strong>.</span></li><li id="dbss_01_0144__li11445413104011"><span>Click <span><img id="dbss_01_0144__image134427196485" src="en-us_image_0210925109.png"></span> on the left of a trace to expand its details.</span><p><div class="fignone" id="dbss_01_0144__fig17669149112013"><span class="figcap"><b>Figure 1 </b>Expanding trace details</span><br><span><img id="dbss_01_0144__image277616258384" src="en-us_image_0217009691.png"></span></div>
|
||||
</p></li><li id="dbss_01_0144__li157172804213"><span>Click <strong id="dbss_01_0144__b842352706154059">View Trace</strong> in the <strong id="dbss_01_0144__b18195288151449">Operation</strong> column. On the displayed <strong id="dbss_01_0144__b25439609151522">View Trace</strong> dialog box shown in <a href="#dbss_01_0144__fig9310171012116">Figure 2</a>, the trace structure details are displayed.</span><p><div class="fignone" id="dbss_01_0144__fig9310171012116"><a name="dbss_01_0144__fig9310171012116"></a><a name="fig9310171012116"></a><span class="figcap"><b>Figure 2 </b>Viewing a trace</span><br><span><img id="dbss_01_0144__image1357913497381" src="en-us_image_0217011475.png"></span></div>
|
||||
</p></li></ol>
|
||||
</div>
|
||||
</div>
|
||||
|
15
docs/dbss/umn/dbss_01_0181.html
Normal file
15
docs/dbss/umn/dbss_01_0181.html
Normal file
@ -0,0 +1,15 @@
|
||||
<a name="dbss_01_0181"></a><a name="dbss_01_0181"></a>
|
||||
|
||||
<h1 class="topictitle1">Deployment Architecture</h1>
|
||||
<div id="body1575546415665"><p id="dbss_01_0181__p4831121922611">Database audit is deployed in out-of-path pattern. It can audit databases built on ECS, BMS and RDS on the management console.</p>
|
||||
<p id="dbss_01_0181__p147681817172412"><a href="#dbss_01_0181__fig87561152182512">Figure 1</a> shows the database audit deployment architecture.</p>
|
||||
<div class="fignone" id="dbss_01_0181__fig87561152182512"><a name="dbss_01_0181__fig87561152182512"></a><a name="fig87561152182512"></a><span class="figcap"><b>Figure 1 </b>Database audit deployment architecture</span><br><span><img id="dbss_01_0181__image7552154095917" src="en-us_image_0273147489.png"></span></div>
|
||||
<p id="dbss_01_0181__p149006527207">The agent deployment for database audit is as follows:</p>
|
||||
<ul id="dbss_01_0181__ul14617334192712"><li id="dbss_01_0181__li1353645316328">For databases built on ECS or BMS, agents must be deployed on the database side.</li><li id="dbss_01_0181__en-us_topic_0174227115_li111236226611">For relational databases, agents must be deployed on the application or proxy side.</li></ul>
|
||||
</div>
|
||||
<div>
|
||||
<div class="familylinks">
|
||||
<div class="parentlink"><strong>Parent topic:</strong> <a href="dbss_01_0138.html">Overview</a></div>
|
||||
</div>
|
||||
</div>
|
||||
|
59
docs/dbss/umn/dbss_01_0185.html
Normal file
59
docs/dbss/umn/dbss_01_0185.html
Normal file
@ -0,0 +1,59 @@
|
||||
<a name="dbss_01_0185"></a><a name="dbss_01_0185"></a>
|
||||
|
||||
<h1 class="topictitle1">Applying for a Database Audit Instance</h1>
|
||||
<div id="body1543921760962"><p id="dbss_01_0185__p8060118">Before using the database audit function, you need to apply for a database audit instance.</p>
|
||||
<p id="dbss_01_0185__p1864141312205">Ensure the VPC of the database audit instance is the same as that of the node (application side or database side) where you plan to install the database audit agent. Otherwise, the instance will be unable to connect to the agent or perform audit.</p>
|
||||
<div class="section" id="dbss_01_0185__section25462022953"><h4 class="sectiontitle">Impact on the System</h4><p id="dbss_01_0185__p172581026552">Database audit works in out-of-path mode, which neither affects user services nor conflicts with the local audit tools.</p>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0185__section985752412160"><h4 class="sectiontitle">Procedure</h4><ol id="dbss_01_0185__ol27393641713"><li id="dbss_01_0185__li9739265174"><span>Log in to the management console.</span></li><li id="dbss_01_0185__li167011539110"><span>Select a region, click <span><img id="dbss_01_0185__image12421104763114" src="en-us_image_0000001078852871.png"></span>, and choose <span class="menucascade" id="dbss_01_0185__menucascade10788113118587"><b><span class="uicontrol" id="dbss_01_0185__uicontrol157871331185817">Security</span></b> > <b><span class="uicontrol" id="dbss_01_0185__uicontrol2787183155810">Database Security Service</span></b></span>. The <strong id="dbss_01_0185__b17789113165811">Dashboard</strong> page is displayed.</span></li><li id="dbss_01_0185__li768511563415"><span>In the upper right corner, click <strong id="dbss_01_0185__b4870162483218">Apply for Database Audit</strong>.</span></li><li id="dbss_01_0185__li841872822012"><span>On the <strong id="dbss_01_0185__b6575133285118">Apply for Database Audit</strong> page, select an <strong id="dbss_01_0185__b937516146526">AZ</strong> and a <strong id="dbss_01_0185__b22021519205211">Type</strong>.</span><p><ul id="dbss_01_0185__ul5682127115312"><li id="dbss_01_0185__li1468216795314"><strong id="dbss_01_0185__b154673172515">AZ</strong>: If resources are sold out in an AZ, <strong id="dbss_01_0185__b16557102915486">Sold out in this AZ</strong> will be displayed for the AZ. In this case, select another AZ.</li><li id="dbss_01_0185__li468212765318"><strong id="dbss_01_0185__b202793196513">Type</strong>: For details about the supported editions, see <a href="dbss_01_0268.html">Editions</a>.</li></ul>
|
||||
</p></li><li id="dbss_01_0185__li8101851162519"><span>Set database audit parameters. See <a href="#dbss_01_0185__table4295843716304">Table 1</a>.</span><p>
|
||||
<div class="tablenoborder"><a name="dbss_01_0185__table4295843716304"></a><a name="table4295843716304"></a><table cellpadding="4" cellspacing="0" summary="" id="dbss_01_0185__table4295843716304" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameters</caption><thead align="left"><tr id="dbss_01_0185__row4338993216304"><th align="left" class="cellrowborder" valign="top" width="21%" id="mcps1.3.4.2.5.2.1.2.4.1.1"><p id="dbss_01_0185__p2492361616304">Parameter</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="61%" id="mcps1.3.4.2.5.2.1.2.4.1.2"><p id="dbss_01_0185__p554697916304">Description</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="18%" id="mcps1.3.4.2.5.2.1.2.4.1.3"><p id="dbss_01_0185__p4665219216304">Example Value</p>
|
||||
</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody><tr id="dbss_01_0185__row3896937416304"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.4.2.5.2.1.2.4.1.1 "><p id="dbss_01_0185__p43233810163143">VPC</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="61%" headers="mcps1.3.4.2.5.2.1.2.4.1.2 "><p id="dbss_01_0185__p43931877142852">You can select an existing VPC, or click <strong id="dbss_01_0185__b178311374449">View VPC</strong> to create one.</p>
|
||||
<div class="note" id="dbss_01_0185__note157916469615"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="dbss_01_0185__ul5557526601"><li id="dbss_01_0185__li15557172611015">Select the VPC of the node (application or database side) where you plan to install the agent.</li><li id="dbss_01_0185__li108201328902">To change the VPC of a DBSS instance, unsubscribe from it and apply for a new one.</li></ul>
|
||||
</div></div>
|
||||
<p id="dbss_01_0185__p12277754163143">For more information about VPC, see <i><cite id="dbss_01_0185__cite6bdbb2f580f94e6b8fc93a2812240e3c165818">Virtual Private Cloud User Guide</cite></i>.</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.4.2.5.2.1.2.4.1.3 "><p id="dbss_01_0185__p54974002163143">vpc-sec</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0185__row1319658616304"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.4.2.5.2.1.2.4.1.1 "><p id="dbss_01_0185__p12055799163143">Security Group</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="61%" headers="mcps1.3.4.2.5.2.1.2.4.1.2 "><p id="dbss_01_0185__p36995663163143">The security group configured for the instance is displayed on the page. Once a security group is selected for an instance, the instance is protected by the access rules of this security group.</p>
|
||||
<p id="dbss_01_0185__p2552109019107">For more information about security groups, see <i><cite id="dbss_01_0185__citea39774eb944545aaa8fbdd7e18ee75fb165818">Virtual Private Cloud User Guide</cite></i>.</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.4.2.5.2.1.2.4.1.3 "><p id="dbss_01_0185__p43858740163143">sg</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0185__row16837105815489"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.4.2.5.2.1.2.4.1.1 "><p id="dbss_01_0185__p29202425163143">Subnet</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="61%" headers="mcps1.3.4.2.5.2.1.2.4.1.2 "><p id="dbss_01_0185__p3006831191155">The <span class="uicontrol" id="dbss_01_0185__uicontrol4161106184719"><b>Subnet</b></span> drop-down list displays all available subnets.</p>
|
||||
<p id="dbss_01_0185__p16586204163143">For more information about subnets, see <i><cite id="dbss_01_0185__citeddcfafb7c03243539366c1b345242f29165818">Virtual Private Cloud User Guide</cite></i>.</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.4.2.5.2.1.2.4.1.3 "><p id="dbss_01_0185__p1305255163143">public_subnet</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0185__row2550998316304"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.4.2.5.2.1.2.4.1.1 "><p id="dbss_01_0185__p5304271416304">Instance Name</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="61%" headers="mcps1.3.4.2.5.2.1.2.4.1.2 "><p id="dbss_01_0185__p6040559116304">Custom name of the instance</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.4.2.5.2.1.2.4.1.3 "><p id="dbss_01_0185__p64106164142025">DBSS-test</p>
|
||||
</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
</p></li><li id="dbss_01_0185__li16929134152420"><span>Confirm the configuration and click <strong id="dbss_01_0185__b6684816133417">Next</strong>.</span></li><li id="dbss_01_0185__li18913151418261"><span>On the details confirmation page, you can click .</span><p><p id="dbss_01_0185__p1293822231814">On the <strong id="dbss_01_0185__b10216747173817">Instances</strong> page, you can view the created database audit instance.</p>
|
||||
<p id="dbss_01_0185__p14817144718541">If the <strong id="dbss_01_0185__b11826510495">Status</strong> is <strong id="dbss_01_0185__b18832051204915">Running</strong>, you have successfully applied for the database audit instance.</p>
|
||||
</p></li></ol>
|
||||
</div>
|
||||
</div>
|
||||
|
42
docs/dbss/umn/dbss_01_0186.html
Normal file
42
docs/dbss/umn/dbss_01_0186.html
Normal file
@ -0,0 +1,42 @@
|
||||
<a name="dbss_01_0186"></a><a name="dbss_01_0186"></a>
|
||||
|
||||
<h1 class="topictitle1">Step 1: Add a Database</h1>
|
||||
<div id="body1543804188566"><p id="dbss_01_0186__p12822115513175">Database audit supports databases built on ECS, BMS, and RDS on the console. After applying for a database audit instance, you need to add the database to be audited to the instance.</p>
|
||||
<div class="section" id="dbss_01_0186__section070891116319"><h4 class="sectiontitle">Prerequisites</h4><p id="dbss_01_0186__p1521752504815">You have applied for a database audit instance and the <strong id="dbss_01_0186__b842352706144426">Status</strong> is <strong id="dbss_01_0186__b842352706144432">Running</strong>.</p>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0186__section10161839244"><h4 class="sectiontitle">Adding a Database</h4><ol id="dbss_01_0186__ol18449141653"><li id="dbss_01_0186__li1630423615515"><span>Log in to the management console.</span></li><li id="dbss_01_0186__li19643994480"><span>Select a region, click <span><img id="dbss_01_0186__image12421104763114" src="en-us_image_0000001074398929.png"></span>, and choose <span class="menucascade" id="dbss_01_0186__menucascade1215612612394"><b><span class="uicontrol" id="dbss_01_0186__uicontrol415682653911">Security</span></b> > <b><span class="uicontrol" id="dbss_01_0186__uicontrol2156182620396">Database Security Service</span></b></span>. The <strong id="dbss_01_0186__b6156926113915">Dashboard</strong> page is displayed.</span></li><li id="dbss_01_0186__li152451031134813"><span>In the navigation tree on the left, choose <strong id="dbss_01_0186__b9461111131518">Databases</strong>.</span></li><li id="dbss_01_0186__li1754213127415"><span>In the <strong id="dbss_01_0186__b165261850126">Instance</strong> drop-down list, select the instance whose database is to be added.</span></li><li id="dbss_01_0186__li942112188"><span>Click <strong id="dbss_01_0186__b564212110391">Add Database</strong>.</span></li><li id="dbss_01_0186__li17742410123"><span>In the dialog box displayed, set the database information. In the dialog box displayed, set the database information, as shown in <a href="#dbss_01_0186__fig425613335010">Figure 1</a>. For details about related parameters, see <a href="#dbss_01_0186__table17265155610212">Table 1</a>.</span><p><div class="fignone" id="dbss_01_0186__fig425613335010"><a name="dbss_01_0186__fig425613335010"></a><a name="fig425613335010"></a><span class="figcap"><b>Figure 1 </b>Add Database dialog box</span><br><span><img id="dbss_01_0186__image18294172910118" src="en-us_image_0000001347187761.png"></span></div>
|
||||
|
||||
<div class="tablenoborder"><a name="dbss_01_0186__table17265155610212"></a><a name="table17265155610212"></a><table cellpadding="4" cellspacing="0" summary="" id="dbss_01_0186__table17265155610212" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameters</caption><thead align="left"><tr id="dbss_01_0186__row1826612561523"><th align="left" class="cellrowborder" valign="top" width="33.33333333333333%" id="mcps1.3.3.2.6.2.2.2.4.1.1"><p id="dbss_01_0186__p1313918561941">Parameter</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="33.33333333333333%" id="mcps1.3.3.2.6.2.2.2.4.1.2"><p id="dbss_01_0186__p4266145615212">Description</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="33.33333333333333%" id="mcps1.3.3.2.6.2.2.2.4.1.3"><p id="dbss_01_0186__p92661856528">Example</p>
|
||||
</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody><tr id="dbss_01_0186__row1426611561826"><td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.3.2.6.2.2.2.4.1.1 "><p id="dbss_01_0186__p1726615610216">Database Type</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.3.2.6.2.2.2.4.1.2 "><p id="dbss_01_0186__p15266185616215">Supported database type. You can select RDS.</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.3.2.6.2.2.2.4.1.3 "><p id="dbss_01_0186__p1126675615210">RDS database</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0186__row20266175614217"><td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.3.2.6.2.2.2.4.1.1 "><p id="dbss_01_0186__p15266656728">Database Type</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.3.2.6.2.2.2.4.1.2 "><p id="dbss_01_0186__p3179233718">Supported database type. You can select GaussDB(for MySQL).</p>
|
||||
<p id="dbss_01_0186__p18424132712816">You do not need to install an agent on the database.</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.3.2.6.2.2.2.4.1.3 "><p id="dbss_01_0186__p20266556628">GaussDB(for MySQL)</p>
|
||||
</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
</p></li><li id="dbss_01_0186__li1163137281"><span>Click <strong id="dbss_01_0186__b1745418581481">OK</strong>. Then a database in the <strong id="dbss_01_0186__b11460165814818">Disabled</strong> state has been added to the database list. See <a href="#dbss_01_0186__fig977312338295">Figure 2</a>. You do not need to manually install an agent.</span><p><div class="fignone" id="dbss_01_0186__fig977312338295"><a name="dbss_01_0186__fig977312338295"></a><a name="fig977312338295"></a><span class="figcap"><b>Figure 2 </b>Successfully adding a database</span><br><span><img id="dbss_01_0186__image391392601218" src="en-us_image_0000001293789358.png"></span></div>
|
||||
<div class="note" id="dbss_01_0186__note1815655481018"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="dbss_01_0186__ul63955044219"><li id="dbss_01_0186__li33965034215">After adding the database, confirm that the database information is correct. If the database information is incorrect, locate the target database and click <strong id="dbss_01_0186__b171641932389">Delete</strong> in the <strong id="dbss_01_0186__b916493214816">Operation</strong> column, and add the database again.</li></ul>
|
||||
</div></div>
|
||||
</p></li></ol>
|
||||
</div>
|
||||
</div>
|
||||
<div></div>
|
||||
|
84
docs/dbss/umn/dbss_01_0190.html
Normal file
84
docs/dbss/umn/dbss_01_0190.html
Normal file
@ -0,0 +1,84 @@
|
||||
<a name="dbss_01_0190"></a><a name="dbss_01_0190"></a>
|
||||
|
||||
<h1 class="topictitle1">Adding Audit Scope</h1>
|
||||
<div id="body1544587094894"><p id="dbss_01_0190__p13516181572">By default, database audit complies with a full audit rule, which is used to audit all databases that are successfully connected to database audit. You can also add audit scope and specify the databases to be audited.</p>
|
||||
<div class="notice" id="dbss_01_0190__note1267117234531"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><p id="dbss_01_0190__p11671152315539">By default, the full audit rule takes effect even if other rules exist. To make another audit rule take effect, disable the full audit rule first.</p>
|
||||
</div></div>
|
||||
<div class="section" id="dbss_01_0190__section070891116319"><h4 class="sectiontitle">Prerequisites</h4><ul id="dbss_01_0190__ul13013312410"><li id="dbss_01_0190__li752019581501">You have applied for a database audit instance and the <strong id="dbss_01_0190__en-us_topic_0144723368_b1155217115215">Status</strong> is <strong id="dbss_01_0190__en-us_topic_0144723368_b185532015214">Running</strong>.</li></ul>
|
||||
<ul id="dbss_01_0190__ul2059001124716"><li id="dbss_01_0190__li1610855617422">Database audit has been enabled.</li></ul>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0190__section13224195251412"><h4 class="sectiontitle">Procedure</h4><ol id="dbss_01_0190__ol18449141653"><li id="dbss_01_0190__li29607283452"><span>Log in to the management console.</span></li><li id="dbss_01_0190__li199221335798"><span>Select a region, click <span><img id="dbss_01_0190__dbss_01_0204_dbss_01_0186_image12421104763114" src="en-us_image_0000001074398929.png"></span>, and choose <span class="menucascade" id="dbss_01_0190__dbss_01_0204_dbss_01_0186_menucascade1215612612394"><b><span class="uicontrol" id="dbss_01_0190__dbss_01_0204_dbss_01_0186_uicontrol415682653911">Security</span></b> > <b><span class="uicontrol" id="dbss_01_0190__dbss_01_0204_dbss_01_0186_uicontrol2156182620396">Database Security Service</span></b></span>. The <strong id="dbss_01_0190__dbss_01_0204_dbss_01_0186_b6156926113915">Dashboard</strong> page is displayed.</span></li><li id="dbss_01_0190__li192117711183"><span>In the navigation tree, choose <strong id="dbss_01_0190__b121256507268">Rules</strong>.</span></li><li id="dbss_01_0190__li18168173601816"><span>In the <strong id="dbss_01_0190__b17101213111114">Instance</strong> drop-down list, select an instance to add audit scope.</span></li><li id="dbss_01_0190__li4174122125815"><span><span class="uicontrol" id="dbss_01_0190__uicontrol979519419124"><b>Add Audit Scope</b></span> above the audit scope list.</span><p><div class="note" id="dbss_01_0190__note206851641154719"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="dbss_01_0190__ul791433515542"><li id="dbss_01_0190__li189144352546">By default, database audit complies with a <strong id="dbss_01_0190__b19256559113116">full audit rule</strong>, which is used to audit all databases that are connected to the database audit instance. This audit rule is enabled by default. You can disable it but cannot delete it.</li><li id="dbss_01_0190__li779393716542">To make a custom rule take effect, disable the full audit rule first.</li></ul>
|
||||
</div></div>
|
||||
</p></li><li id="dbss_01_0190__li157459715312"><span>In the displayed dialog box, set the audit scope, as shown in <a href="#dbss_01_0190__fig97457713117">Figure 1</a>. For details about related parameters, see <a href="#dbss_01_0190__table474657203117">Table 1</a>. </span><p><div class="fignone" id="dbss_01_0190__fig97457713117"><a name="dbss_01_0190__fig97457713117"></a><a name="fig97457713117"></a><span class="figcap"><b>Figure 1 </b>Add Audit Scope dialog box</span><br><span><img id="dbss_01_0190__image17342174234217" src="en-us_image_0000001173318613.png"></span></div>
|
||||
|
||||
<div class="tablenoborder"><a name="dbss_01_0190__table474657203117"></a><a name="table474657203117"></a><table cellpadding="4" cellspacing="0" summary="" id="dbss_01_0190__table474657203117" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameters</caption><thead align="left"><tr id="dbss_01_0190__row274619703110"><th align="left" class="cellrowborder" valign="top" width="21.02%" id="mcps1.3.4.2.6.2.2.2.4.1.1"><p id="dbss_01_0190__p117461775311">Parameter</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="60.980000000000004%" id="mcps1.3.4.2.6.2.2.2.4.1.2"><p id="dbss_01_0190__p1374617711318">Description</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="18%" id="mcps1.3.4.2.6.2.2.2.4.1.3"><p id="dbss_01_0190__p1774612703119">Example Value</p>
|
||||
</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody><tr id="dbss_01_0190__row57471572315"><td class="cellrowborder" valign="top" width="21.02%" headers="mcps1.3.4.2.6.2.2.2.4.1.1 "><p id="dbss_01_0190__p17471476318">Name</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="60.980000000000004%" headers="mcps1.3.4.2.6.2.2.2.4.1.2 "><p id="dbss_01_0190__p1874710773117">Name of the custom audit scope</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.4.2.6.2.2.2.4.1.3 "><p id="dbss_01_0190__p197474723112">audit00</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0190__row10747976313"><td class="cellrowborder" valign="top" width="21.02%" headers="mcps1.3.4.2.6.2.2.2.4.1.1 "><p id="dbss_01_0190__p67471679316">Database Name</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="60.980000000000004%" headers="mcps1.3.4.2.6.2.2.2.4.1.2 "><p id="dbss_01_0190__p127476712317">Database to be added to the audit scope</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.4.2.6.2.2.2.4.1.3 "><p id="dbss_01_0190__p138931609912">db03</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0190__row1135581116013"><td class="cellrowborder" valign="top" width="21.02%" headers="mcps1.3.4.2.6.2.2.2.4.1.1 "><p id="dbss_01_0190__p73461641445">Operations</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="60.980000000000004%" headers="mcps1.3.4.2.6.2.2.2.4.1.2 "><p id="dbss_01_0190__p203461464418">Audited operation type. It can be <strong id="dbss_01_0190__b15708114110296">Login</strong> or <strong id="dbss_01_0190__b1453224411294">Operation</strong>.</p>
|
||||
<p id="dbss_01_0190__p1215625184417">When you select the <strong id="dbss_01_0190__b121941749112912">Operation</strong> check box, you can select <strong id="dbss_01_0190__b1519954912911">All operations</strong> or the operations in <strong id="dbss_01_0190__b5199144915295">DDL</strong>, <strong id="dbss_01_0190__b82001249122919">DML</strong>, and <strong id="dbss_01_0190__b2200184920297">DCL</strong>.</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.4.2.6.2.2.2.4.1.3 "><p id="dbss_01_0190__p1034618424413">Login</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0190__row2448195934818"><td class="cellrowborder" valign="top" width="21.02%" headers="mcps1.3.4.2.6.2.2.2.4.1.1 "><p id="dbss_01_0190__p06582816496">Database Account</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="60.980000000000004%" headers="mcps1.3.4.2.6.2.2.2.4.1.2 "><p id="dbss_01_0190__p13658198134910">(Optional) Database username.</p>
|
||||
<p id="dbss_01_0190__p18198122513477">You can specify multiple accounts, separated by commas (,).</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.4.2.6.2.2.2.4.1.3 "><p id="dbss_01_0190__p865888154913">-</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0190__row20913184143815"><td class="cellrowborder" valign="top" width="21.02%" headers="mcps1.3.4.2.6.2.2.2.4.1.1 "><p id="dbss_01_0190__p091384133810">Exception IP Address</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="60.980000000000004%" headers="mcps1.3.4.2.6.2.2.2.4.1.2 "><p id="dbss_01_0190__p15913144133816">(Optional) IP addresses that do not need to be audited.</p>
|
||||
<div class="note" id="dbss_01_0190__note15267592417"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="dbss_01_0190__p71941675114">If an IP address is set as both a source and an exception IP address, the IP address will not be audited.</p>
|
||||
</div></div>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.4.2.6.2.2.2.4.1.3 "><p id="dbss_01_0190__p199131547386">-</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0190__row57476763110"><td class="cellrowborder" valign="top" width="21.02%" headers="mcps1.3.4.2.6.2.2.2.4.1.1 "><p id="dbss_01_0190__p474713714310">Source IP Address</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="60.980000000000004%" headers="mcps1.3.4.2.6.2.2.2.4.1.2 "><p id="dbss_01_0190__p774719773115">(Optional) IP address or IP address range used for accessing the database to be audited</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.4.2.6.2.2.2.4.1.3 "><p id="dbss_01_0190__p167478793119">-</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0190__row57473714311"><td class="cellrowborder" valign="top" width="21.02%" headers="mcps1.3.4.2.6.2.2.2.4.1.1 "><p id="dbss_01_0190__p174716713117">Source Port</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="60.980000000000004%" headers="mcps1.3.4.2.6.2.2.2.4.1.2 "><p id="dbss_01_0190__p16747147153113">(Optional) Port number used for accessing the database to be audited</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.4.2.6.2.2.2.4.1.3 "><p id="dbss_01_0190__p1374715733116">-</p>
|
||||
</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
</p></li><li id="dbss_01_0190__li8278104118326"><span>Click <span class="uicontrol" id="dbss_01_0190__uicontrol949455211328"><b>OK</b></span>.</span><p><p id="dbss_01_0190__p213282819333">When the audit scope is added successfully, it is displayed in the audit scope list in the state of <strong id="dbss_01_0190__b124915525315">Enabled</strong>.</p>
|
||||
</p></li></ol>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0190__section1436832312226"><h4 class="sectiontitle">Related Operations</h4><p id="dbss_01_0190__p16930153852815">In addition to adding the audit scope, you can enable or disable SQL injection detection and add risky operations to set audit rules for database audit.</p>
|
||||
</div>
|
||||
</div>
|
||||
|
84
docs/dbss/umn/dbss_01_0191.html
Normal file
84
docs/dbss/umn/dbss_01_0191.html
Normal file
@ -0,0 +1,84 @@
|
||||
<a name="dbss_01_0191"></a><a name="dbss_01_0191"></a>
|
||||
|
||||
<h1 class="topictitle1">Enabling or Disabling SQL Injection Detection</h1>
|
||||
<div id="body1544595038629"><p id="dbss_01_0191__p1017817191211">SQL injection detection is enabled by default. You can disable or enable the detection rules.</p>
|
||||
<div class="notice" id="dbss_01_0191__note1487435121118"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><p id="dbss_01_0191__p1874158110">One piece of audited data can match only one SQL injection detection rule.</p>
|
||||
</div></div>
|
||||
<div class="section" id="dbss_01_0191__section070891116319"><h4 class="sectiontitle">Prerequisites</h4><ul id="dbss_01_0191__ul13013312410"><li id="dbss_01_0191__li13101311175116">You have applied for a database audit instance and the <strong id="dbss_01_0191__en-us_topic_0144723368_b1155217115215">Status</strong> is <strong id="dbss_01_0191__en-us_topic_0144723368_b185532015214">Running</strong>.</li><li id="dbss_01_0191__li16584192324813">You can enable SQL injection detection when the status is <strong id="dbss_01_0191__b13859634813">Disabled</strong>.</li><li id="dbss_01_0191__li34313113498">You can disable SQL injection detection when the status is <strong id="dbss_01_0191__b1816620254920">Enabled</strong>.</li></ul>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0191__section1466619111369"><h4 class="sectiontitle">Disabling SQL Injection Detection</h4><p id="dbss_01_0191__p158374116466">SQL injection detection is enabled by default. You can disable the detection rules as required. When an SQL injection detection rule is disabled, the audit rule does not take effect.</p>
|
||||
<ol id="dbss_01_0191__ol18449141653"><li id="dbss_01_0191__li29607283452"><span>Log in to the management console.</span></li><li id="dbss_01_0191__li199221335798"><span>Select a region, click <span><img id="dbss_01_0191__dbss_01_0204_dbss_01_0186_image12421104763114" src="en-us_image_0000001074398929.png"></span>, and choose <span class="menucascade" id="dbss_01_0191__dbss_01_0204_dbss_01_0186_menucascade1215612612394"><b><span class="uicontrol" id="dbss_01_0191__dbss_01_0204_dbss_01_0186_uicontrol415682653911">Security</span></b> > <b><span class="uicontrol" id="dbss_01_0191__dbss_01_0204_dbss_01_0186_uicontrol2156182620396">Database Security Service</span></b></span>. The <strong id="dbss_01_0191__dbss_01_0204_dbss_01_0186_b6156926113915">Dashboard</strong> page is displayed.</span></li><li id="dbss_01_0191__li192117711183"><span>In the navigation tree, choose <strong id="dbss_01_0191__b46121928183010">Rules</strong>.</span></li><li id="dbss_01_0191__li168521066525"><span>In the <strong id="dbss_01_0191__b198745614308">Instance</strong> drop-down list, select the instance for which you want to disable SQL injection detection.</span></li><li id="dbss_01_0191__li4174122125815"><span>Click the <strong id="dbss_01_0191__b38643733115">SQL Injection</strong> tab.</span><p><div class="note" id="dbss_01_0191__note8854192315450"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="dbss_01_0191__p38556230450">Only user-defined rules can be edited and deleted. Default rules can only be enabled and disabled.</p>
|
||||
</div></div>
|
||||
</p></li><li id="dbss_01_0191__li332110461716"><span>Locate the SQL injection rule you want to disable, and click <strong id="dbss_01_0191__b131117324173">Disable</strong> in the <strong id="dbss_01_0191__b18111732111715">Operation</strong> column.</span><p><div class="fignone" id="dbss_01_0191__fig148017166466"><span class="figcap"><b>Figure 1 </b>Disabling an SQL injection detection rule</span><br><span><img id="dbss_01_0191__image27002016151616" src="en-us_image_0000001127129398.png"></span></div>
|
||||
<p id="dbss_01_0191__p332210469113">When the status of an SQL injection detection rule is <strong id="dbss_01_0191__b1339113964218">Disabled</strong>, SQL injection detection is disabled successfully.</p>
|
||||
</p></li><li id="dbss_01_0191__li1097814118447"><span>In the <strong id="dbss_01_0191__b1624519149194">Operation</strong> column of a rule, click <strong id="dbss_01_0191__b52683176197">Edit</strong>. Configure parameters and click <strong id="dbss_01_0191__b17161172191917">OK</strong>.</span><p><div class="fignone" id="dbss_01_0191__fig1448418914912"><span class="figcap"><b>Figure 2 </b>Editing an SQL injection rule</span><br><span><img id="dbss_01_0191__image65661024101811" src="en-us_image_0000001671055773.png"></span></div>
|
||||
|
||||
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="dbss_01_0191__table14709144861013" frame="border" border="1" rules="all"><caption><b>Table 1 </b>SQL injection rule parameters</caption><thead align="left"><tr id="dbss_01_0191__row27104486104"><th align="left" class="cellrowborder" valign="top" width="14.431443144314432%" id="mcps1.3.4.3.7.2.2.2.4.1.1"><p id="dbss_01_0191__p1710104815102">Parameter</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="52.235223522352236%" id="mcps1.3.4.3.7.2.2.2.4.1.2"><p id="dbss_01_0191__p1671054861012">Description</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="33.33333333333333%" id="mcps1.3.4.3.7.2.2.2.4.1.3"><p id="dbss_01_0191__p37101448201010">Example Value</p>
|
||||
</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody><tr id="dbss_01_0191__row1710748151012"><td class="cellrowborder" valign="top" width="14.431443144314432%" headers="mcps1.3.4.3.7.2.2.2.4.1.1 "><p id="dbss_01_0191__p12710114815102">Name</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="52.235223522352236%" headers="mcps1.3.4.3.7.2.2.2.4.1.2 "><p id="dbss_01_0191__p571084815102">Name of an SQL rule.</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.4.3.7.2.2.2.4.1.3 "><p id="dbss_01_0191__p167107484102">Postal Code SQL injection Rule</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0191__row57101948191017"><td class="cellrowborder" valign="top" width="14.431443144314432%" headers="mcps1.3.4.3.7.2.2.2.4.1.1 "><p id="dbss_01_0191__p1971084811015">Risk Level</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="52.235223522352236%" headers="mcps1.3.4.3.7.2.2.2.4.1.2 "><p id="dbss_01_0191__p6040559116304">Level of risks matching a SQL rule. Its value can be:</p>
|
||||
<ul id="dbss_01_0191__ul155751241152314"><li id="dbss_01_0191__li175751416235"><strong id="dbss_01_0191__b3332857114">High</strong></li><li id="dbss_01_0191__li105757413233"><strong id="dbss_01_0191__b13769128133114">Moderate</strong></li><li id="dbss_01_0191__li185757413236"><strong id="dbss_01_0191__b116171184116">Low</strong></li><li id="dbss_01_0191__li157519418234"><strong id="dbss_01_0191__b11277122513117">No risk</strong></li></ul>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.4.3.7.2.2.2.4.1.3 "><p id="dbss_01_0191__p3710134812101"><strong id="dbss_01_0191__b15700162811118">Moderate</strong></p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0191__row371084871016"><td class="cellrowborder" valign="top" width="14.431443144314432%" headers="mcps1.3.4.3.7.2.2.2.4.1.1 "><p id="dbss_01_0191__p2710124819109">Status</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="52.235223522352236%" headers="mcps1.3.4.3.7.2.2.2.4.1.2 "><p id="dbss_01_0191__p153321841736">Enables or disables an SQL injection rule.</p>
|
||||
<ul id="dbss_01_0191__ul934875119443"><li id="dbss_01_0191__li1392516571914"><span><img id="dbss_01_0191__image12885162119198" src="en-us_image_0000001671056613.png"></span>: enabled</li><li id="dbss_01_0191__li102256251195"><span><img id="dbss_01_0191__image19829203211913" src="en-us_image_0000001671056725.png"></span>: disabled</li></ul>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.4.3.7.2.2.2.4.1.3 "><p id="dbss_01_0191__p17710124881011"></p>
|
||||
<p id="dbss_01_0191__p15824135401917"><span><img id="dbss_01_0191__image6131115517191" src="en-us_image_0000001622617012.png"></span></p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0191__row1771094861019"><td class="cellrowborder" valign="top" width="14.431443144314432%" headers="mcps1.3.4.3.7.2.2.2.4.1.1 "><p id="dbss_01_0191__p9710154811108">Test Regular Expression</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="52.235223522352236%" headers="mcps1.3.4.3.7.2.2.2.4.1.2 "><p id="dbss_01_0191__p671074813103">Regular expression that checks for content in certain pattern.</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.4.3.7.2.2.2.4.1.3 "><p id="dbss_01_0191__p735111694316">^\d{6}$</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0191__row1271011485107"><td class="cellrowborder" valign="top" width="14.431443144314432%" headers="mcps1.3.4.3.7.2.2.2.4.1.1 "><p id="dbss_01_0191__p14710204861015">Data</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="52.235223522352236%" headers="mcps1.3.4.3.7.2.2.2.4.1.2 "><p id="dbss_01_0191__p1661738172118">Content that matches the regular expression.</p>
|
||||
<p id="dbss_01_0191__p1471012487105">Enter content and click <strong id="dbss_01_0191__b4641121893713">Test</strong> to verify that the regular expression works properly.</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.4.3.7.2.2.2.4.1.3 "><p id="dbss_01_0191__p7710448101018">628307</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0191__row1710164871010"><td class="cellrowborder" valign="top" width="14.431443144314432%" headers="mcps1.3.4.3.7.2.2.2.4.1.1 "><p id="dbss_01_0191__p1710648131012">Result</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="52.235223522352236%" headers="mcps1.3.4.3.7.2.2.2.4.1.2 "><p id="dbss_01_0191__p588013323212">Test result. It can be:</p>
|
||||
<ul id="dbss_01_0191__ul12565111265512"><li id="dbss_01_0191__li85653127552">Hit</li><li id="dbss_01_0191__li195669121551">Miss<div class="note" id="dbss_01_0191__note168861814112310"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="dbss_01_0191__p10886714162318">If the test result is <strong id="dbss_01_0191__b16149133155319">Hit</strong>, the regular expression is correct.</p>
|
||||
<p id="dbss_01_0191__p20770152122418">If the test result is <span class="wintitle" id="dbss_01_0191__wintitle87027534249"><b>Miss</b></span>, the regular expression is incorrect.</p>
|
||||
</div></div>
|
||||
</li></ul>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.4.3.7.2.2.2.4.1.3 "><p id="dbss_01_0191__p107101648171010">Hit</p>
|
||||
</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
</p></li><li id="dbss_01_0191__li663615172618"><span>In the <strong id="dbss_01_0191__b28251713583">Operation</strong> column, click <strong id="dbss_01_0191__b1488141535816">Delete</strong>.</span></li></ol>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0191__section116222113496"><h4 class="sectiontitle">Follow-Up Procedure</h4><div class="p" id="dbss_01_0191__p1454617279493">To restart an SQL injection detection rule, click <strong id="dbss_01_0191__b58815373196">Enable</strong> in the <strong id="dbss_01_0191__b6881123713196">Operation</strong> column of the target rule.<div class="fignone" id="dbss_01_0191__fig185497132517"><span class="figcap"><b>Figure 3 </b>Enabling an SQL injection detection rule</span><br><span><img id="dbss_01_0191__image124587555187" src="en-us_image_0000001173169443.png"></span></div>
|
||||
</div>
|
||||
<p id="dbss_01_0191__p089114510523">When the status of an SQL injection detection rule is <strong id="dbss_01_0191__b189205619564">Enabled</strong>, SQL injection detection is enabled successfully.</p>
|
||||
</div>
|
||||
</div>
|
||||
|
103
docs/dbss/umn/dbss_01_0192.html
Normal file
103
docs/dbss/umn/dbss_01_0192.html
Normal file
File diff suppressed because it is too large
Load Diff
17
docs/dbss/umn/dbss_01_0196.html
Normal file
17
docs/dbss/umn/dbss_01_0196.html
Normal file
@ -0,0 +1,17 @@
|
||||
<a name="dbss_01_0196"></a><a name="dbss_01_0196"></a>
|
||||
|
||||
<h1 class="topictitle1">Managing Audit Reports</h1>
|
||||
<div id="body1544671304538"><p id="dbss_01_0196__p1589472715153">By default, database audit complies with a full audit rule, which is used to audit all databases that are successfully connected to the database audit instance. After connecting the database to the database audit instance, view report templates and report results.</p>
|
||||
<div class="section" id="dbss_01_0196__section441811405410"><h4 class="sectiontitle">Prerequisites</h4><ul id="dbss_01_0196__ul1416718161018"><li id="dbss_01_0196__li1610855617422">Database audit has been enabled.</li><li id="dbss_01_0196__li16870352122710">Audit reports have been generated.</li></ul>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0196__section3175951365"><h4 class="sectiontitle">Viewing a Report</h4><ol id="dbss_01_0196__ol10643191219185"><li id="dbss_01_0196__li5678112161818"><span>Viewing reports</span><p><div class="note" id="dbss_01_0196__note48071214143615"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="dbss_01_0196__ul749215299384"><li id="dbss_01_0196__li949262973817">Enter a report name in the upper right corner to search.</li><li id="dbss_01_0196__li1349218297382">A real-time report is automatically generated in PDF format.</li><li id="dbss_01_0196__li154921729113817">Locate the row that contains the report to be deleted, click <strong id="dbss_01_0196__b18289545133517">Delete</strong> in the <strong id="dbss_01_0196__b1289134513517">Operation</strong> column, and click <strong id="dbss_01_0196__b16290124519354">OK</strong> in the displayed dialog box. When a report is deleted, you need to manually generate a report if you want to view the report result.</li></ul>
|
||||
<p id="dbss_01_0196__p541371517352"></p>
|
||||
</div></div>
|
||||
</p></li></ol>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0196__section93844411216"><h4 class="sectiontitle">Viewing a Report Template</h4><ol id="dbss_01_0196__ol115152232416"><li id="dbss_01_0196__li17421722112414"><span>View the report template information. </span><p><div class="note" id="dbss_01_0196__note1714116193918"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="dbss_01_0196__ul796813193517"><li id="dbss_01_0196__li2581122117511">Report types include <strong id="dbss_01_0196__b159641135503">Compliance report</strong>, <strong id="dbss_01_0196__b4454145425915">Overview report</strong>, <strong id="dbss_01_0196__b2085195410017">Database report</strong>, <strong id="dbss_01_0196__b597910581604">Client report</strong>, and <strong id="dbss_01_0196__b134441367111">Database operation report</strong>.</li><li id="dbss_01_0196__li5773143225412">You can enable or disable scheduled tasks, or set their frequency to daily, weekly, or monthly.</li><li id="dbss_01_0196__li196816196515">To modify the scheduled task of a report template, click <strong id="dbss_01_0196__b11876135820170">Schedule Task</strong> in the <strong id="dbss_01_0196__b1718967141814">Operation</strong> column. Modify and save the settings, click <strong id="dbss_01_0196__b854320129193">Generate Report</strong>, and you can check the reports.</li></ul>
|
||||
</div></div>
|
||||
</p></li></ol>
|
||||
</div>
|
||||
</div>
|
||||
|
54
docs/dbss/umn/dbss_01_0197.html
Normal file
54
docs/dbss/umn/dbss_01_0197.html
Normal file
@ -0,0 +1,54 @@
|
||||
<a name="dbss_01_0197"></a><a name="dbss_01_0197"></a>
|
||||
|
||||
<h1 class="topictitle1">Managing Backup Audit Logs</h1>
|
||||
<div id="body1544671300299"><p id="dbss_01_0197__p20815124152919">After backing up audit logs, you can view or delete backup audit logs.</p>
|
||||
<div class="section" id="dbss_01_0197__section441811405410"><h4 class="sectiontitle">Prerequisites</h4><ul id="dbss_01_0197__ul1416718161018"><li id="dbss_01_0197__li1610855617422">Database audit has been enabled.</li><li id="dbss_01_0197__li9887182191014">You have backed up audit logs.</li></ul>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0197__section1583911187249"><h4 class="sectiontitle">Viewing Backup Audit Logs</h4><ol id="dbss_01_0197__ol115152232416"><li id="dbss_01_0197__li17421722112414"><span>View the backup audit log information. For details about related parameters, see <a href="#dbss_01_0197__table964761214306">Table 1</a>. </span><p><p id="dbss_01_0197__p9188193924117">Click <span><img id="dbss_01_0197__image32431829145010" src="en-us_image_0000001147869404.png"></span> in the upper right corner of the list and select the start time and end time to view backup logs in a specified time range.</p>
|
||||
|
||||
<div class="tablenoborder"><a name="dbss_01_0197__table964761214306"></a><a name="table964761214306"></a><table cellpadding="4" cellspacing="0" summary="" id="dbss_01_0197__table964761214306" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameters of audit logs</caption><thead align="left"><tr id="dbss_01_0197__row1365581213011"><th align="left" class="cellrowborder" valign="top" width="25.4%" id="mcps1.3.3.2.1.2.2.2.3.1.1"><p id="dbss_01_0197__p96584127304">Parameter</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="74.6%" id="mcps1.3.3.2.1.2.2.2.3.1.2"><p id="dbss_01_0197__p18660171293013">Description</p>
|
||||
</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody><tr id="dbss_01_0197__row7664312163018"><td class="cellrowborder" valign="top" width="25.4%" headers="mcps1.3.3.2.1.2.2.2.3.1.1 "><p id="dbss_01_0197__p56657123309">Log Name</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74.6%" headers="mcps1.3.3.2.1.2.2.2.3.1.2 "><p id="dbss_01_0197__p5647143213447">Name of a log, which is automatically generated</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0197__row18114121410321"><td class="cellrowborder" valign="top" width="25.4%" headers="mcps1.3.3.2.1.2.2.2.3.1.1 "><p id="dbss_01_0197__p195041220123213">Backup Time</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74.6%" headers="mcps1.3.3.2.1.2.2.2.3.1.2 "><p id="dbss_01_0197__p364653274411">Time when a log is backed up</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0197__row17352133015322"><td class="cellrowborder" valign="top" width="25.4%" headers="mcps1.3.3.2.1.2.2.2.3.1.1 "><p id="dbss_01_0197__p7313193714329">File Size</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74.6%" headers="mcps1.3.3.2.1.2.2.2.3.1.2 "><p id="dbss_01_0197__p3645133274417">Log file size</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0197__row1167216126301"><td class="cellrowborder" valign="top" width="25.4%" headers="mcps1.3.3.2.1.2.2.2.3.1.1 "><p id="dbss_01_0197__p126741912113015">Backup Mode</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74.6%" headers="mcps1.3.3.2.1.2.2.2.3.1.2 "><p id="dbss_01_0197__p810995115455">Log backup mode.</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0197__row1856318344013"><td class="cellrowborder" valign="top" width="25.4%" headers="mcps1.3.3.2.1.2.2.2.3.1.1 "><p id="dbss_01_0197__p356373194018">Backup Scope</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74.6%" headers="mcps1.3.3.2.1.2.2.2.3.1.2 "><p id="dbss_01_0197__p19638133214444">Backup time window</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0197__row19376125418438"><td class="cellrowborder" valign="top" width="25.4%" headers="mcps1.3.3.2.1.2.2.2.3.1.1 "><p id="dbss_01_0197__p1037775419433">Task Status</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74.6%" headers="mcps1.3.3.2.1.2.2.2.3.1.2 "><p id="dbss_01_0197__p8378854144311">Backup status of a log</p>
|
||||
</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
<div class="note" id="dbss_01_0197__note18127172955618"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="dbss_01_0197__p21281429165619">Locate the row that contains the log to be deleted, click <strong id="dbss_01_0197__b28561612145210">Delete</strong> in the <strong id="dbss_01_0197__b118571512105210">Operation</strong> column, and click <strong id="dbss_01_0197__b78581712155215">OK</strong> in the displayed dialog box.</p>
|
||||
</div></div>
|
||||
</p></li></ol>
|
||||
</div>
|
||||
</div>
|
||||
<div></div>
|
||||
|
68
docs/dbss/umn/dbss_01_0200.html
Normal file
68
docs/dbss/umn/dbss_01_0200.html
Normal file
@ -0,0 +1,68 @@
|
||||
<a name="dbss_01_0200"></a><a name="dbss_01_0200"></a>
|
||||
|
||||
<h1 class="topictitle1">Management an Audit Scope</h1>
|
||||
<div id="body1545224014450"><p id="dbss_01_0200__p118731342739">After adding an audit scope, you can view, enable, edit, disable, or delete the audit scope.</p>
|
||||
<div class="section" id="dbss_01_0200__section070891116319"><h4 class="sectiontitle">Prerequisites</h4><ul id="dbss_01_0200__ul13013312410"><li id="dbss_01_0200__li113021731940">The audit scope has been added.</li><li id="dbss_01_0200__li19732134261016">Before enabling, editing, or deleting the audit scope, ensure that the status of audit scope is <strong id="dbss_01_0200__b7363429165815">Disabled</strong>. </li><li id="dbss_01_0200__li125026531295">Before disabling the audit scope, ensure that the status of audit scope is <strong id="dbss_01_0200__b8917122016013">Enabled</strong>.</li></ul>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0200__section15689121410189"><h4 class="sectiontitle">Precautions</h4><p id="dbss_01_0200__p181692117188">By default, database audit complies with a <strong id="dbss_01_0200__b144851124194417">full audit rule</strong>, which is used to audit all databases that are connected to the database audit instance. This audit rule is enabled by default. You can disable it but cannot delete it.</p>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0200__section2284236112613"><h4 class="sectiontitle">Viewing the Audit Scope </h4><ol id="dbss_01_0200__ol328633615260"><li id="dbss_01_0200__li8320173612262"><span>View the audit scope information. For details about related parameters, see <a href="#dbss_01_0200__table964761214306">Table 1</a>.</span><p><div class="fignone" id="dbss_01_0200__fig17324536122612"><span class="figcap"><b>Figure 1 </b>Viewing the audit scope</span><br><span><img id="dbss_01_0200__image1424175016562" src="en-us_image_0000001523190264.png"></span></div>
|
||||
<div class="note" id="dbss_01_0200__note78209521189"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="dbss_01_0200__p1382217521381">Enter the key word of an audit scope to search.</p>
|
||||
</div></div>
|
||||
|
||||
<div class="tablenoborder"><a name="dbss_01_0200__table964761214306"></a><a name="table964761214306"></a><table cellpadding="4" cellspacing="0" summary="" id="dbss_01_0200__table964761214306" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameters</caption><thead align="left"><tr id="dbss_01_0200__row1365581213011"><th align="left" class="cellrowborder" valign="top" width="25.629999999999995%" id="mcps1.3.4.2.1.2.3.2.3.1.1"><p id="dbss_01_0200__p96584127304">Parameter</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="74.37%" id="mcps1.3.4.2.1.2.3.2.3.1.2"><p id="dbss_01_0200__p18660171293013">Description</p>
|
||||
</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody><tr id="dbss_01_0200__row7664312163018"><td class="cellrowborder" valign="top" width="25.629999999999995%" headers="mcps1.3.4.2.1.2.3.2.3.1.1 "><p id="dbss_01_0200__p56657123309">Name</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74.37%" headers="mcps1.3.4.2.1.2.3.2.3.1.2 "><p id="dbss_01_0200__p14669161217308">Name of the audit scope</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0200__row21115815584"><td class="cellrowborder" valign="top" width="25.629999999999995%" headers="mcps1.3.4.2.1.2.3.2.3.1.1 "><p id="dbss_01_0200__p1011185816582">Exception IP Address</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74.37%" headers="mcps1.3.4.2.1.2.3.2.3.1.2 "><p id="dbss_01_0200__p1911145814588">Whitelisted IP addresses within the audit scope</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0200__row18114121410321"><td class="cellrowborder" valign="top" width="25.629999999999995%" headers="mcps1.3.4.2.1.2.3.2.3.1.1 "><p id="dbss_01_0200__p195041220123213">Source IP Address</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74.37%" headers="mcps1.3.4.2.1.2.3.2.3.1.2 "><p id="dbss_01_0200__p5506192011323">IP address or IP address range used for accessing the database</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0200__row17352133015322"><td class="cellrowborder" valign="top" width="25.629999999999995%" headers="mcps1.3.4.2.1.2.3.2.3.1.1 "><p id="dbss_01_0200__p7313193714329">Source Port</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74.37%" headers="mcps1.3.4.2.1.2.3.2.3.1.2 "><p id="dbss_01_0200__p631613374329">Port number of the IP address to be audited</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0200__row1167216126301"><td class="cellrowborder" valign="top" width="25.629999999999995%" headers="mcps1.3.4.2.1.2.3.2.3.1.1 "><p id="dbss_01_0200__p126741912113015">Database Name</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74.37%" headers="mcps1.3.4.2.1.2.3.2.3.1.2 "><p id="dbss_01_0200__p76771712113017">Database in the audit scope</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0200__row6679161203016"><td class="cellrowborder" valign="top" width="25.629999999999995%" headers="mcps1.3.4.2.1.2.3.2.3.1.1 "><p id="dbss_01_0200__p16680121233020">Database Account</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74.37%" headers="mcps1.3.4.2.1.2.3.2.3.1.2 "><p id="dbss_01_0200__p12683121217306">Database username</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0200__row19685121213016"><td class="cellrowborder" valign="top" width="25.629999999999995%" headers="mcps1.3.4.2.1.2.3.2.3.1.1 "><p id="dbss_01_0200__p968710125308">Status</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74.37%" headers="mcps1.3.4.2.1.2.3.2.3.1.2 "><p id="dbss_01_0200__p186901012163011">Status of the audit scope. The options are as follows:</p>
|
||||
<ul id="dbss_01_0200__ul118072149340"><li id="dbss_01_0200__li158071314193419"><strong id="dbss_01_0200__b4111194315250">Enabled</strong></li><li id="dbss_01_0200__li148071714123412"><strong id="dbss_01_0200__b10922467254">Disabled</strong></li></ul>
|
||||
</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
<div class="note" id="dbss_01_0200__note1781511224915"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="dbss_01_0200__p98167254913">You can perform the following operations on audit scopes as required:</p>
|
||||
<ul id="dbss_01_0200__ul178163219491"><li id="dbss_01_0200__li662584812211">Enable<p id="dbss_01_0200__p171726558213"><a name="dbss_01_0200__li662584812211"></a><a name="li662584812211"></a>Locate the row that contains the audit scope to be enabled, and click <strong id="dbss_01_0200__b69143614518">Enable</strong> in the <strong id="dbss_01_0200__b991436154510">Operation</strong> column. Databases within the scope will be audited.</p>
|
||||
</li><li id="dbss_01_0200__li2448248192417">Edit (supported in customized audit scopes only)<p id="dbss_01_0200__p1992421718253"><a name="dbss_01_0200__li2448248192417"></a><a name="li2448248192417"></a>Locate the row that contains the audit scope to be edited, click <strong id="dbss_01_0200__b450014134613">Edit</strong> in the <strong id="dbss_01_0200__b1150264114615">Operation</strong> column, and modify the scope in the displayed dialog box.</p>
|
||||
</li><li id="dbss_01_0200__dbss_01_0266_li1761114316136">Disable<p id="dbss_01_0200__dbss_01_0266_p1547553814159"><a name="dbss_01_0200__dbss_01_0266_li1761114316136"></a><a name="dbss_01_0266_li1761114316136"></a>Locate the row that contains the audit scope to be disabled, click <strong id="dbss_01_0200__b5684556114617">Disable</strong> in the <strong id="dbss_01_0200__b5685105684610">Operation</strong> column, and click <strong id="dbss_01_0200__b17686175634610">OK</strong> in the displayed dialog box. When the audit scope is disabled, the audit scope rule will not be executed in the audit.</p>
|
||||
</li><li id="dbss_01_0200__li116771028183715">Delete (supported in customized audit scopes only)<p id="dbss_01_0200__p1316713397376"><a name="dbss_01_0200__li116771028183715"></a><a name="li116771028183715"></a>Locate the row that contains the audit scope to be deleted, click <strong id="dbss_01_0200__b22943443417">Delete</strong> in the <strong id="dbss_01_0200__b77183716343">Operation</strong> column, and click <strong id="dbss_01_0200__b8400154673418">OK</strong> in the displayed dialog box. You need to add the audit scope again if it is deleted and you want to audit it.</p>
|
||||
</li></ul>
|
||||
</div></div>
|
||||
</p></li></ol>
|
||||
</div>
|
||||
</div>
|
||||
|
58
docs/dbss/umn/dbss_01_0201.html
Normal file
58
docs/dbss/umn/dbss_01_0201.html
Normal file
@ -0,0 +1,58 @@
|
||||
<a name="dbss_01_0201"></a><a name="dbss_01_0201"></a>
|
||||
|
||||
<h1 class="topictitle1">Managing Risky Operations</h1>
|
||||
<div id="body1545227594709"><p id="dbss_01_0201__p1268218531877">After adding a risky operation, you can view the risk, enable, edit, disable, or delete the risky operation, or set its priority.</p>
|
||||
<div class="section" id="dbss_01_0201__section070891116319"><h4 class="sectiontitle">Prerequisites</h4><ul id="dbss_01_0201__ul13013312410"><li id="dbss_01_0201__li113021731940">The risky operation has been added.</li><li id="dbss_01_0201__li19732134261016">Before enabling the risky operation, ensure that its status is <strong id="dbss_01_0201__b11420827113618">Disabled</strong>.</li><li id="dbss_01_0201__li125026531295">Before disabling the risky operation, ensure that its status is <strong id="dbss_01_0201__b159185468365">Enabled</strong>.</li></ul>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0201__section348118488534"><h4 class="sectiontitle">Sets the Priority of the Risky Operation</h4><ol id="dbss_01_0201__ol14485848145320"><li id="dbss_01_0201__li1452124825315"><span>Locate the target risky operation, and click <strong id="dbss_01_0201__b6845111214520">Set Priority</strong> in the <strong id="dbss_01_0201__b14143172624316">Operation</strong> column.</span></li><li id="dbss_01_0201__li452910482536"><span>In the displayed dialog box, select a priority and click <strong id="dbss_01_0201__b16379918134612">OK</strong>.</span></li></ol>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0201__section2284236112613"><h4 class="sectiontitle">Viewing the Risky Operation </h4><ol id="dbss_01_0201__ol328633615260"><li id="dbss_01_0201__li8320173612262"><span>View the risky operation information. For details about related parameters, see <a href="#dbss_01_0201__table964761214306">Table 1</a>.</span><p><div class="note" id="dbss_01_0201__note78209521189"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="dbss_01_0201__p167531949124011">Select a risk severity from the <strong id="dbss_01_0201__b39011449134715">All risk severities</strong> drop-down list in the upper right corner of the list, or enter a key word of a risky operation name to search.</p>
|
||||
</div></div>
|
||||
|
||||
<div class="tablenoborder"><a name="dbss_01_0201__table964761214306"></a><a name="table964761214306"></a><table cellpadding="4" cellspacing="0" summary="" id="dbss_01_0201__table964761214306" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameters</caption><thead align="left"><tr id="dbss_01_0201__row1365581213011"><th align="left" class="cellrowborder" valign="top" width="25.629999999999995%" id="mcps1.3.4.2.1.2.2.2.3.1.1"><p id="dbss_01_0201__p96584127304">Parameter</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="74.37%" id="mcps1.3.4.2.1.2.2.2.3.1.2"><p id="dbss_01_0201__p18660171293013">Description</p>
|
||||
</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody><tr id="dbss_01_0201__row7664312163018"><td class="cellrowborder" valign="top" width="25.629999999999995%" headers="mcps1.3.4.2.1.2.2.2.3.1.1 "><p id="dbss_01_0201__p56657123309">Name</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74.37%" headers="mcps1.3.4.2.1.2.2.2.3.1.2 "><p id="dbss_01_0201__p14669161217308">Name of the risky operation</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0201__row18114121410321"><td class="cellrowborder" valign="top" width="25.629999999999995%" headers="mcps1.3.4.2.1.2.2.2.3.1.1 "><p id="dbss_01_0201__p195041220123213">Category</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74.37%" headers="mcps1.3.4.2.1.2.2.2.3.1.2 "><p id="dbss_01_0201__p5506192011323">Category of the risky operation</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0201__row17352133015322"><td class="cellrowborder" valign="top" width="25.629999999999995%" headers="mcps1.3.4.2.1.2.2.2.3.1.1 "><p id="dbss_01_0201__p7313193714329">Feature</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74.37%" headers="mcps1.3.4.2.1.2.2.2.3.1.2 "><p id="dbss_01_0201__p631613374329">Feature of the risky operation</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0201__row1167216126301"><td class="cellrowborder" valign="top" width="25.629999999999995%" headers="mcps1.3.4.2.1.2.2.2.3.1.1 "><p id="dbss_01_0201__p126741912113015">Risk Severity</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74.37%" headers="mcps1.3.4.2.1.2.2.2.3.1.2 "><p id="dbss_01_0201__p76771712113017">Risk severity of the risky operation. The options are as follows:</p>
|
||||
<ul id="dbss_01_0201__ul886213243541"><li id="dbss_01_0201__li1986262475417"><strong id="dbss_01_0201__b1638145462915">High</strong></li><li id="dbss_01_0201__li886292495411"><strong id="dbss_01_0201__b03051655192910">Moderate</strong></li><li id="dbss_01_0201__li9862122455415"><strong id="dbss_01_0201__b22011564292">Low</strong></li><li id="dbss_01_0201__li1986212246548"><strong id="dbss_01_0201__b139961556122911">No risks</strong></li></ul>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0201__row19685121213016"><td class="cellrowborder" valign="top" width="25.629999999999995%" headers="mcps1.3.4.2.1.2.2.2.3.1.1 "><p id="dbss_01_0201__p968710125308">Status</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74.37%" headers="mcps1.3.4.2.1.2.2.2.3.1.2 "><p id="dbss_01_0201__p186901012163011">Status of the risky operation. The options are as follows:</p>
|
||||
<ul id="dbss_01_0201__ul118072149340"><li id="dbss_01_0201__li158071314193419"><strong id="dbss_01_0201__b54707109303">Enabled</strong></li><li id="dbss_01_0201__li148071714123412"><strong id="dbss_01_0201__b12429201193016">Disabled</strong></li></ul>
|
||||
</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
<div class="note" id="dbss_01_0201__note1781511224915"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="dbss_01_0201__p98167254913">You can perform the following operations on risky operations as required:</p>
|
||||
<ul id="dbss_01_0201__ul178163219491"><li id="dbss_01_0201__li662584812211">Enable<p id="dbss_01_0201__p171726558213"><a name="dbss_01_0201__li662584812211"></a><a name="li662584812211"></a>Locate the row that contains the risky operation to be enabled, and click <strong id="dbss_01_0201__b6745125694820">Enable</strong> in the <strong id="dbss_01_0201__b5746756144811">Operation</strong> column. The operation will be audited.</p>
|
||||
</li><li id="dbss_01_0201__li2448248192417">Edit<p id="dbss_01_0201__p1992421718253"><a name="dbss_01_0201__li2448248192417"></a><a name="li2448248192417"></a>Locate the row that contains the risky operation to be edited, click <strong id="dbss_01_0201__b629142764912">Edit</strong> in the <strong id="dbss_01_0201__b6291102715496">Operation</strong> column, and modify the operation in the displayed dialog box.</p>
|
||||
</li><li id="dbss_01_0201__dbss_01_0266_li1761114316136">Disable<p id="dbss_01_0201__dbss_01_0266_p1547553814159"><a name="dbss_01_0201__dbss_01_0266_li1761114316136"></a><a name="dbss_01_0266_li1761114316136"></a>Locate the row that contains the risky operation to be disabled, click <strong id="dbss_01_0201__b6564105017492">Disable</strong> in the <strong id="dbss_01_0201__b7565850134916">Operation</strong> column, and click <strong id="dbss_01_0201__b156635064918">OK</strong> in the displayed dialog box. When a risky operation is disabled, the risky operation rule will not be executed in the audit.</p>
|
||||
</li><li id="dbss_01_0201__li116771028183715">Delete<p id="dbss_01_0201__p1316713397376"><a name="dbss_01_0201__li116771028183715"></a><a name="li116771028183715"></a>Locate the row that contains the risky operation to be deleted, click <strong id="dbss_01_0201__b138401097500">Delete</strong> in the <strong id="dbss_01_0201__b58421498509">Operation</strong> column, and click <strong id="dbss_01_0201__b684319955019">OK</strong> in the displayed dialog box. You need to add the risky operation again if a risky operation is deleted and you need to audit its rule.</p>
|
||||
</li></ul>
|
||||
</div></div>
|
||||
</p></li></ol>
|
||||
</div>
|
||||
</div>
|
||||
|
100
docs/dbss/umn/dbss_01_0203.html
Normal file
100
docs/dbss/umn/dbss_01_0203.html
Normal file
File diff suppressed because it is too large
Load Diff
19
docs/dbss/umn/dbss_01_0204.html
Normal file
19
docs/dbss/umn/dbss_01_0204.html
Normal file
@ -0,0 +1,19 @@
|
||||
<a name="dbss_01_0204"></a><a name="dbss_01_0204"></a>
|
||||
|
||||
<h1 class="topictitle1">Viewing the Audit Dashboard</h1>
|
||||
<div id="body1544587094894"><p id="dbss_01_0204__p6573544910">After connecting the database to the database audit instance, view the audit statistics, including the overall audit statistics, risk distribution, session statistics, and SQL distribution.</p>
|
||||
<div class="section" id="dbss_01_0204__section441811405410"><h4 class="sectiontitle">Prerequisites</h4><ul id="dbss_01_0204__ul1416718161018"><li id="dbss_01_0204__li89051957124915">You have applied for a database audit instance and the <strong id="dbss_01_0204__en-us_topic_0144723368_b1155217115215">Status</strong> is <strong id="dbss_01_0204__en-us_topic_0144723368_b185532015214">Running</strong>.</li><li id="dbss_01_0204__li1610855617422">Database audit has been enabled.</li></ul>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0204__section16337113512514"><h4 class="sectiontitle">Procedure</h4><ol id="dbss_01_0204__ol8561155420380"><li id="dbss_01_0204__li179601325480"><span>Log in to the management console.</span></li><li id="dbss_01_0204__li10800202815715"><span>Select a region, click <span><img id="dbss_01_0204__dbss_01_0186_image12421104763114" src="en-us_image_0000001074398929.png"></span>, and choose <span class="menucascade" id="dbss_01_0204__dbss_01_0186_menucascade1215612612394"><b><span class="uicontrol" id="dbss_01_0204__dbss_01_0186_uicontrol415682653911">Security</span></b> > <b><span class="uicontrol" id="dbss_01_0204__dbss_01_0186_uicontrol2156182620396">Database Security Service</span></b></span>. The <strong id="dbss_01_0204__dbss_01_0186_b6156926113915">Dashboard</strong> page is displayed.</span></li><li id="dbss_01_0204__li517404379"><span>In the navigation tree on the left, choose <span class="uicontrol" id="dbss_01_0204__uicontrol163741318193810"><b>Data Reports</b></span>. The <span class="wintitle" id="dbss_01_0204__wintitle66371622193814"><b>Data Reports</b></span> page is displayed.</span></li><li id="dbss_01_0204__li2020718217812"><span>In the <strong id="dbss_01_0204__b6578132315344">Instance</strong> drop-down list, select the instance whose audit information you want to view.</span></li><li id="dbss_01_0204__li56501633204913"><span>View the overall audit statistics, risk distribution, session statistics, and SQL distribution.</span><p><ul id="dbss_01_0204__ul9293658163018"><li id="dbss_01_0204__li1028161893016">Select <strong id="dbss_01_0204__b14585505710">All databases</strong> or a specified database from the <strong id="dbss_01_0204__b1311513157720">Database</strong> drop-down list to view the statistics about all databases in the instance or a specified database.</li><li id="dbss_01_0204__li17214152618304">Select <strong id="dbss_01_0204__b153781741594">Last 30 minutes</strong>, <strong id="dbss_01_0204__b5811693910">1 hour</strong>, <strong id="dbss_01_0204__b242617121093">Today</strong>, <strong id="dbss_01_0204__b102491717913">7 days</strong>, or <strong id="dbss_01_0204__b13372920891">30 days</strong>, or click <span><img id="dbss_01_0204__image623063410010" src="en-us_image_0000001148018506.png"></span> to customize start time and end time to view the statistics of the specified time range.</li></ul>
|
||||
<div class="fignone" id="dbss_01_0204__fig077713432352"><span class="figcap"><b>Figure 1 </b>Viewing the audit statistics</span><br><span><img id="dbss_01_0204__image1935219111117" src="en-us_image_0000001293796118.png"></span></div>
|
||||
<div class="fignone" id="dbss_01_0204__fig11444449413"><span class="figcap"><b>Figure 2 </b>Risk distribution</span><br><span><img id="dbss_01_0204__image207866489584" src="en-us_image_0000001173095271.png"></span></div>
|
||||
<div class="fignone" id="dbss_01_0204__fig842781211482"><span class="figcap"><b>Figure 3 </b>Session statistics</span><br><span><img id="dbss_01_0204__image1596162919592" src="en-us_image_0000001127059132.png"></span></div>
|
||||
</p></li></ol>
|
||||
</div>
|
||||
</div>
|
||||
<div>
|
||||
<div class="familylinks">
|
||||
<div class="parentlink"><strong>Parent topic:</strong> <a href="dbss_01_0253.html">Step 3: View Audit Results</a></div>
|
||||
</div>
|
||||
</div>
|
||||
|
129
docs/dbss/umn/dbss_01_0205.html
Normal file
129
docs/dbss/umn/dbss_01_0205.html
Normal file
File diff suppressed because it is too large
Load Diff
17
docs/dbss/umn/dbss_01_0206.html
Normal file
17
docs/dbss/umn/dbss_01_0206.html
Normal file
@ -0,0 +1,17 @@
|
||||
<a name="dbss_01_0206"></a><a name="dbss_01_0206"></a>
|
||||
|
||||
<h1 class="topictitle1">Viewing Session Distribution</h1>
|
||||
<div id="body1544587094894"><p id="dbss_01_0206__p1582845182415">After connecting the database to the database audit instance, view session distribution of the database.</p>
|
||||
<div class="section" id="dbss_01_0206__section441811405410"><h4 class="sectiontitle">Prerequisites</h4><ul id="dbss_01_0206__ul1416718161018"><li id="dbss_01_0206__li16589121755017">You have applied for a database audit instance and the <strong id="dbss_01_0206__en-us_topic_0144723368_b1155217115215">Status</strong> is <strong id="dbss_01_0206__en-us_topic_0144723368_b185532015214">Running</strong>.</li><li id="dbss_01_0206__li1610855617422">Database audit has been enabled.</li></ul>
|
||||
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0206__section16337113512514"><h4 class="sectiontitle">Procedure</h4><ol id="dbss_01_0206__ol8561155420380"><li id="dbss_01_0206__li179601325480"><span>Log in to the management console.</span></li><li id="dbss_01_0206__li199221335798"><span>Select a region, click <span><img id="dbss_01_0206__dbss_01_0204_dbss_01_0186_image12421104763114" src="en-us_image_0000001074398929.png"></span>, and choose <span class="menucascade" id="dbss_01_0206__dbss_01_0204_dbss_01_0186_menucascade1215612612394"><b><span class="uicontrol" id="dbss_01_0206__dbss_01_0204_dbss_01_0186_uicontrol415682653911">Security</span></b> > <b><span class="uicontrol" id="dbss_01_0206__dbss_01_0204_dbss_01_0186_uicontrol2156182620396">Database Security Service</span></b></span>. The <strong id="dbss_01_0206__dbss_01_0204_dbss_01_0186_b6156926113915">Dashboard</strong> page is displayed.</span></li><li id="dbss_01_0206__li517404379"><span>In the navigation tree on the left, choose <span class="uicontrol" id="dbss_01_0206__uicontrol1277862915419"><b>Data Reports</b></span>. The <span class="wintitle" id="dbss_01_0206__wintitle177892919416"><b>Data Reports</b></span> page is displayed.</span></li><li id="dbss_01_0206__li168521066525"><span>In the <strong id="dbss_01_0206__b1547602515508">Instance</strong> drop-down list, select the instance whose session information you want to view.</span></li><li id="dbss_01_0206__li4174122125815"><span>Click the <strong id="dbss_01_0206__b126061944205019">Sessions</strong> tab.</span></li><li id="dbss_01_0206__li1277714282108"><span>View the session distribution chart.</span><p><ul id="dbss_01_0206__ul137203016169"><li id="dbss_01_0206__li1028161893016">Select <strong id="dbss_01_0206__b2930142812598">All databases</strong> or a specified database from the <strong id="dbss_01_0206__b139319280597">Database</strong> drop-down list to view the sessions about all databases in the instance or a specified database.</li><li id="dbss_01_0206__li17214152618304">Select <strong id="dbss_01_0206__b1781124713594">Last 30 minutes</strong>, <strong id="dbss_01_0206__b48121647185916">1 hour</strong>, <strong id="dbss_01_0206__b18814847165917">24 hours</strong>, <strong id="dbss_01_0206__b28164477590">7 days</strong>, or <strong id="dbss_01_0206__b1681854718594">30 days</strong>, or click <span><img id="dbss_01_0206__image1942011919239" src="en-us_image_0000001147864254.png"></span> to set start time and end time to view the sessions of the specified time range.</li></ul>
|
||||
</p></li></ol>
|
||||
</div>
|
||||
</div>
|
||||
<div>
|
||||
<div class="familylinks">
|
||||
<div class="parentlink"><strong>Parent topic:</strong> <a href="dbss_01_0253.html">Step 3: View Audit Results</a></div>
|
||||
</div>
|
||||
</div>
|
||||
|
52
docs/dbss/umn/dbss_01_0207.html
Normal file
52
docs/dbss/umn/dbss_01_0207.html
Normal file
@ -0,0 +1,52 @@
|
||||
<a name="dbss_01_0207"></a><a name="dbss_01_0207"></a>
|
||||
|
||||
<h1 class="topictitle1">Viewing Information About SQL Injection Detection </h1>
|
||||
<div id="body1545226683270"><p id="dbss_01_0207__p20251054258">This section describes how to view SQL injection detection information of a database audit instance.</p>
|
||||
<div class="section" id="dbss_01_0207__section070891116319"><h4 class="sectiontitle">Prerequisites</h4><ul id="dbss_01_0207__ul13013312410"><li id="dbss_01_0207__li1610855617422">Database audit has been enabled.</li></ul>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0207__section20994171263912"><h4 class="sectiontitle">Procedure</h4><ol id="dbss_01_0207__ol7871195884911"><li id="dbss_01_0207__li1061415178509"><span>View information about SQL injection detection, as shown in <a href="#dbss_01_0207__fig71914515113">Figure 1</a>. For details about related parameters, see <a href="#dbss_01_0207__table964761214306">Table 1</a>. </span><p><div class="fignone" id="dbss_01_0207__fig71914515113"><a name="dbss_01_0207__fig71914515113"></a><a name="fig71914515113"></a><span class="figcap"><b>Figure 1 </b>Viewing information about the SQL injection detection</span><br><span><img id="dbss_01_0207__image2231112718584" src="en-us_image_0000001523031304.png"></span></div>
|
||||
<div class="note" id="dbss_01_0207__note78209521189"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="dbss_01_0207__ul13938125141918"><li id="dbss_01_0207__li893875119198">Select a risk severity from the <strong id="dbss_01_0207__b1954985531">All risk severities</strong> drop-down list in the upper right corner of the list, or enter a key word of an SQL injection rule name to search.</li><li id="dbss_01_0207__li391543199">Click <strong id="dbss_01_0207__b1749613242491">Set Priority</strong> in the <strong id="dbss_01_0207__b174416298522">Operation</strong> column of an SQL injection rule to change its priority.</li></ul>
|
||||
</div></div>
|
||||
|
||||
<div class="tablenoborder"><a name="dbss_01_0207__table964761214306"></a><a name="table964761214306"></a><table cellpadding="4" cellspacing="0" summary="" id="dbss_01_0207__table964761214306" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameters </caption><thead align="left"><tr id="dbss_01_0207__row1365581213011"><th align="left" class="cellrowborder" valign="top" width="25.629999999999995%" id="mcps1.3.3.2.1.2.3.2.3.1.1"><p id="dbss_01_0207__p96584127304">Parameter</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="74.37%" id="mcps1.3.3.2.1.2.3.2.3.1.2"><p id="dbss_01_0207__p18660171293013">Description</p>
|
||||
</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody><tr id="dbss_01_0207__row7664312163018"><td class="cellrowborder" valign="top" width="25.629999999999995%" headers="mcps1.3.3.2.1.2.3.2.3.1.1 "><p id="dbss_01_0207__p56657123309">Name</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74.37%" headers="mcps1.3.3.2.1.2.3.2.3.1.2 "><p id="dbss_01_0207__p14669161217308">Name of the SQL injection detection</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0207__row18114121410321"><td class="cellrowborder" valign="top" width="25.629999999999995%" headers="mcps1.3.3.2.1.2.3.2.3.1.1 "><p id="dbss_01_0207__p195041220123213">Command Feature</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74.37%" headers="mcps1.3.3.2.1.2.3.2.3.1.2 "><p id="dbss_01_0207__p5506192011323">Command features of the SQL injection detection</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0207__row17352133015322"><td class="cellrowborder" valign="top" width="25.629999999999995%" headers="mcps1.3.3.2.1.2.3.2.3.1.1 "><p id="dbss_01_0207__p7313193714329">Risk Severity</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74.37%" headers="mcps1.3.3.2.1.2.3.2.3.1.2 "><p id="dbss_01_0207__p631613374329">Risk level of the SQL injection detection. The options are as follows:</p>
|
||||
<ul id="dbss_01_0207__ul10411345155412"><li id="dbss_01_0207__dbss_01_0201_li1986262475417"><strong id="dbss_01_0207__dbss_01_0201_b1638145462915">High</strong></li><li id="dbss_01_0207__dbss_01_0201_li886292495411"><strong id="dbss_01_0207__dbss_01_0201_b03051655192910">Moderate</strong></li><li id="dbss_01_0207__dbss_01_0201_li9862122455415"><strong id="dbss_01_0207__dbss_01_0201_b22011564292">Low</strong></li><li id="dbss_01_0207__dbss_01_0201_li1986212246548"><strong id="dbss_01_0207__dbss_01_0201_b139961556122911">No risks</strong></li></ul>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0207__row19685121213016"><td class="cellrowborder" valign="top" width="25.629999999999995%" headers="mcps1.3.3.2.1.2.3.2.3.1.1 "><p id="dbss_01_0207__p968710125308">Status</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74.37%" headers="mcps1.3.3.2.1.2.3.2.3.1.2 "><p id="dbss_01_0207__p186901012163011">Status of the SQL injection detection. The options are as follows:</p>
|
||||
<ul id="dbss_01_0207__ul118072149340"><li id="dbss_01_0207__dbss_01_0201_li158071314193419"><strong id="dbss_01_0207__dbss_01_0201_b54707109303">Enabled</strong></li><li id="dbss_01_0207__dbss_01_0201_li148071714123412"><strong id="dbss_01_0207__dbss_01_0201_b12429201193016">Disabled</strong></li></ul>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0207__row42612819104"><td class="cellrowborder" valign="top" width="25.629999999999995%" headers="mcps1.3.3.2.1.2.3.2.3.1.1 "><p id="dbss_01_0207__p826213861016">Operation</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74.37%" headers="mcps1.3.3.2.1.2.3.2.3.1.2 "><p id="dbss_01_0207__p926228151017">Operations on an SQL injection rule. The options are as follows:</p>
|
||||
<ul id="dbss_01_0207__ul391723711129"><li id="dbss_01_0207__li59171937181212"><strong id="dbss_01_0207__b254516459496">Set Priority</strong></li><li id="dbss_01_0207__li1190410412129"><strong id="dbss_01_0207__b1686834144910">Disable</strong></li><li id="dbss_01_0207__li102261143151216"><strong id="dbss_01_0207__b1610174310499">Edit</strong></li><li id="dbss_01_0207__li1215119453127"><strong id="dbss_01_0207__b61145445499">Delete</strong></li></ul>
|
||||
</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
</p></li></ol>
|
||||
</div>
|
||||
</div>
|
||||
<div></div>
|
||||
|
12
docs/dbss/umn/dbss_01_0208.html
Normal file
12
docs/dbss/umn/dbss_01_0208.html
Normal file
@ -0,0 +1,12 @@
|
||||
<a name="dbss_01_0208"></a><a name="dbss_01_0208"></a>
|
||||
|
||||
<h1 class="topictitle1">Viewing the System Monitoring</h1>
|
||||
<div id="body1544587094894"><p id="dbss_01_0208__p181094512359">This section describes how to view the system monitoring of database audit and learn about system resources and traffic usage.</p>
|
||||
<div class="section" id="dbss_01_0208__section441811405410"><h4 class="sectiontitle">Prerequisites</h4><ul id="dbss_01_0208__ul1416718161018"><li id="dbss_01_0208__li12270145035112">You have applied for a database audit instance and the <strong id="dbss_01_0208__en-us_topic_0144723368_b1155217115215">Status</strong> is <strong id="dbss_01_0208__en-us_topic_0144723368_b185532015214">Running</strong>.</li><li id="dbss_01_0208__li1610855617422">Database audit has been enabled.</li></ul>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0208__section16337113512514"><h4 class="sectiontitle">Procedure</h4><ol id="dbss_01_0208__ol8561155420380"><li id="dbss_01_0208__li1691822124513"><span>In the navigation tree on the left, choose <strong id="dbss_01_0208__b846562162215">Instances</strong>.</span></li><li id="dbss_01_0208__li137661355114510"><span>Click an instance name and then click the <strong id="dbss_01_0208__b659104314264">Monitoring</strong> tab. The <strong id="dbss_01_0208__b3791845192615">System Monitoring</strong> page is displayed.</span></li><li id="dbss_01_0208__li56501633204913"><span>View the system monitoring information, as shown in<a href="#dbss_01_0208__fig75451433958">Figure 1</a>. </span><p><p id="dbss_01_0208__p1833014547201">Select <strong id="dbss_01_0208__b0836171111289">Last 30 minutes</strong>, <strong id="dbss_01_0208__b583771111287">1 hour</strong>, <strong id="dbss_01_0208__b20837121111286">24 hours</strong>, <strong id="dbss_01_0208__b18838911172811">7 days</strong>, or <strong id="dbss_01_0208__b1983815113281">30 days</strong>, or click <span><img id="dbss_01_0208__image362072143613" src="en-us_image_0000001193906833.png"></span> to customize start time and end time to view the system monitoring information of the specified time range.</p>
|
||||
<div class="fignone" id="dbss_01_0208__fig75451433958"><a name="dbss_01_0208__fig75451433958"></a><a name="fig75451433958"></a><span class="figcap"><b>Figure 1 </b>Viewing the system monitoring</span><br><span><img id="dbss_01_0208__image7506155941810" src="en-us_image_0000001127160302.png"></span></div>
|
||||
</p></li></ol>
|
||||
</div>
|
||||
</div>
|
||||
|
56
docs/dbss/umn/dbss_01_0209.html
Normal file
56
docs/dbss/umn/dbss_01_0209.html
Normal file
@ -0,0 +1,56 @@
|
||||
<a name="dbss_01_0209"></a><a name="dbss_01_0209"></a>
|
||||
|
||||
<h1 class="topictitle1">Viewing Operation Logs</h1>
|
||||
<div id="body1544673632958"><p id="dbss_01_0209__p984494683211">This section describes how to view operation logs of a database audit instance.</p>
|
||||
<div class="section" id="dbss_01_0209__section441811405410"><h4 class="sectiontitle">Prerequisites</h4></div>
|
||||
<div class="section" id="dbss_01_0209__section16337113512514"><h4 class="sectiontitle">Procedure</h4><ol id="dbss_01_0209__ol8561155420380"><li id="dbss_01_0209__li56501633204913"><span>View operation logs. For details about related parameters, see <a href="#dbss_01_0209__table4295843716304">Table 1</a>. </span><p><div class="note" id="dbss_01_0209__note78209521189"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="dbss_01_0209__p815673993815">Select <strong id="dbss_01_0209__b1354849192210">Last 30 minutes</strong>, <strong id="dbss_01_0209__b115491197223">1 hour</strong>, <strong id="dbss_01_0209__b1054917912214">24 hours</strong>, <strong id="dbss_01_0209__b115504919223">7 days</strong>, or <strong id="dbss_01_0209__b15550199172218">30 days</strong>, or click <span><img id="dbss_01_0209__image712913154613" src="en-us_image_0000001148028318.png"></span> to set start time and end time to view the operation logs of a specified time range.</p>
|
||||
</div></div>
|
||||
|
||||
<div class="tablenoborder"><a name="dbss_01_0209__table4295843716304"></a><a name="table4295843716304"></a><table cellpadding="4" cellspacing="0" summary="" id="dbss_01_0209__table4295843716304" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameters</caption><thead align="left"><tr id="dbss_01_0209__row4338993216304"><th align="left" class="cellrowborder" valign="top" width="25.669999999999998%" id="mcps1.3.3.2.1.2.2.2.3.1.1"><p id="dbss_01_0209__p2492361616304">Parameter</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="74.33%" id="mcps1.3.3.2.1.2.2.2.3.1.2"><p id="dbss_01_0209__p554697916304">Description</p>
|
||||
</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody><tr id="dbss_01_0209__row8736194992614"><td class="cellrowborder" valign="top" width="25.669999999999998%" headers="mcps1.3.3.2.1.2.2.2.3.1.1 "><p id="dbss_01_0209__p27371849182610">Username</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74.33%" headers="mcps1.3.3.2.1.2.2.2.3.1.2 "><p id="dbss_01_0209__p673724912620">User who performs the operation</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0209__row3896937416304"><td class="cellrowborder" valign="top" width="25.669999999999998%" headers="mcps1.3.3.2.1.2.2.2.3.1.1 "><p id="dbss_01_0209__p240275716304">Time</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74.33%" headers="mcps1.3.3.2.1.2.2.2.3.1.2 "><p id="dbss_01_0209__p6040559116304">Time when the operation was performed</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0209__row38169719100"><td class="cellrowborder" valign="top" width="25.669999999999998%" headers="mcps1.3.3.2.1.2.2.2.3.1.1 "><p id="dbss_01_0209__p11817178103">Function</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74.33%" headers="mcps1.3.3.2.1.2.2.2.3.1.2 "><p id="dbss_01_0209__p781717151012">Function of the operation</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0209__row121453182104"><td class="cellrowborder" valign="top" width="25.669999999999998%" headers="mcps1.3.3.2.1.2.2.2.3.1.1 "><p id="dbss_01_0209__p8145151818109">Action</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74.33%" headers="mcps1.3.3.2.1.2.2.2.3.1.2 "><p id="dbss_01_0209__p21451918111019">Action of the operation</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0209__row1675442617106"><td class="cellrowborder" valign="top" width="25.669999999999998%" headers="mcps1.3.3.2.1.2.2.2.3.1.1 "><p id="dbss_01_0209__p875482618104">Operation Object</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74.33%" headers="mcps1.3.3.2.1.2.2.2.3.1.2 "><p id="dbss_01_0209__p12754192617103">Object of the operation</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0209__row1332204111319"><td class="cellrowborder" valign="top" width="25.669999999999998%" headers="mcps1.3.3.2.1.2.2.2.3.1.1 "><p id="dbss_01_0209__p33321041237">Description</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74.33%" headers="mcps1.3.3.2.1.2.2.2.3.1.2 "><p id="dbss_01_0209__p189761521111719">Description of the operation</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0209__row0860165713317"><td class="cellrowborder" valign="top" width="25.669999999999998%" headers="mcps1.3.3.2.1.2.2.2.3.1.1 "><p id="dbss_01_0209__p12331342414">Result</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74.33%" headers="mcps1.3.3.2.1.2.2.2.3.1.2 "><p id="dbss_01_0209__p17861057634">Result of the operation</p>
|
||||
</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
</p></li></ol>
|
||||
</div>
|
||||
</div>
|
||||
|
57
docs/dbss/umn/dbss_01_0213.html
Normal file
57
docs/dbss/umn/dbss_01_0213.html
Normal file
@ -0,0 +1,57 @@
|
||||
<a name="dbss_01_0213"></a><a name="dbss_01_0213"></a>
|
||||
|
||||
<h1 class="topictitle1">Managing Database Audit Instances</h1>
|
||||
<div id="body1544675343886"><div class="section" id="dbss_01_0213__section127129264399"><h4 class="sectiontitle">Prerequisites</h4><ul id="dbss_01_0213__ul44017134397"><li id="dbss_01_0213__li1885562919456">Before restarting and disabling an instance, ensure that its <strong id="dbss_01_0213__b8423527061640">Status</strong> is <strong id="dbss_01_0213__b8423527061645">Running</strong>.</li></ul>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0213__section1690310813588"><h4 class="sectiontitle">Viewing the Instance</h4><ol id="dbss_01_0213__ol109041387585"><li id="dbss_01_0213__li1691116855814"><span>View the database audit instances information. For details about related parameters, see <a href="#dbss_01_0213__table1025994517211">Table 1</a>.</span><p><div class="fignone" id="dbss_01_0213__fig89170817589"><span class="figcap"><b>Figure 1 </b>Viewing database audit instances</span><br><span><img id="dbss_01_0213__image7781145192413" src="en-us_image_0000001570553141.png"></span></div>
|
||||
<div class="note" id="dbss_01_0213__note13211614182"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="dbss_01_0213__ul050975062712"><li id="dbss_01_0213__li050955015279">You can click the name of an instance to view its overview.</li><li id="dbss_01_0213__li25098505276">Select an instance status from the <strong id="dbss_01_0213__b18722135593613">All statuses</strong> drop-down list in the upper right corner of the list, or enter a key word of an instance to search for it.</li></ul>
|
||||
</div></div>
|
||||
|
||||
<div class="tablenoborder"><a name="dbss_01_0213__table1025994517211"></a><a name="table1025994517211"></a><table cellpadding="4" cellspacing="0" summary="" id="dbss_01_0213__table1025994517211" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameters</caption><thead align="left"><tr id="dbss_01_0213__row1626074517217"><th align="left" class="cellrowborder" valign="top" width="17%" id="mcps1.3.2.2.1.2.3.2.3.1.1"><p id="dbss_01_0213__p9260045112114">Parameter</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="83%" id="mcps1.3.2.2.1.2.3.2.3.1.2"><p id="dbss_01_0213__p7260194582118">Description</p>
|
||||
</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody><tr id="dbss_01_0213__row18260134511215"><td class="cellrowborder" valign="top" width="17%" headers="mcps1.3.2.2.1.2.3.2.3.1.1 "><p id="dbss_01_0213__p62601045112117">Instance Name/ID</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="83%" headers="mcps1.3.2.2.1.2.3.2.3.1.2 "><p id="dbss_01_0213__p13698174652218">Name and ID of an instance. Instance ID is automatically generated.</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0213__row326014459212"><td class="cellrowborder" valign="top" width="17%" headers="mcps1.3.2.2.1.2.3.2.3.1.1 "><p id="dbss_01_0213__p16763165610222">Specifications</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="83%" headers="mcps1.3.2.2.1.2.3.2.3.1.2 "><p id="dbss_01_0213__p47630567221">Edition of an instance</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0213__row11260124513215"><td class="cellrowborder" valign="top" width="17%" headers="mcps1.3.2.2.1.2.3.2.3.1.1 "><p id="dbss_01_0213__p1726044518211">Status</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="83%" headers="mcps1.3.2.2.1.2.3.2.3.1.2 "><p id="dbss_01_0213__p1260745162119">Running status of an instance. The options are as follows:</p>
|
||||
<ul id="dbss_01_0213__ul108156241253"><li id="dbss_01_0213__li681519247250"><strong id="dbss_01_0213__b18527358596">Running</strong></li><li id="dbss_01_0213__li38157249252"><strong id="dbss_01_0213__b2403123655916">Creating</strong></li><li id="dbss_01_0213__li178151724142514"><strong id="dbss_01_0213__b169921636155917">Faulty</strong></li><li id="dbss_01_0213__li28151124182512"><strong id="dbss_01_0213__b7452937135912">Disabled</strong></li><li id="dbss_01_0213__li10776152152919"><strong id="dbss_01_0213__b12176101910492">Frozen</strong></li><li id="dbss_01_0213__li08277818445"><strong id="dbss_01_0213__b3152153019319">Frozen for legal management</strong></li><li id="dbss_01_0213__li2020213178440"><strong id="dbss_01_0213__b137381530193120">Frozen due to abuse</strong></li><li id="dbss_01_0213__li98781632194412"><strong id="dbss_01_0213__b533613117319">Frozen due to lack of identity verification </strong></li><li id="dbss_01_0213__li137514444443"><strong id="dbss_01_0213__b49651831203115">Frozen for partnership</strong></li><li id="dbss_01_0213__li18440173918542"><strong id="dbss_01_0213__b878773919312">Creation failed</strong></li></ul>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0213__row17586193614411"><td class="cellrowborder" valign="top" width="17%" headers="mcps1.3.2.2.1.2.3.2.3.1.1 "><p id="dbss_01_0213__p1658616362046">Associated Databases/Total Databases</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="83%" headers="mcps1.3.2.2.1.2.3.2.3.1.2 "><p id="dbss_01_0213__p15586173617413">Number of databases an instance has associated with and Number of databases an instance supports</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0213__row18656102545315"><td class="cellrowborder" valign="top" width="17%" headers="mcps1.3.2.2.1.2.3.2.3.1.1 "><p id="dbss_01_0213__p665662516538">Operation</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="83%" headers="mcps1.3.2.2.1.2.3.2.3.1.2 "><p id="dbss_01_0213__p66921898292">Operations can be performed on the instance. The options are as follows:</p>
|
||||
<ul id="dbss_01_0213__ul118751417183015"><li id="dbss_01_0213__li20875161711308">Configure Rules</li><li id="dbss_01_0213__li11875131718301">Enable</li><li id="dbss_01_0213__li587513170309">Disable</li><li id="dbss_01_0213__li787541719307">Restart</li><li id="dbss_01_0213__li28751171303">View Details</li><li id="dbss_01_0213__li13875121713308">Delete</li></ul>
|
||||
</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
<div class="note" id="dbss_01_0213__note1781511224915"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="dbss_01_0213__p98167254913">You can perform the following operations on instances as required:</p>
|
||||
<ul id="dbss_01_0213__ul178163219491"><li id="dbss_01_0213__li662584812211">Restart<p id="dbss_01_0213__p171726558213"><a name="dbss_01_0213__li662584812211"></a><a name="li662584812211"></a>Locate the row that contains the desired instance, choose <strong id="dbss_01_0213__b722592974114">More</strong> > <strong id="dbss_01_0213__b1543614413418">Restart</strong> in the <strong id="dbss_01_0213__b103731531104117">Operation</strong> column, and click <strong id="dbss_01_0213__b3132134884113">OK</strong> in the displayed dialog box.</p>
|
||||
</li><li id="dbss_01_0213__li2448248192417">Enable<p id="dbss_01_0213__p1992421718253"><a name="dbss_01_0213__li2448248192417"></a><a name="li2448248192417"></a>Locate the row that contains the desired instance, choose <strong id="dbss_01_0213__b1048825811427">More</strong> > <strong id="dbss_01_0213__b74891658114213">Enable</strong> in the <strong id="dbss_01_0213__b64905589427">Operation</strong> column, and click <strong id="dbss_01_0213__b349110585429">OK</strong> in the displayed dialog box.</p>
|
||||
</li><li id="dbss_01_0213__dbss_01_0266_li1761114316136">Disable<p id="dbss_01_0213__dbss_01_0266_p1547553814159"><a name="dbss_01_0213__dbss_01_0266_li1761114316136"></a><a name="dbss_01_0266_li1761114316136"></a>Locate the row that contains the desired instance, choose <strong id="dbss_01_0213__b323017184317">More</strong> > <strong id="dbss_01_0213__b52531712436">Disable</strong> in the <strong id="dbss_01_0213__b13261917124312">Operation</strong> column, and click <strong id="dbss_01_0213__b142714176434">OK</strong> in the displayed dialog box. When an instance is disabled, the audit function is disabled for the databases on the instance.</p>
|
||||
</li><li id="dbss_01_0213__li13449143312253">Delete<p id="dbss_01_0213__p1567961014268"><a name="dbss_01_0213__li13449143312253"></a><a name="li13449143312253"></a>Locate the row that contains the instance that failed to be created, choose <strong id="dbss_01_0213__b2086614419225">More</strong> > <strong id="dbss_01_0213__b487216447226">Delete</strong> in the <strong id="dbss_01_0213__b7872174412216">Operation</strong> column, and click <strong id="dbss_01_0213__b178721444142217">Delete</strong> in the displayed dialog box. Deleted instances will not be displayed in the instance list.</p>
|
||||
</li><li id="dbss_01_0213__li106589263349">View Details<p id="dbss_01_0213__p1465882643410"><a name="dbss_01_0213__li106589263349"></a><a name="li106589263349"></a>Locate the row that contains the instance that failed to be created, choose <strong id="dbss_01_0213__b96751331673">More</strong> > <strong id="dbss_01_0213__b737819121676">View Details</strong> in the <strong id="dbss_01_0213__b1191193117714">Operation</strong> column. In the dialog box that is displayed, view the instance creation failure details.</p>
|
||||
</li></ul>
|
||||
</div></div>
|
||||
</p></li></ol>
|
||||
</div>
|
||||
</div>
|
||||
|
13
docs/dbss/umn/dbss_01_0215.html
Normal file
13
docs/dbss/umn/dbss_01_0215.html
Normal file
@ -0,0 +1,13 @@
|
||||
<a name="dbss_01_0215"></a><a name="dbss_01_0215"></a>
|
||||
|
||||
<h1 class="topictitle1">What Are the Functions of Database Audit?</h1>
|
||||
<div id="body1543915764653"><p id="dbss_01_0215__p125336256129"></p>
|
||||
<div class="p" id="dbss_01_0215__p77916518272"><ul id="dbss_01_0215__dbss_01_0001_ul1224439194513"><li id="dbss_01_0215__dbss_01_0001_li357064865913">Monitors database login, operation type (data definition, operation, and control), and operation object based on risky operations to effectively audit the database.</li><li id="dbss_01_0215__dbss_01_0001_li653619409452">Analyzes risks, sessions, and SQL injection to help you learn the database situation in a timely manner.</li><li id="dbss_01_0215__dbss_01_0001_li10536154034512">Provides a report template library to generate daily, weekly, or monthly audit reports according to your configurations. Sends real-time alarm notifications to help you obtain audit reports in a timely manner.</li></ul>
|
||||
</div>
|
||||
</div>
|
||||
<div>
|
||||
<div class="familylinks">
|
||||
<div class="parentlink"><strong>Parent topic:</strong> <a href="dbss_01_0269.html">Functions</a></div>
|
||||
</div>
|
||||
</div>
|
||||
|
12
docs/dbss/umn/dbss_01_0221.html
Normal file
12
docs/dbss/umn/dbss_01_0221.html
Normal file
@ -0,0 +1,12 @@
|
||||
<a name="dbss_01_0221"></a><a name="dbss_01_0221"></a>
|
||||
|
||||
<h1 class="topictitle1">Does Database Audit Support Bidirectional Audit?</h1>
|
||||
<div id="body1543916340645"><p id="dbss_01_0221__p6895259203910">Yes. In bidirectional audit, both requests and responses to the database are audited.</p>
|
||||
<p id="dbss_01_0221__p1995621117819">Bidirectional audit is used for database audit by default.</p>
|
||||
</div>
|
||||
<div>
|
||||
<div class="familylinks">
|
||||
<div class="parentlink"><strong>Parent topic:</strong> <a href="dbss_01_0269.html">Functions</a></div>
|
||||
</div>
|
||||
</div>
|
||||
|
11
docs/dbss/umn/dbss_01_0224.html
Normal file
11
docs/dbss/umn/dbss_01_0224.html
Normal file
@ -0,0 +1,11 @@
|
||||
<a name="dbss_01_0224"></a><a name="dbss_01_0224"></a>
|
||||
|
||||
<h1 class="topictitle1">How Long Are the Operation Logs of Database Audit Saved by Default?</h1>
|
||||
<div id="body1544665896818"><p id="dbss_01_0224__p1973410308402">The operation logs of database audit are permanently saved.</p>
|
||||
</div>
|
||||
<div>
|
||||
<div class="familylinks">
|
||||
<div class="parentlink"><strong>Parent topic:</strong> <a href="dbss_01_0341.html">Logs</a></div>
|
||||
</div>
|
||||
</div>
|
||||
|
11
docs/dbss/umn/dbss_01_0225.html
Normal file
11
docs/dbss/umn/dbss_01_0225.html
Normal file
@ -0,0 +1,11 @@
|
||||
<a name="dbss_01_0225"></a><a name="dbss_01_0225"></a>
|
||||
|
||||
<h1 class="topictitle1">How Long Is the Database Audit Data Stored by Default?</h1>
|
||||
<div id="body1544666186153"><p id="dbss_01_0225__p18767193618616">Database audit can store online and archived audit data for at least 180 days. </p>
|
||||
</div>
|
||||
<div>
|
||||
<div class="familylinks">
|
||||
<div class="parentlink"><strong>Parent topic:</strong> <a href="dbss_01_0269.html">Functions</a></div>
|
||||
</div>
|
||||
</div>
|
||||
|
72
docs/dbss/umn/dbss_01_0226.html
Normal file
72
docs/dbss/umn/dbss_01_0226.html
Normal file
@ -0,0 +1,72 @@
|
||||
<a name="dbss_01_0226"></a><a name="dbss_01_0226"></a>
|
||||
|
||||
<h1 class="topictitle1">How Do I Back Up the Database Audit Logs?</h1>
|
||||
<div id="body1544666186153"><p id="dbss_01_0226__p18174105916405">Database audit supports manual backup and automatic backup. Audit logs are backed up to OBS. Buckets will be automatically created and will incur a separate bill.</p>
|
||||
<p id="dbss_01_0226__p19970016192810">Perform the following operations to automatically back up audit logs.</p>
|
||||
<div class="section" id="dbss_01_0226__section117835520294"><h4 class="sectiontitle">Automatically Backing Up Database Audit Logs</h4><ol id="dbss_01_0226__en-us_topic_0145057228_ol18449141653"><li id="dbss_01_0226__en-us_topic_0145057228_li1248816492388"><span>Log in to the management console.</span></li><li id="dbss_01_0226__en-us_topic_0145057228_li1723651814598"><span>In the navigation tree on the left, choose <strong id="dbss_01_0226__en-us_topic_0145057228_b1432475172820">Settings</strong>.</span></li><li id="dbss_01_0226__en-us_topic_0145057228_li6202174705919"><span>In the <strong id="dbss_01_0226__en-us_topic_0145057228_b2218329102913">Instance</strong> drop-down list, select the required instance and click the <strong id="dbss_01_0226__en-us_topic_0145057228_b1098142173015">Backup and Restoration</strong> tab.</span></li><li id="dbss_01_0226__en-us_topic_0145057228_li1859172013308"><span>Click <strong id="dbss_01_0226__en-us_topic_0145057228_b15275153752115">Configure</strong>. In the displayed dialog box, set the parameters, as shown in <a href="#dbss_01_0226__en-us_topic_0145057228_fig559320113012">Figure 1</a>. For details about related parameters, see <a href="#dbss_01_0226__en-us_topic_0145057228_table18602206309">Table 1</a>. </span><p><div class="fignone" id="dbss_01_0226__en-us_topic_0145057228_fig559320113012"><a name="dbss_01_0226__en-us_topic_0145057228_fig559320113012"></a><a name="en-us_topic_0145057228_fig559320113012"></a><span class="figcap"><b>Figure 1 </b>Configure Automatic Backup dialog box</span><br><span><img id="dbss_01_0226__en-us_topic_0145057228_image18589115017461" src="en-us_image_0000001294284718.png"></span></div>
|
||||
|
||||
<div class="tablenoborder"><a name="dbss_01_0226__en-us_topic_0145057228_table18602206309"></a><a name="en-us_topic_0145057228_table18602206309"></a><table cellpadding="4" cellspacing="0" summary="" id="dbss_01_0226__en-us_topic_0145057228_table18602206309" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameters</caption><thead align="left"><tr id="dbss_01_0226__en-us_topic_0145057228_row66082019309"><th align="left" class="cellrowborder" valign="top" width="21%" id="mcps1.3.3.2.4.2.2.2.4.1.1"><p id="dbss_01_0226__en-us_topic_0145057228_p1660112023010">Parameter</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="61%" id="mcps1.3.3.2.4.2.2.2.4.1.2"><p id="dbss_01_0226__en-us_topic_0145057228_p166014209304">Description</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="18%" id="mcps1.3.3.2.4.2.2.2.4.1.3"><p id="dbss_01_0226__en-us_topic_0145057228_p360162012309">Example Value</p>
|
||||
</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody><tr id="dbss_01_0226__en-us_topic_0145057228_row1260620173019"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.3.2.4.2.2.2.4.1.1 "><p id="dbss_01_0226__en-us_topic_0145057228_p46002063014">Automatic Backup</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="61%" headers="mcps1.3.3.2.4.2.2.2.4.1.2 "><p id="dbss_01_0226__en-us_topic_0145057228_p46012053012">Status of automatic backup</p>
|
||||
<ul id="dbss_01_0226__en-us_topic_0145057228_ul10255317590"><li id="dbss_01_0226__en-us_topic_0145057228_li1121353205914"><span><img id="dbss_01_0226__en-us_topic_0145057228_image741085411597" src="en-us_image_0000001581367781.png"></span>: enabled</li><li id="dbss_01_0226__en-us_topic_0145057228_li147198111201"><span><img id="dbss_01_0226__en-us_topic_0145057228_image15918211003" src="en-us_image_0000001530888000.png"></span>: disabled</li></ul>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.3.2.4.2.2.2.4.1.3 "><p id="dbss_01_0226__en-us_topic_0145057228_p1386912112432"></p>
|
||||
<p id="dbss_01_0226__en-us_topic_0145057228_p852775211422"></p>
|
||||
<p id="dbss_01_0226__en-us_topic_0145057228_p3622174717575"></p>
|
||||
<p id="dbss_01_0226__en-us_topic_0145057228_p10725682112"><span><img id="dbss_01_0226__en-us_topic_0145057228_image1650219514" src="en-us_image_0000001530889940.png"></span></p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0226__en-us_topic_0145057228_row16601020103014"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.3.2.4.2.2.2.4.1.1 "><p id="dbss_01_0226__en-us_topic_0145057228_p18601320153018">Backup Period</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="61%" headers="mcps1.3.3.2.4.2.2.2.4.1.2 "><p id="dbss_01_0226__en-us_topic_0145057228_p460102073014">Automatic backup period. Its options are as follows:</p>
|
||||
<ul id="dbss_01_0226__en-us_topic_0145057228_ul1660142053017"><li id="dbss_01_0226__en-us_topic_0145057228_li46112043019"><strong id="dbss_01_0226__en-us_topic_0145057228_b33926201317">Daily</strong></li><li id="dbss_01_0226__en-us_topic_0145057228_li146162053015"><strong id="dbss_01_0226__en-us_topic_0145057228_b91121634154516">Hourly</strong></li></ul>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.3.2.4.2.2.2.4.1.3 "><p id="dbss_01_0226__en-us_topic_0145057228_p126132073010">Daily</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0226__en-us_topic_0145057228_row1661192012301"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.3.2.4.2.2.2.4.1.1 "><p id="dbss_01_0226__en-us_topic_0145057228_p561920143020">Started</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="61%" headers="mcps1.3.3.2.4.2.2.2.4.1.2 "><p id="dbss_01_0226__en-us_topic_0145057228_p86118201301">Start time of the backup. Click <span><img id="dbss_01_0226__en-us_topic_0145057228_image570811271450" src="en-us_image_0000001147868462.png"></span> to configure.</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.3.2.4.2.2.2.4.1.3 "><p id="dbss_01_0226__en-us_topic_0145057228_p061112018304">2020/01/14 20:27:08</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0226__en-us_topic_0145057228_row13461452133815"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.3.2.4.2.2.2.4.1.1 "><p id="dbss_01_0226__en-us_topic_0145057228_p1734755213816">Bucket Name</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="61%" headers="mcps1.3.3.2.4.2.2.2.4.1.2 "><p id="dbss_01_0226__en-us_topic_0145057228_p14347175210387">Name of the OBS bucket used for backup. Its options are as follows:</p>
|
||||
<ul id="dbss_01_0226__en-us_topic_0145057228_ul16491718174113"><li id="dbss_01_0226__en-us_topic_0145057228_li064931813412">Create Default Bucket</li><li id="dbss_01_0226__en-us_topic_0145057228_li14717172684117">Select Bucket</li></ul>
|
||||
<div class="note" id="dbss_01_0226__en-us_topic_0145057228_note18242171019409"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="dbss_01_0226__en-us_topic_0145057228_ul121318819167"><li id="dbss_01_0226__en-us_topic_0145057228_li113188111618">If you click <strong id="dbss_01_0226__en-us_topic_0145057228_b2749164810813">Create Default Bucket</strong>, you will be prompted to authorize OBS for exporting audit log backups.</li><li id="dbss_01_0226__en-us_topic_0145057228_li154701019163">Audit logs can be exported only to the bucket created by DBSS.</li></ul>
|
||||
</div></div>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.3.2.4.2.2.2.4.1.3 "><p id="dbss_01_0226__en-us_topic_0145057228_p143471352183813">20f18-7a5a-4042</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0226__en-us_topic_0145057228_row1774834414118"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.3.2.4.2.2.2.4.1.1 "><p id="dbss_01_0226__en-us_topic_0145057228_p1074916441411">Export Directory</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="61%" headers="mcps1.3.3.2.4.2.2.2.4.1.2 "><p id="dbss_01_0226__en-us_topic_0145057228_p177499445418">Directory for storing backup files in the OBS bucket.</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.3.2.4.2.2.2.4.1.3 "><p id="dbss_01_0226__en-us_topic_0145057228_p127497448414">test</p>
|
||||
</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
</p></li><li id="dbss_01_0226__en-us_topic_0145057228_li293895151213"><span>Click <span class="uicontrol" id="dbss_01_0226__en-us_topic_0145057228_uicontrol104317111314"><b>OK</b></span>.</span><p><div class="note" id="dbss_01_0226__en-us_topic_0145057228_note19931152112513"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="dbss_01_0226__en-us_topic_0145057228_p9932452192518">After the automatic backup function is configured, new data in the database will be backed up one hour later. Then you can view the backup information.</p>
|
||||
</div></div>
|
||||
</p></li></ol>
|
||||
</div>
|
||||
</div>
|
||||
<div>
|
||||
<div class="familylinks">
|
||||
<div class="parentlink"><strong>Parent topic:</strong> <a href="dbss_01_0341.html">Logs</a></div>
|
||||
</div>
|
||||
</div>
|
||||
|
12
docs/dbss/umn/dbss_01_0227.html
Normal file
12
docs/dbss/umn/dbss_01_0227.html
Normal file
@ -0,0 +1,12 @@
|
||||
<a name="dbss_01_0227"></a><a name="dbss_01_0227"></a>
|
||||
|
||||
<h1 class="topictitle1">Can the Operation Logs of Database Audit Be Migrated?</h1>
|
||||
<div id="body1544666400954"><p id="dbss_01_0227__p195416243411">No. Database audit does not support migrating database operation logs.</p>
|
||||
<p id="dbss_01_0227__p2697218183415">You can view the operation logs of database audit. For details, see <a href="dbss_01_0224.html">How Long Are the Operation Logs of Database Audit Saved by Default?</a></p>
|
||||
</div>
|
||||
<div>
|
||||
<div class="familylinks">
|
||||
<div class="parentlink"><strong>Parent topic:</strong> <a href="dbss_01_0341.html">Logs</a></div>
|
||||
</div>
|
||||
</div>
|
||||
|
12
docs/dbss/umn/dbss_01_0228.html
Normal file
12
docs/dbss/umn/dbss_01_0228.html
Normal file
@ -0,0 +1,12 @@
|
||||
<a name="dbss_01_0228"></a><a name="dbss_01_0228"></a>
|
||||
|
||||
<h1 class="topictitle1">How Soon Can I Receive an Alarm Notification If an Exception Occurs in Database Audit?</h1>
|
||||
<div id="body1544666535631"><p id="dbss_01_0228__p1626853711419">When database audit is running properly, if an exception occurs, you will receive an alarm notification within 5 minutes.</p>
|
||||
<p id="dbss_01_0228__p197409293120">If you set alarm notifications, when database audit is running properly, the system generates an alarm notification when a metric of a database audit instance resource (CPU, memory, or disk) exceeds the alarm threshold. You can receive the notification within about 5 minutes.</p>
|
||||
</div>
|
||||
<div>
|
||||
<div class="familylinks">
|
||||
<div class="parentlink"><strong>Parent topic:</strong> <a href="dbss_01_0269.html">Functions</a></div>
|
||||
</div>
|
||||
</div>
|
||||
|
11
docs/dbss/umn/dbss_01_0229.html
Normal file
11
docs/dbss/umn/dbss_01_0229.html
Normal file
@ -0,0 +1,11 @@
|
||||
<a name="dbss_01_0229"></a><a name="dbss_01_0229"></a>
|
||||
|
||||
<h1 class="topictitle1">Is the Total Number Of Alarms Every Day the Same as that of Emails?</h1>
|
||||
<div id="body1545297190310"><p id="dbss_01_0229__p8060118">Yes. One alarm message corresponds to one email notification.</p>
|
||||
</div>
|
||||
<div>
|
||||
<div class="familylinks">
|
||||
<div class="parentlink"><strong>Parent topic:</strong> <a href="dbss_01_0269.html">Functions</a></div>
|
||||
</div>
|
||||
</div>
|
||||
|
13
docs/dbss/umn/dbss_01_0233.html
Normal file
13
docs/dbss/umn/dbss_01_0233.html
Normal file
@ -0,0 +1,13 @@
|
||||
<a name="dbss_01_0233"></a><a name="dbss_01_0233"></a>
|
||||
|
||||
<h1 class="topictitle1">How Do I Check the Version of Database Audit?</h1>
|
||||
<div id="body1545296268015"><p id="dbss_01_0233__p741528194">To check the version of database audit, perform the following steps:</p>
|
||||
<ol id="dbss_01_0233__ol168909414176"><li id="dbss_01_0233__li29607283452"><span>Log in to the management console.</span></li><li id="dbss_01_0233__li19643994480"><span>Select a region, click <span><img id="dbss_01_0233__dbss_01_0186_image12421104763114" src="en-us_image_0000001074398929.png"></span>, and choose <span class="menucascade" id="dbss_01_0233__dbss_01_0186_menucascade1215612612394"><b><span class="uicontrol" id="dbss_01_0233__dbss_01_0186_uicontrol415682653911">Security</span></b> > <b><span class="uicontrol" id="dbss_01_0233__dbss_01_0186_uicontrol2156182620396">Database Security Service</span></b></span>. The <strong id="dbss_01_0233__dbss_01_0186_b6156926113915">Dashboard</strong> page is displayed.</span></li><li id="dbss_01_0233__li1723651814598"><span>In the navigation tree on the left, choose <strong id="dbss_01_0233__b75515352203">Instances</strong>.</span></li><li id="dbss_01_0233__li1843441745"><span>Click the name of the instance whose information you want to view. The <strong id="dbss_01_0233__b65201012182012">Overview</strong> page is displayed.</span></li><li id="dbss_01_0233__li164301635161817"><span>View the instance version, as shown in <a href="#dbss_01_0233__fig14897393208">Figure 1</a>.</span><p><div class="fignone" id="dbss_01_0233__fig14897393208"><a name="dbss_01_0233__fig14897393208"></a><a name="fig14897393208"></a><span class="figcap"><b>Figure 1 </b>Viewing the instance version</span><br><span><img id="dbss_01_0233__image623884815495" src="en-us_image_0000001552210846.png"></span></div>
|
||||
</p></li></ol>
|
||||
</div>
|
||||
<div>
|
||||
<div class="familylinks">
|
||||
<div class="parentlink"><strong>Parent topic:</strong> <a href="dbss_01_0114.html">Operations</a></div>
|
||||
</div>
|
||||
</div>
|
||||
|
13
docs/dbss/umn/dbss_01_0234.html
Normal file
13
docs/dbss/umn/dbss_01_0234.html
Normal file
@ -0,0 +1,13 @@
|
||||
<a name="dbss_01_0234"></a><a name="dbss_01_0234"></a>
|
||||
|
||||
<h1 class="topictitle1">How Do I View All Alarms in Database Audit?</h1>
|
||||
<div id="body1545297742259"><p id="dbss_01_0234__p8060118">To check the alarms of database audit, perform the following steps:</p>
|
||||
<ol id="dbss_01_0234__ol3976165912213"><li id="dbss_01_0234__li4990487358"><span id="dbss_01_0234__p1983613271494">To query specified alarms, perform the following steps:</span><p><ul id="dbss_01_0234__dbss_01_0252_ul1149562962616"><li id="dbss_01_0234__dbss_01_0252_li174951829102614">Select <strong id="dbss_01_0234__dbss_01_0252_b9987155142420">Last 30 minutes</strong>, <strong id="dbss_01_0234__dbss_01_0252_b1679416565247">1 hour</strong>, <strong id="dbss_01_0234__dbss_01_0252_b6251152252">24 hours</strong>, <strong id="dbss_01_0234__dbss_01_0252_b119871276255">7 days</strong>, or <strong id="dbss_01_0234__dbss_01_0252_b121311118257">30 days</strong> for <strong id="dbss_01_0234__dbss_01_0252_b84091615142514">Time</strong>, and click <span><img id="dbss_01_0234__dbss_01_0252_image167968241613" src="en-us_image_0000001575677796.png"></span> to view alarms of the specified time range.</li><li id="dbss_01_0234__dbss_01_0252_li204961629132617">Select <strong id="dbss_01_0234__dbss_01_0252_b1075116454468">All</strong>, <strong id="dbss_01_0234__dbss_01_0252_b675224510461">High</strong>, <strong id="dbss_01_0234__dbss_01_0252_b1175214456463">Moderate</strong>, or <strong id="dbss_01_0234__dbss_01_0252_b167532454463">Low</strong> for <strong id="dbss_01_0234__dbss_01_0252_b8753144514461">Risk Severity</strong>. Alarms of specified severity are displayed in the list.</li><li id="dbss_01_0234__dbss_01_0252_li13496729152615">Select an alarm type, and alarms of specified alarm type is displayed in the list.</li></ul>
|
||||
</p></li></ol>
|
||||
</div>
|
||||
<div>
|
||||
<div class="familylinks">
|
||||
<div class="parentlink"><strong>Parent topic:</strong> <a href="dbss_01_0114.html">Operations</a></div>
|
||||
</div>
|
||||
</div>
|
||||
|
44
docs/dbss/umn/dbss_01_0235.html
Normal file
44
docs/dbss/umn/dbss_01_0235.html
Normal file
@ -0,0 +1,44 @@
|
||||
<a name="dbss_01_0235"></a><a name="dbss_01_0235"></a>
|
||||
|
||||
<h1 class="topictitle1">Database Audit Is Unavailable</h1>
|
||||
<div id="body1605172168617"><div class="section" id="dbss_01_0235__section11782144919211"><h4 class="sectiontitle">Symptom</h4><p id="dbss_01_0235__p11285114214382">After the database traffic is triggered, you cannot find the audit information about an executed statement in the SQL statement list.</p>
|
||||
<p id="dbss_01_0235__p133740292293">In this case, perform the following operations to troubleshoot the problem:</p>
|
||||
<ul id="dbss_01_0235__ul125631048143312"><li id="dbss_01_0235__li9563144816332"><a href="#dbss_01_0235__section8232320142510">Checking Database Information and Audit Function Settings</a></li><li id="dbss_01_0235__li12299591336"><a href="#dbss_01_0235__section1815818210314">Checking Audited Database Settings</a></li><li id="dbss_01_0235__li177281613413"><a href="#dbss_01_0235__section439162819315">Checking Database Agent Status</a></li><li id="dbss_01_0235__li538318241347"><a href="#dbss_01_0235__section20936182118324">Checking the Security Group Rules of the Database Audit Instance</a></li></ul>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0235__section8232320142510"><a name="dbss_01_0235__section8232320142510"></a><a name="section8232320142510"></a><h4 class="sectiontitle">Checking Database Information and Audit Function Settings</h4><ol id="dbss_01_0235__ol19428205443415"><li id="dbss_01_0235__li62917254391"><span>Check whether the database information is correct.</span><p><ul id="dbss_01_0235__ul57626357389"><li id="dbss_01_0235__li20762135143813">If the database information is correct, go to <a href="#dbss_01_0235__li941038153911">2</a>.</li><li id="dbss_01_0235__li1762335143810">If the database information is incorrect, click <strong id="dbss_01_0235__b1289185919195">Delete</strong> to delete the database, and then click <strong id="dbss_01_0235__b108928596194">Add Database</strong> to add the database again.<ul id="dbss_01_0235__ul976223513810"><li id="dbss_01_0235__li77621359383">If the fault is rectified, no further operation is required.</li><li id="dbss_01_0235__li7762203513810">If the problem persists, go to <a href="#dbss_01_0235__li941038153911">2</a>.</li></ul>
|
||||
</li></ul>
|
||||
</p></li><li id="dbss_01_0235__li941038153911"><a name="dbss_01_0235__li941038153911"></a><a name="li941038153911"></a><span>Check whether the database audit function is enabled.</span><p><ul id="dbss_01_0235__ul5763435133814"><li id="dbss_01_0235__li276314359382">If <strong id="dbss_01_0235__b382782911225">Audit Status</strong> is <strong id="dbss_01_0235__b1832329142217">Enabled</strong>, go to <a href="#dbss_01_0235__section1815818210314">Checking Audited Database Settings</a>.</li><li id="dbss_01_0235__li97631835123819">If <strong id="dbss_01_0235__b149091720238">Audit Status</strong> is <strong id="dbss_01_0235__b149097792314">Disabled</strong>, click <strong id="dbss_01_0235__b6910187122315">Enable</strong> to enable the database audit function.<ul id="dbss_01_0235__ul17763143533816"><li id="dbss_01_0235__li27631535183811">If the fault is rectified, no further operation is required.</li><li id="dbss_01_0235__li13763183503814">If the problem persists, go to <a href="#dbss_01_0235__section1815818210314">Checking Audited Database Settings</a>.</li></ul>
|
||||
</li></ul>
|
||||
</p></li></ol>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0235__section1815818210314"><a name="dbss_01_0235__section1815818210314"></a><a name="section1815818210314"></a><h4 class="sectiontitle">Checking Audited Database Settings</h4><ul id="dbss_01_0235__ul88631613989"><li id="dbss_01_0235__li1863013688">If <strong id="dbss_01_0235__b1169544415297">Status</strong> is <strong id="dbss_01_0235__b163651928182915">Enabled</strong>, go to <a href="#dbss_01_0235__section439162819315">Checking Database Agent Status</a>.</li><li id="dbss_01_0235__li143052321186">If <strong id="dbss_01_0235__b337067114419">Status</strong> is <strong id="dbss_01_0235__b13701778448">Disabled</strong>, click <strong id="dbss_01_0235__b1937119711443">Enable</strong> to enable the desired audit scope rule of the database.<ul id="dbss_01_0235__ul1720717318133"><li id="dbss_01_0235__li1094119364131">If the fault is rectified, no further operation is required.</li><li id="dbss_01_0235__li2943536171319">If the problem persists, go to <a href="#dbss_01_0235__section439162819315">Checking Database Agent Status</a>.</li></ul>
|
||||
</li></ul>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0235__section439162819315"><a name="dbss_01_0235__section439162819315"></a><a name="section439162819315"></a><h4 class="sectiontitle">Checking Database Agent Status</h4><ol id="dbss_01_0235__ol894914411493"><li id="dbss_01_0235__li15949547491"><span>Log in to the node where the agent is installed as user <strong id="dbss_01_0235__b168607344530">root</strong> by using a cross-platform remote access tool (for example, PuTTY) via SSH.</span></li><li id="dbss_01_0235__li197831012114915"><span>Run the following command to view the running status of the agent program:</span><p><div class="p" id="dbss_01_0235__p1939402518494"><strong id="dbss_01_0235__b1958052473811">ps</strong> <strong id="dbss_01_0235__b195801624133815">-ef|grep</strong> <strong id="dbss_01_0235__b658212413819">audit_agent</strong><ul id="dbss_01_0235__ul19951856173813"><li id="dbss_01_0235__li19951956193810">If the following information is displayed, the agent is running properly. Go to <a href="#dbss_01_0235__li321115454910">4</a>.<div class="codecoloring" codetype="Java" id="dbss_01_0235__screen15399151133920"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span></pre></div></td><td class="code"><div><pre><span></span><span class="o">/</span><span class="n">opt</span><span class="o">/</span><span class="n">dbss_audit_agent</span><span class="o">/</span><span class="n">bin</span><span class="o">/</span><span class="n">audit_agent</span>
|
||||
</pre></div></td></tr></table></div>
|
||||
|
||||
</div>
|
||||
</li><li id="dbss_01_0235__li18861102414395">If no information is displayed, the agent does not run properly. Go to <a href="#dbss_01_0235__li10382244413">3</a>.</li></ul>
|
||||
</div>
|
||||
</p></li><li id="dbss_01_0235__li10382244413"><a name="dbss_01_0235__li10382244413"></a><a name="li10382244413"></a><span>Run the following command to restart the agent:</span><p><p id="dbss_01_0235__p342020516289"><strong id="dbss_01_0235__b19381462814">service</strong> <strong id="dbss_01_0235__b10382045285">audit_agent</strong> <strong id="dbss_01_0235__b143816413282">restart</strong></p>
|
||||
<ul id="dbss_01_0235__ul93738433451"><li id="dbss_01_0235__li1937314394515">If the fault is rectified, no further operation is required.</li><li id="dbss_01_0235__li237334334512">If the problem persists, go to <a href="#dbss_01_0235__li321115454910">4</a>.</li></ul>
|
||||
</p></li><li id="dbss_01_0235__li321115454910"><a name="dbss_01_0235__li321115454910"></a><a name="li321115454910"></a><span>Run the following command to check the communication status between the agent and database audit instance:</span><p><p id="dbss_01_0235__p13237193019469"><strong id="dbss_01_0235__b170215187514">tailf</strong> <strong id="dbss_01_0235__b8703824125115">/opt/dbss_audit_agent/log/audit_agent.log</strong></p>
|
||||
<ul id="dbss_01_0235__ul8219548496"><li id="dbss_01_0235__li774573354817">If information similar to the following is displayed, the communication between the agent and database audit instance is normal. Go to <a href="#dbss_01_0235__section02572203259">Verifying the Result</a>.<div class="fignone" id="dbss_01_0235__fig123204818207"><span class="figcap"><b>Figure 1 </b>Normal communication</span><br><span><img id="dbss_01_0235__image15231348152014" src="en-us_image_0291724693.png"></span></div>
|
||||
</li><li id="dbss_01_0235__li18210547499">If information similar to the following is displayed, the communication between the agent and database audit instance is abnormal. Go to <a href="#dbss_01_0235__section20936182118324">Checking the Security Group Rules of the Database Audit Instance</a>.<div class="fignone" id="dbss_01_0235__fig8492132411531"><span class="figcap"><b>Figure 2 </b>Communication error</span><br><span><img id="dbss_01_0235__image9492324105317" src="en-us_image_0291724694.png"></span></div>
|
||||
</li></ul>
|
||||
</p></li></ol>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0235__section20936182118324"><a name="dbss_01_0235__section20936182118324"></a><a name="section20936182118324"></a><h4 class="sectiontitle">Checking the Security Group Rules of the Database Audit Instance</h4><ol id="dbss_01_0235__ol097131012458"><li id="dbss_01_0235__li1797171011454"><span>Go to the <strong id="dbss_01_0235__b174791221947">Database Security Service</strong> page.</span></li><li id="dbss_01_0235__li297114101459"><span>In the navigation tree on the left, choose <strong id="dbss_01_0235__b176558153518">Database Audit</strong> > <strong id="dbss_01_0235__b15660141518510">Databases</strong>. The <strong id="dbss_01_0235__b166600152058">Databases</strong> page is displayed.</span></li><li id="dbss_01_0235__li18659945195918"><span>Select an instance where the database is located from the <strong id="dbss_01_0235__b3735195118515">Instance</strong> drop-down list.</span></li><li id="dbss_01_0235__li17506193911713"><span>Record the IP address of the agent node.</span><p><p id="dbss_01_0235__p145514016392">Click <span><img id="dbss_01_0235__image1490583833617" src="en-us_image_0000001072223296.png"></span> next to the database to view the information of its agent, and record <strong id="dbss_01_0235__b189541643103210">Installing Node IP Address</strong>.</p>
|
||||
</p></li><li id="dbss_01_0235__li17406142715380"><span>Add an inbound rule for the installing node.</span><p><ol type="a" id="dbss_01_0235__ol114214236151"><li id="dbss_01_0235__li2964239161511">Click <span class="uicontrol" id="dbss_01_0235__uicontrol164673331189"><b>OK</b></span>.</li></ol>
|
||||
</p></li></ol>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0235__section02572203259"><a name="dbss_01_0235__section02572203259"></a><a name="section02572203259"></a><h4 class="sectiontitle">Verifying the Result</h4><div class="p" id="dbss_01_0235__p567815395429">In your database, run an SQL statement on the node where the agent is installed, and then search for the statement in the SQL statement list.<ul id="dbss_01_0235__en-us_topic_0170339096_ul206522426431"><li id="dbss_01_0235__en-us_topic_0170339096_li24410094517">If the SQL statement is found, the problem has been solved.</li><li id="dbss_01_0235__en-us_topic_0170339096_li16525426430">If the SQL statement is not found, the problem persists. Contact customer service.</li></ul>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div>
|
||||
<div class="familylinks">
|
||||
<div class="parentlink"><strong>Parent topic:</strong> <a href="dbss_01_0323.html">Troubleshooting</a></div>
|
||||
</div>
|
||||
</div>
|
||||
|
24
docs/dbss/umn/dbss_01_0237.html
Normal file
24
docs/dbss/umn/dbss_01_0237.html
Normal file
@ -0,0 +1,24 @@
|
||||
<a name="dbss_01_0237"></a><a name="dbss_01_0237"></a>
|
||||
|
||||
<h1 class="topictitle1">Functions</h1>
|
||||
<div id="body1552458156013"><p id="dbss_01_0237__p9533201911348">Database audit delivers functions such as user behavior detection and audit, multi-dimensional lead analysis, real-time alarms, and reports.</p>
|
||||
<ul id="dbss_01_0237__ul1982514421519"><li id="dbss_01_0237__li1182518421712">User Behavior Detection and Audit<ul id="dbss_01_0237__ul28212491016"><li id="dbss_01_0237__li1055810550517">Associates access operations in the application layer with those in the database layer.</li><li id="dbss_01_0237__li0741191842611">Uses built-in or user-defined privacy data protection rules to mask private data (such as accounts and passwords) in audit logs displayed on the console.</li></ul>
|
||||
</li><li id="dbss_01_0237__li27951159811">Multi-dimensional Lead Analysis<ul id="dbss_01_0237__ul942520111626"><li id="dbss_01_0237__li1193102945215">Behavior analysis<p id="dbss_01_0237__p10600143025210"><a name="dbss_01_0237__li1193102945215"></a><a name="li1193102945215"></a>Supports analysis in multiple dimensions, such as audit duration, statement quantity, risk quantity, risk distribution, session statistics, and SQL distribution.</p>
|
||||
</li><li id="dbss_01_0237__li1627413322523">Session analysis<p id="dbss_01_0237__p8268163385218"><a name="dbss_01_0237__li1627413322523"></a><a name="li1627413322523"></a>Conducts analysis based on time, user, IP address, and client.</p>
|
||||
</li><li id="dbss_01_0237__li91352357527">Statement analysis<p id="dbss_01_0237__p2014614365523"><a name="dbss_01_0237__li91352357527"></a><a name="li91352357527"></a>Provides multiple search criteria, such as time, risk severity, user, client IP address, database IP address, operation type, and rule.</p>
|
||||
</li></ul>
|
||||
</li><li id="dbss_01_0237__li04048231724">Real-time Alarms for Risky Operations and SQL Injection<ul id="dbss_01_0237__ul71351834320"><li id="dbss_01_0237__li10413178145411">Risky operation<p id="dbss_01_0237__p356439115410"><a name="dbss_01_0237__li10413178145411"></a><a name="li10413178145411"></a>Defines a risky operation in fine-grained dimensions such as operation type, operation object, and risk severity.</p>
|
||||
</li><li id="dbss_01_0237__li3566131117544">SQL injection<p id="dbss_01_0237__p10614131275411"><a name="dbss_01_0237__li3566131117544"></a><a name="li3566131117544"></a>Provides an SQL injection library, which facilitates alarm reporting for database exceptions based on the SQL command feature or risk severity.</p>
|
||||
</li><li id="dbss_01_0237__li178743157214">System resource<p id="dbss_01_0237__p1936518162212"><a name="dbss_01_0237__li178743157214"></a><a name="li178743157214"></a>Reports alarms when the usage of system resources (CPU, memory, and disk) reaches configured threshold.</p>
|
||||
</li></ul>
|
||||
</li><li id="dbss_01_0237__li1862644521">Fine-grained Reports for Various Abnormal Behaviors<ul id="dbss_01_0237__ul889425416214"><li id="dbss_01_0237__li1751217625515">Session behavior<p id="dbss_01_0237__p174702078551"><a name="dbss_01_0237__li1751217625515"></a><a name="li1751217625515"></a>Provides session analysis report of the client and database users.</p>
|
||||
</li><li id="dbss_01_0237__li6348131618557">Risky operation<p id="dbss_01_0237__p141421217175510"><a name="dbss_01_0237__li6348131618557"></a><a name="li6348131618557"></a>Provides the risk distribution and analysis report.</p>
|
||||
</li></ul>
|
||||
</li></ul>
|
||||
</div>
|
||||
<div>
|
||||
<div class="familylinks">
|
||||
<div class="parentlink"><strong>Parent topic:</strong> <a href="dbss_01_0138.html">Overview</a></div>
|
||||
</div>
|
||||
</div>
|
||||
|
17
docs/dbss/umn/dbss_01_0238.html
Normal file
17
docs/dbss/umn/dbss_01_0238.html
Normal file
@ -0,0 +1,17 @@
|
||||
<a name="dbss_01_0238"></a><a name="dbss_01_0238"></a>
|
||||
|
||||
<h1 class="topictitle1">Advantages</h1>
|
||||
<div id="body1552458789479"><p id="dbss_01_0238__p1992816112177">Database audit provides you with the database audit function in out-of-path pattern, enabling the system to generate real-time alarms for risky operations. In addition, database audit generates compliance reports that meet data security standards. In this way, it locates internal violations and improper operations, protecting your data assets.</p>
|
||||
<ul id="dbss_01_0238__ul13995201712170"><li id="dbss_01_0238__li1199541781710">Simple to set up<p id="dbss_01_0238__p124241381178"><a name="dbss_01_0238__li1199541781710"></a><a name="li1199541781710"></a>Database audit is deployed in out-of-path pattern. It is simple to set up and operate.</p>
|
||||
</li><li id="dbss_01_0238__li1583632991718">Comprehensive audit<p id="dbss_01_0238__p698516861815"><a name="dbss_01_0238__li1583632991718"></a><a name="li1583632991718"></a>Supports audit of databases built on RDS, ECS, and BMS on the management console.</p>
|
||||
</li><li id="dbss_01_0238__li485004112175">Quick identification<p id="dbss_01_0238__p116012554172"><a name="dbss_01_0238__li485004112175"></a><a name="li485004112175"></a>Implements 99%+ application association audit, complete SQL parsing, and accurate protocol analysis.</p>
|
||||
</li><li id="dbss_01_0238__li4411223161812">Efficient analysis<p id="dbss_01_0238__p1840415377189"><a name="dbss_01_0238__li4411223161812"></a><a name="li4411223161812"></a>Responds quickly for data query with 10,000 requests per second from massive volumes of data saved.</p>
|
||||
</li><li id="dbss_01_0238__li143813121912">Clear permission division<p id="dbss_01_0238__p1113992218192"><a name="dbss_01_0238__li143813121912"></a><a name="li143813121912"></a>Clearly divides permissions among the system administrator, security administrator, and audit administrator, meeting audit security requirements.</p>
|
||||
</li></ul>
|
||||
</div>
|
||||
<div>
|
||||
<div class="familylinks">
|
||||
<div class="parentlink"><strong>Parent topic:</strong> <a href="dbss_01_0138.html">Overview</a></div>
|
||||
</div>
|
||||
</div>
|
||||
|
69
docs/dbss/umn/dbss_01_0239.html
Normal file
69
docs/dbss/umn/dbss_01_0239.html
Normal file
@ -0,0 +1,69 @@
|
||||
<a name="dbss_01_0239"></a><a name="dbss_01_0239"></a>
|
||||
|
||||
<h1 class="topictitle1">Configuring Alarm Notifications</h1>
|
||||
<div id="body1557806423543"><div class="p" id="dbss_01_0239__p15105203142815">After configuring alarm notifications, you can receive DBSS alarms on database risks. If this function is not enabled, you have to log in to the management console to view alarms.<ul id="dbss_01_0239__ul13543111020309"><li id="dbss_01_0239__li12521613133014">Alarm notifications may be mistakenly blocked. If you have enabled notifications but not received any, check whether they have been blocked as spasms.</li><li id="dbss_01_0239__li65446378592">The system collects alarm statistics every 5 minutes and sends alarm notifications (if any).</li><li id="dbss_01_0239__li19631194114443">You can also enable report notifications to get notified when the reports you subscribed to are generated. For details, see <a href="dbss_01_0248.html">Viewing Audit Reports</a>.</li></ul>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0239__section441811405410"><h4 class="sectiontitle">Prerequisites</h4><p id="dbss_01_0239__p171911329191216">You have applied for a database audit instance and the <strong id="dbss_01_0239__b188125311214">Status</strong> is <strong id="dbss_01_0239__b39125381215">Running</strong>.</p>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0239__section17503131918"><h4 class="sectiontitle">Procedure</h4><ol id="dbss_01_0239__ol149220520364"><li id="dbss_01_0239__li1226102534116"><span>In the navigation tree on the left, choose <strong id="dbss_01_0239__b7938161112188">Settings</strong>.</span></li><li id="dbss_01_0239__li1526350415"><span>In the <strong id="dbss_01_0239__b1550013101316">Instance</strong> drop-down list, select an instance to configure alarm notifications.</span></li><li id="dbss_01_0239__li4174122125815"><span>Click the <strong id="dbss_01_0239__b68901479136">Alarm Notifications</strong> tab.</span></li><li id="dbss_01_0239__li159327411873"><span>Set alarm notifications. For details about related parameters, see <a href="#dbss_01_0239__table29461252153613">Table 1</a>.</span><p><div class="fignone" id="dbss_01_0239__fig139441652133611"><span class="figcap"><b>Figure 1 </b>Configuring alarm notifications</span><br><span><img id="dbss_01_0239__image575975110720" src="en-us_image_0000001173357101.png"></span></div>
|
||||
|
||||
<div class="tablenoborder"><a name="dbss_01_0239__table29461252153613"></a><a name="table29461252153613"></a><table cellpadding="4" cellspacing="0" summary="" id="dbss_01_0239__table29461252153613" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Alarm notification parameters</caption><thead align="left"><tr id="dbss_01_0239__row7948205203612"><th align="left" class="cellrowborder" valign="top" width="21%" id="mcps1.3.3.2.4.2.2.2.4.1.1"><p id="dbss_01_0239__p095017524368">Parameter</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="61%" id="mcps1.3.3.2.4.2.2.2.4.1.2"><p id="dbss_01_0239__p895114521361">Description</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="18%" id="mcps1.3.3.2.4.2.2.2.4.1.3"><p id="dbss_01_0239__p199523525366">Example Value</p>
|
||||
</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody><tr id="dbss_01_0239__row4309191713252"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.3.2.4.2.2.2.4.1.1 "><p id="dbss_01_0239__p430901710256">Message Notifications</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="61%" headers="mcps1.3.3.2.4.2.2.2.4.1.2 "><p id="dbss_01_0239__p1494913262473">Enables or disables notifications.</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.3.2.4.2.2.2.4.1.3 "> </td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0239__row1495265210362"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.3.2.4.2.2.2.4.1.1 "><p id="dbss_01_0239__p149534524364">Daily Alarm Notifications</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="61%" headers="mcps1.3.3.2.4.2.2.2.4.1.2 "><p id="dbss_01_0239__p395420524364">Total number of alarms allowed to be sent every day</p>
|
||||
<div class="notice" id="dbss_01_0239__note6297171931510"><span class="noticetitle"> NOTICE: </span><div class="noticebody"><ul id="dbss_01_0239__ul202824421921"><li id="dbss_01_0239__li1282142425">If the number of alarms exceeds this value on a day, no more notification will be sent on that day.</li><li id="dbss_01_0239__li851114444211">There is no fixed time point for sending alarm notifications. The system collects statistics every 5 minutes and sends alarm notifications (if any).</li></ul>
|
||||
</div></div>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.3.2.4.2.2.2.4.1.3 "><p id="dbss_01_0239__p495713521365">30</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0239__row995917529362"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.3.2.4.2.2.2.4.1.1 "><p id="dbss_01_0239__p20959145216368">Alarm Risk Severity</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="61%" headers="mcps1.3.3.2.4.2.2.2.4.1.2 "><p id="dbss_01_0239__p12960125233614">Risk severity of the risk log. The options are as follows:</p>
|
||||
<ul id="dbss_01_0239__ul11951164818432"><li id="dbss_01_0239__li134133281316"><strong id="dbss_01_0239__b1638145462915">High</strong></li><li id="dbss_01_0239__li395154834318"><strong id="dbss_01_0239__b03051655192910">Moderate</strong></li><li id="dbss_01_0239__li1951348204316"><strong id="dbss_01_0239__b22011564292">Low</strong></li></ul>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.3.2.4.2.2.2.4.1.3 "><p id="dbss_01_0239__p149601652163619">High</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0239__row3960852133616"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.3.2.4.2.2.2.4.1.1 "><p id="dbss_01_0239__p1960185211365">CPU Alarm Threshold (%)</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="61%" headers="mcps1.3.3.2.4.2.2.2.4.1.2 "><p id="dbss_01_0239__p154605116810">CPU alarm threshold of an audit instance. When the threshold is exceeded, an alarm notification is generated.</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.3.2.4.2.2.2.4.1.3 "><p id="dbss_01_0239__p196165217369">80</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0239__row19470200440"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.3.2.4.2.2.2.4.1.1 "><p id="dbss_01_0239__p124702034416">Memory Alarm Threshold (%)</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="61%" headers="mcps1.3.3.2.4.2.2.2.4.1.2 "><p id="dbss_01_0239__p64711016449">Memory alarm threshold of an audit instance. When the threshold is exceeded, an alarm notification is generated.</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.3.2.4.2.2.2.4.1.3 "><p id="dbss_01_0239__p154719013441">80</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0239__row1743917410440"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.3.2.4.2.2.2.4.1.1 "><p id="dbss_01_0239__p1543920494411">Disk Alarm Threshold (%)</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="61%" headers="mcps1.3.3.2.4.2.2.2.4.1.2 "><p id="dbss_01_0239__p8942134215454">Disk alarm threshold of an audit instance. When the threshold is exceeded, an alarm notification is generated.</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.3.2.4.2.2.2.4.1.3 "><p id="dbss_01_0239__p114391046444">80</p>
|
||||
</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
</p></li><li id="dbss_01_0239__li6963352183618"><span>Click <span class="uicontrol" id="dbss_01_0239__uicontrol139829401412"><b>Apply</b></span>.</span></li></ol>
|
||||
</div>
|
||||
</div>
|
||||
<div></div>
|
||||
|
176
docs/dbss/umn/dbss_01_0248.html
Normal file
176
docs/dbss/umn/dbss_01_0248.html
Normal file
File diff suppressed because it is too large
Load Diff
60
docs/dbss/umn/dbss_01_0252.html
Normal file
60
docs/dbss/umn/dbss_01_0252.html
Normal file
@ -0,0 +1,60 @@
|
||||
<a name="dbss_01_0252"></a><a name="dbss_01_0252"></a>
|
||||
|
||||
<h1 class="topictitle1">Viewing the Alarms</h1>
|
||||
<div id="body1560156179280"><p id="dbss_01_0252__p13325194917378">This section describes how to view and confirm alarms of database audit.</p>
|
||||
<div class="section" id="dbss_01_0252__section441811405410"><h4 class="sectiontitle">Prerequisites</h4><ul id="dbss_01_0252__ul1416718161018"><li id="dbss_01_0252__li16483173165214">You have applied for a database audit instance and the <strong id="dbss_01_0252__en-us_topic_0144723368_b1155217115215">Status</strong> is <strong id="dbss_01_0252__en-us_topic_0144723368_b185532015214">Running</strong>.</li><li id="dbss_01_0252__li1610855617422">Database audit has been enabled.</li><li id="dbss_01_0252__li15813407219">You have configured alarm notifications.</li></ul>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0252__section18237911761"><h4 class="sectiontitle">Procedure</h4><ol id="dbss_01_0252__ol22381811662"><li id="dbss_01_0252__li137661355114510"><span>Click the name of an instance, click the <strong id="dbss_01_0252__b416148123111">Monitoring</strong> tab, and then the <strong id="dbss_01_0252__b9220816183111">Alarm Monitoring</strong> tab.</span></li><li id="dbss_01_0252__li126198448239"><span>View the alarm information, as shown in <a href="#dbss_01_0252__fig2691832172511">Figure 1</a>. For details about related parameters, see <a href="#dbss_01_0252__table1025994517211">Table 1</a>.</span><p><div class="fignone" id="dbss_01_0252__fig2691832172511"><a name="dbss_01_0252__fig2691832172511"></a><a name="fig2691832172511"></a><span class="figcap"><b>Figure 1 </b>Viewing the alarms</span><br><span><img id="dbss_01_0252__image160315250229" src="en-us_image_0000001522903594.png"></span></div>
|
||||
|
||||
<div class="tablenoborder"><a name="dbss_01_0252__table1025994517211"></a><a name="table1025994517211"></a><table cellpadding="4" cellspacing="0" summary="" id="dbss_01_0252__table1025994517211" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameters of alarms</caption><thead align="left"><tr id="dbss_01_0252__row1626074517217"><th align="left" class="cellrowborder" valign="top" width="17%" id="mcps1.3.3.2.2.2.2.2.3.1.1"><p id="dbss_01_0252__p9260045112114">Parameter</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="83%" id="mcps1.3.3.2.2.2.2.2.3.1.2"><p id="dbss_01_0252__p7260194582118">Description</p>
|
||||
</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody><tr id="dbss_01_0252__row18260134511215"><td class="cellrowborder" valign="top" width="17%" headers="mcps1.3.3.2.2.2.2.2.3.1.1 "><p id="dbss_01_0252__p62601045112117">Time</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="83%" headers="mcps1.3.3.2.2.2.2.2.3.1.2 "><p id="dbss_01_0252__p13698174652218">Time when an alarm occurred.</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0252__row326014459212"><td class="cellrowborder" valign="top" width="17%" headers="mcps1.3.3.2.2.2.2.2.3.1.1 "><p id="dbss_01_0252__p16763165610222">Type</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="83%" headers="mcps1.3.3.2.2.2.2.2.3.1.2 "><p id="dbss_01_0252__p47630567221">Alarm type. The options are as follows:</p>
|
||||
<ul id="dbss_01_0252__ul1639319401191"><li id="dbss_01_0252__li239313401391">Risky operations</li><li id="dbss_01_0252__li1131911518917">CPU exceptions</li><li id="dbss_01_0252__li5222115618920">Memory exceptions</li><li id="dbss_01_0252__li814012131018">Disk exceptions</li><li id="dbss_01_0252__li97505514106">Insufficient audit log storage</li><li id="dbss_01_0252__li15244171210109">Log backup to OBS failed</li><li id="dbss_01_0252__li3947526124115">Agent exceptions</li></ul>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0252__row11260124513215"><td class="cellrowborder" valign="top" width="17%" headers="mcps1.3.3.2.2.2.2.2.3.1.1 "><p id="dbss_01_0252__p1726044518211">Alarm Risk Severity</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="83%" headers="mcps1.3.3.2.2.2.2.2.3.1.2 "><p id="dbss_01_0252__p1260745162119">Risk severity of an alarm. The options are as follows:</p>
|
||||
<ul id="dbss_01_0252__ul108156241253"><li id="dbss_01_0252__li681519247250"><strong id="dbss_01_0252__b1318502710385">High</strong></li><li id="dbss_01_0252__li38157249252"><strong id="dbss_01_0252__b346593193817">Moderate</strong></li><li id="dbss_01_0252__li178151724142514"><strong id="dbss_01_0252__b10423133933810">Low</strong></li></ul>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0252__row17586193614411"><td class="cellrowborder" valign="top" width="17%" headers="mcps1.3.3.2.2.2.2.2.3.1.1 "><p id="dbss_01_0252__p1658616362046">Cleared</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="83%" headers="mcps1.3.3.2.2.2.2.2.3.1.2 "><p id="dbss_01_0252__p15586173617413">Time when an alarm is cleared</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0252__row1666214161896"><td class="cellrowborder" valign="top" width="17%" headers="mcps1.3.3.2.2.2.2.2.3.1.1 "><p id="dbss_01_0252__p9663171613916">Confirmed Or Not</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="83%" headers="mcps1.3.3.2.2.2.2.2.3.1.2 "><p id="dbss_01_0252__p1666371620915">Confirmation status of an alarm. Click <span><img id="dbss_01_0252__image733125633810" src="en-us_image_0214600463.png"></span> to filter alarms in <strong id="dbss_01_0252__b45531415422">Unconfirmed</strong> or <strong id="dbss_01_0252__b756353194215">Confirmed</strong> state.</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0252__row1839683313910"><td class="cellrowborder" valign="top" width="17%" headers="mcps1.3.3.2.2.2.2.2.3.1.1 "><p id="dbss_01_0252__p639612334919">Description</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="83%" headers="mcps1.3.3.2.2.2.2.2.3.1.2 "><p id="dbss_01_0252__p133961331395">Description of an alarm</p>
|
||||
</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
<div class="p" id="dbss_01_0252__p1553584417558">To query specified alarms, perform the following steps:<ul id="dbss_01_0252__ul1149562962616"><li id="dbss_01_0252__li174951829102614">Select <strong id="dbss_01_0252__b9987155142420">Last 30 minutes</strong>, <strong id="dbss_01_0252__b1679416565247">1 hour</strong>, <strong id="dbss_01_0252__b6251152252">24 hours</strong>, <strong id="dbss_01_0252__b119871276255">7 days</strong>, or <strong id="dbss_01_0252__b121311118257">30 days</strong> for <strong id="dbss_01_0252__b84091615142514">Time</strong>, and click <span><img id="dbss_01_0252__image167968241613" src="en-us_image_0000001575677796.png"></span> to view alarms of the specified time range.</li><li id="dbss_01_0252__li204961629132617">Select <strong id="dbss_01_0252__b1075116454468">All</strong>, <strong id="dbss_01_0252__b675224510461">High</strong>, <strong id="dbss_01_0252__b1175214456463">Moderate</strong>, or <strong id="dbss_01_0252__b167532454463">Low</strong> for <strong id="dbss_01_0252__b8753144514461">Risk Severity</strong>. Alarms of specified severity are displayed in the list.</li><li id="dbss_01_0252__li13496729152615">Select an alarm type, and alarms of specified alarm type is displayed in the list.</li></ul>
|
||||
</div>
|
||||
</p></li></ol>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0252__section030712235511"><h4 class="sectiontitle">Follow-Up Procedure</h4><div class="p" id="dbss_01_0252__p58451054135516"><div class="note" id="dbss_01_0252__note726013364559"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="dbss_01_0252__p162601036125513">You can select multiple alarms to be confirmed and click <strong id="dbss_01_0252__b265185591015">Batch Confirm</strong> to batch confirm alarms.</p>
|
||||
</div></div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div></div>
|
||||
|
17
docs/dbss/umn/dbss_01_0253.html
Normal file
17
docs/dbss/umn/dbss_01_0253.html
Normal file
@ -0,0 +1,17 @@
|
||||
<a name="dbss_01_0253"></a><a name="dbss_01_0253"></a>
|
||||
|
||||
<h1 class="topictitle1">Step 3: View Audit Results</h1>
|
||||
<div id="body1560141264521"></div>
|
||||
<div>
|
||||
<ul class="ullinks">
|
||||
<li class="ulchildlink"><strong><a href="dbss_01_0205.html">Viewing SQL Statement Details</a></strong><br>
|
||||
</li>
|
||||
<li class="ulchildlink"><strong><a href="dbss_01_0206.html">Viewing Session Distribution</a></strong><br>
|
||||
</li>
|
||||
<li class="ulchildlink"><strong><a href="dbss_01_0204.html">Viewing the Audit Dashboard</a></strong><br>
|
||||
</li>
|
||||
<li class="ulchildlink"><strong><a href="dbss_01_0248.html">Viewing Audit Reports</a></strong><br>
|
||||
</li>
|
||||
</ul>
|
||||
</div>
|
||||
|
52
docs/dbss/umn/dbss_01_0256.html
Normal file
52
docs/dbss/umn/dbss_01_0256.html
Normal file
@ -0,0 +1,52 @@
|
||||
<a name="dbss_01_0256"></a><a name="dbss_01_0256"></a>
|
||||
|
||||
<h1 class="topictitle1">Database Audit Is Running Properly But Generates No Audit Records</h1>
|
||||
<div id="body1561101451206"><div class="section" id="dbss_01_0256__section4597163713358"><h4 class="sectiontitle">Symptom</h4><p id="dbss_01_0256__p11285114214382">The functions of the database audit instance are normal. When there is database traffic, audit information about the executed SQL statement cannot be found in the SQL statement list.</p>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0256__section12392122314367"><h4 class="sectiontitle">Possible Causes</h4><ul id="dbss_01_0256__ul18828113318312"><li id="dbss_01_0256__li082813331234">SSL is enabled for the database.</li><li id="dbss_01_0256__li2608171516313">ForceEncryption is enabled for the SQL Server database protocol.</li><li id="dbss_01_0256__li1978591619319">The data volume is too large. As a result, the Agent process is suspended. You are advised to restart the container or optimize audit rules to reduce the data volume.</li></ul>
|
||||
<div class="note" id="dbss_01_0256__note107582256256"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="dbss_01_0256__ul39151042151512"><li id="dbss_01_0256__li12915842121513">If SSL is enabled for a database, the database cannot be audited.</li><li id="dbss_01_0256__li24761445121517">If ForceEncryption is enabled for a database, database audit cannot obtain file content from the database for analysis.</li></ul>
|
||||
</div></div>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0256__section20158847143620"><h4 class="sectiontitle">Disabling Database SSL</h4><p id="dbss_01_0256__p134512467482">The MySQL database client is used as an example. Perform the following steps:</p>
|
||||
<ol id="dbss_01_0256__ol2908666337"><li id="dbss_01_0256__li886443016212"><span>Log in to the MySQL database client as user <strong id="dbss_01_0256__b12576747173616">root</strong>.</span></li><li id="dbss_01_0256__li390818623316"><span>Run the following command to check the connection mode of the MySQL database:</span><p><p id="dbss_01_0256__p2732111512373"><strong id="dbss_01_0256__b823691973710">\s</strong></p>
|
||||
<ul id="dbss_01_0256__ul0759235324"><li id="dbss_01_0256__li375918352027">If information similar to the following is displayed, SSL has been disabled for the MySQL database. Go to <a href="#dbss_01_0256__li2733444154714">4</a>.<div class="codecoloring" codetype="Sql" id="dbss_01_0256__screen204051438204111"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span></pre></div></td><td class="code"><div><pre><span></span><span class="n">SSL</span><span class="p">:</span><span class="w"> </span><span class="k">Not</span><span class="w"> </span><span class="k">in</span><span class="w"> </span><span class="n">use</span><span class="w"> </span>
|
||||
</pre></div></td></tr></table></div>
|
||||
|
||||
</div>
|
||||
</li><li id="dbss_01_0256__li37602351228">If information similar to the following is displayed, SSL has been enabled for the MySQL database. Go to <a href="#dbss_01_0256__li135454178327">3</a>.<div class="codecoloring" codetype="Sql" id="dbss_01_0256__screen1063392513912"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span></pre></div></td><td class="code"><div><pre><span></span><span class="n">SSL</span><span class="p">:</span><span class="w"> </span><span class="n">Cipher</span><span class="w"> </span><span class="k">in</span><span class="w"> </span><span class="n">use</span><span class="w"> </span><span class="k">is</span><span class="w"> </span><span class="n">XXX</span><span class="o">-</span><span class="n">XXX</span><span class="o">-</span><span class="n">XXXXXX</span><span class="o">-</span><span class="n">XXX</span><span class="w"> </span>
|
||||
</pre></div></td></tr></table></div>
|
||||
|
||||
</div>
|
||||
</li></ul>
|
||||
</p></li><li id="dbss_01_0256__li135454178327"><a name="dbss_01_0256__li135454178327"></a><a name="li135454178327"></a><span>Log in to the MySQL database in SSL mode.</span><p><ol type="a" id="dbss_01_0256__ol490911312326"><li id="dbss_01_0256__li1199103732812">Run the following command to exit from the MySQL database:<p id="dbss_01_0256__p13165155913284"><a name="dbss_01_0256__li1199103732812"></a><a name="li1199103732812"></a><strong id="dbss_01_0256__b1705195162914">exit</strong></p>
|
||||
</li><li id="dbss_01_0256__li161711332142914"><a name="dbss_01_0256__li161711332142914"></a><a name="li161711332142914"></a>Log in to the MySQL database as user <strong id="dbss_01_0256__b1158175812455">root</strong>.<p id="dbss_01_0256__p7676113362910">Add the following parameters at the end of the login command:</p>
|
||||
<p id="dbss_01_0256__p12579195710109"><strong id="dbss_01_0256__b293917170300">--ssl-mode=DISABLED</strong></p>
|
||||
<p id="dbss_01_0256__p34823221118">or</p>
|
||||
<p id="dbss_01_0256__p695145351017"><strong id="dbss_01_0256__b14211422143019">--ssl=0</strong></p>
|
||||
<div class="notice" id="dbss_01_0256__note20564453144017"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><p id="dbss_01_0256__p05641553174018">If you log in to the MySQL database in SSL mode, you can only disable SSL for this login. To use the database audit function, log in to the MySQL database in the mode described in <a href="#dbss_01_0256__li161711332142914">3.b</a>.</p>
|
||||
</div></div>
|
||||
</li><li id="dbss_01_0256__li13521650153219">Run the following command to check the connection mode of the MySQL database:<p id="dbss_01_0256__p397751210339"><a name="dbss_01_0256__li13521650153219"></a><a name="li13521650153219"></a><strong id="dbss_01_0256__b139771312113310">\s</strong></p>
|
||||
<div class="p" id="dbss_01_0256__p13659423143316">If information similar to the following is displayed, SSL has been disabled for the MySQL database. Go to <a href="#dbss_01_0256__li2733444154714">4</a>.<div class="codecoloring" codetype="Sql" id="dbss_01_0256__screen139771712193313"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span></pre></div></td><td class="code"><div><pre><span></span><span class="n">SSL</span><span class="p">:</span><span class="w"> </span><span class="k">Not</span><span class="w"> </span><span class="k">in</span><span class="w"> </span><span class="n">use</span><span class="w"> </span>
|
||||
</pre></div></td></tr></table></div>
|
||||
|
||||
</div>
|
||||
</div>
|
||||
</li></ol>
|
||||
</p></li><li id="dbss_01_0256__li2733444154714"><a name="dbss_01_0256__li2733444154714"></a><a name="li2733444154714"></a><span>Run an SQL statement and search for it in the SQL statement list.</span><p><p id="dbss_01_0256__p1237442610155"></p>
|
||||
<div class="p" id="dbss_01_0256__p6217145165218"><ul id="dbss_01_0256__ul206522426431"><li id="dbss_01_0256__li24410094517">If the SQL statement is found, the problem has been solved.</li><li id="dbss_01_0256__li16525426430">If the SQL statement is not found, the problem persists. In this case, <a href="#dbss_01_0256__section139091244945">Disable ForceEncryption for the SQL Server protocol</a>.</li></ul>
|
||||
</div>
|
||||
</p></li></ol>
|
||||
<p id="dbss_01_0256__p1632518416414"></p>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0256__section139091244945"><a name="dbss_01_0256__section139091244945"></a><a name="section139091244945"></a><h4 class="sectiontitle">Disabling ForceEncryption for the SQL Server Protocol</h4><ol id="dbss_01_0256__ol191451540952"><li id="dbss_01_0256__li111452401518"><span>Open the <strong id="dbss_01_0256__b4940165813464">SQL Server Configuration Manager</strong> dialog box.</span></li><li id="dbss_01_0256__li098319210502"><span>Select <strong id="dbss_01_0256__b11754141104717">SQL Server Network Configuration</strong>.</span></li><li id="dbss_01_0256__li3443629111212"><span>Right-click <strong id="dbss_01_0256__b122580420476">Protocols for MSSQLSERVER</strong> and choose <strong id="dbss_01_0256__b9258184154719">Properties</strong>.</span></li><li id="dbss_01_0256__li28261193504"><span>Click the <strong id="dbss_01_0256__b47941839155517">Flags</strong> tab. Set <strong id="dbss_01_0256__b381919541553">ForceEncryption</strong> to <strong id="dbss_01_0256__b199971259115515">No</strong>.</span></li><li id="dbss_01_0256__li1542295214518"><span>Restart the SQL Server service for the modification to take effect.</span></li><li id="dbss_01_0256__li923219456538"><span>Run an SQL statement and search for it in the SQL statement list.</span><p><p id="dbss_01_0256__p1797513198214"></p>
|
||||
<div class="p" id="dbss_01_0256__p163211853125211"><ul id="dbss_01_0256__ul1397514191328"><li id="dbss_01_0256__li29756197214">If the SQL statement is found, the problem has been solved.</li><li id="dbss_01_0256__li17976171918217">If the SQL statement is not found, the problem persists. Contact customer service.</li></ul>
|
||||
</div>
|
||||
</p></li></ol>
|
||||
</div>
|
||||
</div>
|
||||
<div>
|
||||
<div class="familylinks">
|
||||
<div class="parentlink"><strong>Parent topic:</strong> <a href="dbss_01_0323.html">Troubleshooting</a></div>
|
||||
</div>
|
||||
</div>
|
||||
|
62
docs/dbss/umn/dbss_01_0266.html
Normal file
62
docs/dbss/umn/dbss_01_0266.html
Normal file
@ -0,0 +1,62 @@
|
||||
<a name="dbss_01_0266"></a><a name="dbss_01_0266"></a>
|
||||
|
||||
<h1 class="topictitle1">Configuring Privacy Data Protection Rules</h1>
|
||||
<div id="body1563503150348"><p id="dbss_01_0266__p37991251131819">To mask sensitive information in entered SQL statements, you can enable the function of masking privacy data and configure masking rules to prevent sensitive information leakage.</p>
|
||||
<div class="section" id="dbss_01_0266__section441811405410"><h4 class="sectiontitle">Prerequisites</h4><ul id="dbss_01_0266__ul37211429298"><li id="dbss_01_0266__li1610855617422">Database audit has been enabled.</li></ul>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0266__section1466435124817"><h4 class="sectiontitle">Procedure</h4><ol id="dbss_01_0266__ol18449141653"><li id="dbss_01_0266__li108671927123816"><span>In the navigation tree, choose <strong id="dbss_01_0266__b5784648103219">Rules</strong>.</span></li><li id="dbss_01_0266__li168521066525"><span>In the <strong id="dbss_01_0266__b189721511411">Instance</strong> drop-down list, select the instance whose privacy data protection rule is to be configured.</span></li><li id="dbss_01_0266__li4174122125815"><span>Click the <strong id="dbss_01_0266__b2853112917425">Privacy Data Protection</strong> tab.</span><p><div class="note" id="dbss_01_0266__note8854192315450"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="dbss_01_0266__p38556230450">Only user-defined rules can be edited and deleted. Default rules can only be enabled and disabled.</p>
|
||||
</div></div>
|
||||
</p></li><li id="dbss_01_0266__li458115833812"><span>Enable or disable <strong id="dbss_01_0266__b1284645717417">Store Result Set</strong> and <strong id="dbss_01_0266__b1382620514">Mask Privacy Data</strong>.</span><p><ul id="dbss_01_0266__ul1916125416387"><li id="dbss_01_0266__li18577163614463"><strong id="dbss_01_0266__b249315111152">Store Result Set</strong><p id="dbss_01_0266__p15368195294617">You are advised to disable <span><img id="dbss_01_0266__image174180192155" src="en-us_image_0000001193982039.png"></span>. After this function is disabled, database audit will not store the result sets of user SQL statements.</p>
|
||||
<p id="dbss_01_0266__p168981314185919">Do not enable this function if you want to prepare for PCI DSS/PCI 3DS CSS certification.</p>
|
||||
</li><li id="dbss_01_0266__li1657713366462"><strong id="dbss_01_0266__b128507713817">Mask Privacy Data</strong><p id="dbss_01_0266__p3976640144412">You are advised to enable <span><img id="dbss_01_0266__image1924411591447" src="en-us_image_0000001530562784.png"></span>. After this function is enabled, you can configure masking rules to prevent privacy data leakage.</p>
|
||||
</li></ul>
|
||||
</p></li><li id="dbss_01_0266__li18302144115014"><span>Click <strong id="dbss_01_0266__b15744178584">Add Rule</strong>. In the displayed <strong id="dbss_01_0266__b1174151717587">Add Rule</strong> dialog box, set the data masking rule, as shown in <a href="#dbss_01_0266__fig45721822818">Figure 1</a>. For details about related parameters, see <a href="#dbss_01_0266__table4295843716304">Table 1</a>. </span><p><div class="fignone" id="dbss_01_0266__fig45721822818"><a name="dbss_01_0266__fig45721822818"></a><a name="fig45721822818"></a><span class="figcap"><b>Figure 1 </b>Add Rule dialog box</span><br><span><img id="dbss_01_0266__image886816333474" src="en-us_image_0000001531043744.png"></span></div>
|
||||
|
||||
<div class="tablenoborder"><a name="dbss_01_0266__table4295843716304"></a><a name="table4295843716304"></a><table cellpadding="4" cellspacing="0" summary="" id="dbss_01_0266__table4295843716304" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Rule parameters</caption><thead align="left"><tr id="dbss_01_0266__row4338993216304"><th align="left" class="cellrowborder" valign="top" width="21%" id="mcps1.3.3.2.5.2.2.2.4.1.1"><p id="dbss_01_0266__p2492361616304">Parameter</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="61%" id="mcps1.3.3.2.5.2.2.2.4.1.2"><p id="dbss_01_0266__p554697916304">Description</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="18%" id="mcps1.3.3.2.5.2.2.2.4.1.3"><p id="dbss_01_0266__p4665219216304">Example Value</p>
|
||||
</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody><tr id="dbss_01_0266__row1332204111319"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.3.2.5.2.2.2.4.1.1 "><p id="dbss_01_0266__p33321041237">Rule Name</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="61%" headers="mcps1.3.3.2.5.2.2.2.4.1.2 "><p id="dbss_01_0266__p153321841736">Name of a rule</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.3.2.5.2.2.2.4.1.3 "><p id="dbss_01_0266__p1467665173912">test</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0266__row177601257112915"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.3.2.5.2.2.2.4.1.1 "><p id="dbss_01_0266__p137601957182910">Regular Expression</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="61%" headers="mcps1.3.3.2.5.2.2.2.4.1.2 "><p id="dbss_01_0266__p17760145712293">Regular expression that specifies the sensitive data pattern</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.3.2.5.2.2.2.4.1.3 "><p id="dbss_01_0266__p1076010574298">-</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0266__row0860165713317"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.3.2.5.2.2.2.4.1.1 "><p id="dbss_01_0266__p12331342414">Substitution Value</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="61%" headers="mcps1.3.3.2.5.2.2.2.4.1.2 "><p id="dbss_01_0266__p17861057634">Value used to replace sensitive data specified by the regular expression</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.3.2.5.2.2.2.4.1.3 "><p id="dbss_01_0266__p198613573313">###</p>
|
||||
</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
</p></li><li id="dbss_01_0266__li131732038132810"><span>Click <span class="uicontrol" id="dbss_01_0266__uicontrol412194462212"><b>OK</b></span>.</span><p><p id="dbss_01_0266__p1821392054316">A masking rule in the <strong id="dbss_01_0266__b1234921310231">Enabled</strong> status is added to the rule list.</p>
|
||||
</p></li></ol>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0266__section12595165223"><h4 class="sectiontitle">Verifying a Rule</h4><p id="dbss_01_0266__p175901841102114">Perform the following steps to check whether a rule takes effect. The audit information about passport No. in a MySQL database is used as an example.</p>
|
||||
<ol id="dbss_01_0266__ol729879165"><li id="dbss_01_0266__li0294761612"><span>Enable <strong id="dbss_01_0266__b858905201316">Mask Privacy Data</strong>, and ensure the "Passport NO." masking rule is enabled, as shown in <a href="#dbss_01_0266__fig10156628163415">Figure 2</a>.</span><p><div class="fignone" id="dbss_01_0266__fig10156628163415"><a name="dbss_01_0266__fig10156628163415"></a><a name="fig10156628163415"></a><span class="figcap"><b>Figure 2 </b>Enabling privacy data protection</span><br><span><img id="dbss_01_0266__image11126531174915" src="en-us_image_0000001581444553.png"></span></div>
|
||||
</p></li><li id="dbss_01_0266__li4441161113134"><span>Log in to the database as user <strong id="dbss_01_0266__b181401538172818">root</strong> through the MySQL database client.</span></li><li id="dbss_01_0266__li27071831144718"><span>On the database client, enter an SQL statement.</span><p><p id="dbss_01_0266__p172682719191"><strong id="dbss_01_0266__b1529595591920">select</strong> <strong id="dbss_01_0266__b1962130192014">* from db where HOST=</strong>"<i><span class="varname" id="dbss_01_0266__varname6633145172015">Passport NO.</span></i>";</p>
|
||||
</p></li><li id="dbss_01_0266__li1258210924010"><span>In the navigation pane, choose <strong id="dbss_01_0266__b1184553019313">Dashboard</strong>.</span></li><li id="dbss_01_0266__li363113791716"><span>In the navigation tree on the left, choose <span class="uicontrol" id="dbss_01_0266__uicontrol11375363633391"><b>Data Reports</b></span>. The <span class="wintitle" id="dbss_01_0266__wintitle10524380873391"><b>Data Reports</b></span> page is displayed.</span></li><li id="dbss_01_0266__li1759942816404"><span>In the <strong id="dbss_01_0266__b993520346407">Instance</strong> drop-down list, select the instance whose SQL statement information you want to view. Click the <strong id="dbss_01_0266__b1922342184017">Statements</strong> tab.</span></li><li id="dbss_01_0266__li19125101617432"><span>Set filtering conditions to find the entered SQL statement.</span></li><li id="dbss_01_0266__li1833254811227"><span>In the row containing the SQL statement, click <strong id="dbss_01_0266__b14548945182012">Details</strong> in the <strong id="dbss_01_0266__b209691847112018">Operation</strong> column.</span></li><li id="dbss_01_0266__li92523439251"><span>Check the SQL statement information in <span class="parmname" id="dbss_01_0266__parmname17244143174514"><b>SQL Statement</b></span>.</span></li></ol>
|
||||
</div>
|
||||
<div class="section" id="dbss_01_0266__section1952662945517"><h4 class="sectiontitle">Common Operations</h4><p id="dbss_01_0266__p12162143413556">After adding a user-defined masking rule, you can perform the following operations on it:</p>
|
||||
<ul id="dbss_01_0266__ul1461043111312"><li id="dbss_01_0266__li1761114316136">Disable<p id="dbss_01_0266__p1547553814159"><a name="dbss_01_0266__li1761114316136"></a><a name="li1761114316136"></a>Locate the row that contains the rule to be disabled and click <strong id="dbss_01_0266__b64675484326">Disable</strong> in the <strong id="dbss_01_0266__b76341642183217">Operation</strong> column. A disabled rule cannot be used.</p>
|
||||
</li><li id="dbss_01_0266__li1986961531716">Edit<p id="dbss_01_0266__p2041942821714"><a name="dbss_01_0266__li1986961531716"></a><a name="li1986961531716"></a>Locate the row that contains the rule to be modified, click <strong id="dbss_01_0266__b49625619344">Edit</strong> in the <strong id="dbss_01_0266__b127618915347">Operation</strong> column, and modify the rule in the displayed dialog box.</p>
|
||||
</li><li id="dbss_01_0266__li1220210486138">Delete<p id="dbss_01_0266__p7460517191613"><a name="dbss_01_0266__li1220210486138"></a><a name="li1220210486138"></a>Locate the row that contains the rule to be deleted, click <strong id="dbss_01_0266__b22943443417">Delete</strong> in the <strong id="dbss_01_0266__b77183716343">Operation</strong> column, and click <strong id="dbss_01_0266__b8400154673418">OK</strong> in the displayed dialog box.</p>
|
||||
</li></ul>
|
||||
</div>
|
||||
</div>
|
||||
|
58
docs/dbss/umn/dbss_01_0267.html
Normal file
58
docs/dbss/umn/dbss_01_0267.html
Normal file
@ -0,0 +1,58 @@
|
||||
<a name="dbss_01_0267"></a><a name="dbss_01_0267"></a>
|
||||
|
||||
<h1 class="topictitle1">Managing Privacy Data Protection Rules</h1>
|
||||
<div id="body1563518515568"><p id="dbss_01_0267__p75361336112">You can view, enable, edit, disable, or delete data masking rules.</p>
|
||||
<div class="section" id="dbss_01_0267__section070891116319"><h4 class="sectiontitle">Prerequisites</h4></div>
|
||||
<div class="section" id="dbss_01_0267__section1736252164212"><h4 class="sectiontitle">Viewing Privacy Data Protection Rules</h4><ol id="dbss_01_0267__ol18449141653"><li id="dbss_01_0267__li98103224918"><span>View the rules. For details about related parameters, see <a href="#dbss_01_0267__table881122114911">Table 1</a>.</span><p><div class="note" id="dbss_01_0267__note7811723491"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="dbss_01_0267__ul812722575810"><li id="dbss_01_0267__dbss_01_0266_li18577163614463"><strong id="dbss_01_0267__dbss_01_0266_b249315111152">Store Result Set</strong><p id="dbss_01_0267__dbss_01_0266_p15368195294617">You are advised to disable <span><img id="dbss_01_0267__dbss_01_0266_image174180192155" src="en-us_image_0000001193982039.png"></span>. After this function is disabled, database audit will not store the result sets of user SQL statements.</p>
|
||||
<p id="dbss_01_0267__dbss_01_0266_p168981314185919">Do not enable this function if you want to prepare for PCI DSS/PCI 3DS CSS certification.</p>
|
||||
</li><li id="dbss_01_0267__dbss_01_0266_li1657713366462"><strong id="dbss_01_0267__dbss_01_0266_b128507713817">Mask Privacy Data</strong><p id="dbss_01_0267__dbss_01_0266_p3976640144412">You are advised to enable <span><img id="dbss_01_0267__dbss_01_0266_image1924411591447" src="en-us_image_0000001530562784.png"></span>. After this function is enabled, you can configure masking rules to prevent privacy data leakage.</p>
|
||||
</li></ul>
|
||||
</div></div>
|
||||
|
||||
<div class="tablenoborder"><a name="dbss_01_0267__table881122114911"></a><a name="table881122114911"></a><table cellpadding="4" cellspacing="0" summary="" id="dbss_01_0267__table881122114911" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Masking rule parameters</caption><thead align="left"><tr id="dbss_01_0267__row281120244916"><th align="left" class="cellrowborder" valign="top" width="17%" id="mcps1.3.3.2.1.2.2.2.3.1.1"><p id="dbss_01_0267__p1181162204912">Parameter</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="83%" id="mcps1.3.3.2.1.2.2.2.3.1.2"><p id="dbss_01_0267__p11811921499">Description</p>
|
||||
</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody><tr id="dbss_01_0267__row28112274916"><td class="cellrowborder" valign="top" width="17%" headers="mcps1.3.3.2.1.2.2.2.3.1.1 "><p id="dbss_01_0267__p18118217497">Rule Name</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="83%" headers="mcps1.3.3.2.1.2.2.2.3.1.2 "><p id="dbss_01_0267__p88111218492">Rule name</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0267__row128119216496"><td class="cellrowborder" valign="top" width="17%" headers="mcps1.3.3.2.1.2.2.2.3.1.1 "><p id="dbss_01_0267__p148111426498">Rule Type</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="83%" headers="mcps1.3.3.2.1.2.2.2.3.1.2 "><p id="dbss_01_0267__p1481122124918">Rule type.</p>
|
||||
<ul id="dbss_01_0267__ul4959734141810"><li id="dbss_01_0267__li2959634121816">Default</li><li id="dbss_01_0267__li1895933481818">User-defined</li></ul>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0267__row12812112194911"><td class="cellrowborder" valign="top" width="17%" headers="mcps1.3.3.2.1.2.2.2.3.1.1 "><p id="dbss_01_0267__p7812122184910">Regular Expression</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="83%" headers="mcps1.3.3.2.1.2.2.2.3.1.2 "><p id="dbss_01_0267__p11291815125613">Regular expression that specifies the sensitive data pattern</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0267__row71581246155218"><td class="cellrowborder" valign="top" width="17%" headers="mcps1.3.3.2.1.2.2.2.3.1.1 "><p id="dbss_01_0267__p14159164685211">Substitution Value</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="83%" headers="mcps1.3.3.2.1.2.2.2.3.1.2 "><p id="dbss_01_0267__p161591546205211">Value used to replace sensitive data specified by the regular expression</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0267__row178151322494"><td class="cellrowborder" valign="top" width="17%" headers="mcps1.3.3.2.1.2.2.2.3.1.1 "><p id="dbss_01_0267__p19815721495">Status</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="83%" headers="mcps1.3.3.2.1.2.2.2.3.1.2 "><p id="dbss_01_0267__p118159244913">Status of a rule. Its value can be:</p>
|
||||
<ul id="dbss_01_0267__ul15815127491"><li id="dbss_01_0267__en-us_topic_0145057227_li1696214501969"><strong id="dbss_01_0267__b54707109303">Enabled</strong></li><li id="dbss_01_0267__en-us_topic_0145057227_li696318501763"><strong id="dbss_01_0267__b12429201193016">Disabled</strong></li></ul>
|
||||
</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
<div class="note" id="dbss_01_0267__note1781511224915"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="dbss_01_0267__p98167254913">You can perform the following operations on a rule:</p>
|
||||
<ul id="dbss_01_0267__ul178163219491"><li id="dbss_01_0267__dbss_01_0266_li1761114316136">Disable<p id="dbss_01_0267__dbss_01_0266_p1547553814159"><a name="dbss_01_0267__dbss_01_0266_li1761114316136"></a><a name="dbss_01_0266_li1761114316136"></a>Locate the row that contains the rule to be disabled and click <strong id="dbss_01_0267__dbss_01_0266_b64675484326">Disable</strong> in the <strong id="dbss_01_0267__dbss_01_0266_b76341642183217">Operation</strong> column. A disabled rule cannot be used.</p>
|
||||
</li><li id="dbss_01_0267__dbss_01_0266_li1986961531716">Edit<p id="dbss_01_0267__dbss_01_0266_p2041942821714"><a name="dbss_01_0267__dbss_01_0266_li1986961531716"></a><a name="dbss_01_0266_li1986961531716"></a>Locate the row that contains the rule to be modified, click <strong id="dbss_01_0267__dbss_01_0266_b49625619344">Edit</strong> in the <strong id="dbss_01_0267__dbss_01_0266_b127618915347">Operation</strong> column, and modify the rule in the displayed dialog box.</p>
|
||||
</li><li id="dbss_01_0267__dbss_01_0266_li1220210486138">Delete<p id="dbss_01_0267__dbss_01_0266_p7460517191613"><a name="dbss_01_0267__dbss_01_0266_li1220210486138"></a><a name="dbss_01_0266_li1220210486138"></a>Locate the row that contains the rule to be deleted, click <strong id="dbss_01_0267__dbss_01_0266_b22943443417">Delete</strong> in the <strong id="dbss_01_0267__dbss_01_0266_b77183716343">Operation</strong> column, and click <strong id="dbss_01_0267__dbss_01_0266_b8400154673418">OK</strong> in the displayed dialog box.</p>
|
||||
</li></ul>
|
||||
</div></div>
|
||||
</p></li></ol>
|
||||
</div>
|
||||
</div>
|
||||
<div></div>
|
||||
|
57
docs/dbss/umn/dbss_01_0268.html
Normal file
57
docs/dbss/umn/dbss_01_0268.html
Normal file
@ -0,0 +1,57 @@
|
||||
<a name="dbss_01_0268"></a><a name="dbss_01_0268"></a>
|
||||
|
||||
<h1 class="topictitle1">Editions</h1>
|
||||
<div id="body1564456707436"><p id="dbss_01_0268__p940571564318">Database audit provides basic, professional, and advanced editions. You can select one of them as needed.</p>
|
||||
<div class="p" id="dbss_01_0268__p183802823215"><a href="#dbss_01_0268__en-us_topic_0110856029_table8767123235">Table 1</a> describes the database audit editions.
|
||||
<div class="tablenoborder"><a name="dbss_01_0268__en-us_topic_0110856029_table8767123235"></a><a name="en-us_topic_0110856029_table8767123235"></a><table cellpadding="4" cellspacing="0" summary="" id="dbss_01_0268__en-us_topic_0110856029_table8767123235" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Database audit editions</caption><thead align="left"><tr id="dbss_01_0268__en-us_topic_0110856029_row376723137"><th align="left" class="cellrowborder" valign="top" width="11.83%" id="mcps1.3.2.2.2.5.1.1"><p id="dbss_01_0268__en-us_topic_0110856029_p16767938316">Version</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="23.32%" id="mcps1.3.2.2.2.5.1.2"><p id="dbss_01_0268__en-us_topic_0110856029_p157671431632">Maximum Databases</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="19.89%" id="mcps1.3.2.2.2.5.1.3"><p id="dbss_01_0268__en-us_topic_0110856029_p49212281930">System Resource</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="44.96%" id="mcps1.3.2.2.2.5.1.4"><p id="dbss_01_0268__en-us_topic_0110856029_p17261323835">Performance</p>
|
||||
</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody><tr id="dbss_01_0268__en-us_topic_0110856029_row137671535310"><td class="cellrowborder" valign="top" width="11.83%" headers="mcps1.3.2.2.2.5.1.1 "><p id="dbss_01_0268__en-us_topic_0110856029_p177671731231">Basic </p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="23.32%" headers="mcps1.3.2.2.2.5.1.2 "><p id="dbss_01_0268__en-us_topic_0110856029_p1956081262319">3</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="19.89%" headers="mcps1.3.2.2.2.5.1.3 "><ul id="dbss_01_0268__en-us_topic_0110856029_ul59204115131"><li id="dbss_01_0268__en-us_topic_0110856029_li69205116136">CPU: 4 vCPUs</li><li id="dbss_01_0268__en-us_topic_0110856029_li1192141121319">Memory: 16 GB</li><li id="dbss_01_0268__li129572047135214">Disk: 500 GB</li></ul>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="44.96%" headers="mcps1.3.2.2.2.5.1.4 "><ul id="dbss_01_0268__en-us_topic_0110856029_ul863917718128"><li id="dbss_01_0268__en-us_topic_0110856029_li5639770123">Peak QPS: 3,000 queries/second</li><li id="dbss_01_0268__en-us_topic_0110856029_li19639167141219">Database load rate: 3.6 million statements/hour</li><li id="dbss_01_0268__en-us_topic_0110856029_li563917713127">Stores 400 million online SQL statements.</li><li id="dbss_01_0268__en-us_topic_0110856029_li263911781216">Stores 5 billion archived SQL statements.</li></ul>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0268__en-us_topic_0110856029_row17687317314"><td class="cellrowborder" valign="top" width="11.83%" headers="mcps1.3.2.2.2.5.1.1 "><p id="dbss_01_0268__en-us_topic_0110856029_p147685316318">Professional</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="23.32%" headers="mcps1.3.2.2.2.5.1.2 "><p id="dbss_01_0268__en-us_topic_0110856029_p7677195016416">6</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="19.89%" headers="mcps1.3.2.2.2.5.1.3 "><ul id="dbss_01_0268__en-us_topic_0110856029_ul18269153517136"><li id="dbss_01_0268__en-us_topic_0110856029_li1926933512134">CPU: 8 vCPUs</li><li id="dbss_01_0268__en-us_topic_0110856029_li122691035121318">Memory: 32 GB</li></ul>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="44.96%" headers="mcps1.3.2.2.2.5.1.4 "><ul id="dbss_01_0268__en-us_topic_0110856029_ul1131881116125"><li id="dbss_01_0268__en-us_topic_0110856029_li13189113120">Peak QPS: 6,000 queries/second</li><li id="dbss_01_0268__en-us_topic_0110856029_li831801131219">Database load rate: 7.2 million statements/hour</li><li id="dbss_01_0268__en-us_topic_0110856029_li20318111114126">Stores 600 million online SQL statements.</li><li id="dbss_01_0268__en-us_topic_0110856029_li123195115121">Stores 10 billion archived SQL statements.</li></ul>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="dbss_01_0268__en-us_topic_0110856029_row127687318315"><td class="cellrowborder" valign="top" width="11.83%" headers="mcps1.3.2.2.2.5.1.1 "><p id="dbss_01_0268__en-us_topic_0110856029_p147687316313">Advanced</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="23.32%" headers="mcps1.3.2.2.2.5.1.2 "><p id="dbss_01_0268__en-us_topic_0110856029_p14366755544">30</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="19.89%" headers="mcps1.3.2.2.2.5.1.3 "><ul id="dbss_01_0268__en-us_topic_0110856029_ul15153546134"><li id="dbss_01_0268__en-us_topic_0110856029_li1751518543137">CPU: 16 vCPUs</li><li id="dbss_01_0268__en-us_topic_0110856029_li175155546137">Memory: 64 GB</li></ul>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="44.96%" headers="mcps1.3.2.2.2.5.1.4 "><ul id="dbss_01_0268__en-us_topic_0110856029_ul857521512121"><li id="dbss_01_0268__en-us_topic_0110856029_li105751415171214">Peak QPS: 30,000 queries/second</li><li id="dbss_01_0268__en-us_topic_0110856029_li55751115171220">Database load rate: 10.80 million statements/hour</li><li id="dbss_01_0268__en-us_topic_0110856029_li357515152128">Stores 1.5 billion online SQL statements.</li><li id="dbss_01_0268__en-us_topic_0110856029_li557515157125">Stores 60 billion archived SQL statements.</li></ul>
|
||||
</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
<div class="note" id="dbss_01_0268__note920415819121"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="dbss_01_0268__ul1090818121575"><li id="dbss_01_0268__li521531475710">A database instance is uniquely defined by its database IP address and port.<p id="dbss_01_0268__p19911740195715"><a name="dbss_01_0268__li521531475710"></a><a name="li521531475710"></a>The number of database instances equals the number of database ports. If a database IP address has N database ports, there are N database instances.</p>
|
||||
<p id="dbss_01_0268__p1999154017579">Example: A user has two database IP addresses, IP<sub id="dbss_01_0268__sub1449041514355">1</sub> and IP<sub id="dbss_01_0268__sub16743202113512">2</sub>. IP<sub id="dbss_01_0268__sub2651143218355">1</sub> has a database port. IP<sub id="dbss_01_0268__sub12843940183510">2</sub> has three database ports. IP<sub id="dbss_01_0268__sub434244419355">1</sub> and IP<sub id="dbss_01_0268__sub201973470359">2</sub> have four database instances in total. To audit all of them, select professional edition DBSS, which supports a maximum of six database instances.</p>
|
||||
</li><li id="dbss_01_0268__li16255111377">To change the edition of a DBSS instance, unsubscribe from it and apply for a new one.</li><li id="dbss_01_0268__li0908012125718">Online SQL statements are counted based on the assumption that the capacity of an SQL statement is 1 KB.</li></ul>
|
||||
</div></div>
|
||||
</div>
|
||||
</div>
|
||||
<div>
|
||||
<div class="familylinks">
|
||||
<div class="parentlink"><strong>Parent topic:</strong> <a href="dbss_01_0138.html">Overview</a></div>
|
||||
</div>
|
||||
</div>
|
||||
|
31
docs/dbss/umn/dbss_01_0269.html
Normal file
31
docs/dbss/umn/dbss_01_0269.html
Normal file
@ -0,0 +1,31 @@
|
||||
<a name="dbss_01_0269"></a><a name="dbss_01_0269"></a>
|
||||
|
||||
<h1 class="topictitle1">Functions</h1>
|
||||
<div id="body1575536807490"></div>
|
||||
<div>
|
||||
<ul class="ullinks">
|
||||
<li class="ulchildlink"><strong><a href="dbss_01_0290.html">Does Database Audit (in Bypass Mode) Affect My Services?</a></strong><br>
|
||||
</li>
|
||||
<li class="ulchildlink"><strong><a href="dbss_01_0215.html">What Are the Functions of Database Audit?</a></strong><br>
|
||||
</li>
|
||||
<li class="ulchildlink"><strong><a href="dbss_01_0221.html">Does Database Audit Support Bidirectional Audit?</a></strong><br>
|
||||
</li>
|
||||
<li class="ulchildlink"><strong><a href="dbss_01_0312.html">Can Applications Using TLS Connections Be Audited?</a></strong><br>
|
||||
</li>
|
||||
<li class="ulchildlink"><strong><a href="dbss_01_0225.html">How Long Is the Database Audit Data Stored by Default?</a></strong><br>
|
||||
</li>
|
||||
<li class="ulchildlink"><strong><a href="dbss_01_0228.html">How Soon Can I Receive an Alarm Notification If an Exception Occurs in Database Audit?</a></strong><br>
|
||||
</li>
|
||||
<li class="ulchildlink"><strong><a href="dbss_01_0229.html">Is the Total Number Of Alarms Every Day the Same as that of Emails?</a></strong><br>
|
||||
</li>
|
||||
<li class="ulchildlink"><strong><a href="dbss_01_0289.html">Why I Cannot Preview the Database Security Audit Report Online?</a></strong><br>
|
||||
</li>
|
||||
<li class="ulchildlink"><strong><a href="dbss_01_0347.html">If I Use Middleware at the Service Side, Will It Affect Database Audit?</a></strong><br>
|
||||
</li>
|
||||
</ul>
|
||||
|
||||
<div class="familylinks">
|
||||
<div class="parentlink"><strong>Parent topic:</strong> <a href="dbss_01_0097.html">FAQs</a></div>
|
||||
</div>
|
||||
</div>
|
||||
|
37
docs/dbss/umn/dbss_01_0283.html
Normal file
37
docs/dbss/umn/dbss_01_0283.html
Normal file
@ -0,0 +1,37 @@
|
||||
<a name="dbss_01_0283"></a><a name="dbss_01_0283"></a>
|
||||
|
||||
<h1 class="topictitle1">How Do I Disable SSL for a Database?</h1>
|
||||
<div id="body1571643730791"><p id="dbss_01_0283__p8060118">If SSL is enabled for a database, the database cannot be audited. To use database audit, disable SSL first.</p>
|
||||
<p id="dbss_01_0283__p753821310470">The MySQL database client is used as an example. Perform the following steps:</p>
|
||||
<ol id="dbss_01_0283__ol13690132419439"><li id="dbss_01_0283__li6629102612483"><span>Log in to the MySQL database client as user <strong id="dbss_01_0283__dbss_01_0256_b12576747173616">root</strong>.</span></li><li id="dbss_01_0283__dbss_01_0256_li390818623316"><span>Run the following command to check the connection mode of the MySQL database:</span><p><p id="dbss_01_0283__dbss_01_0256_p2732111512373"><strong id="dbss_01_0283__dbss_01_0256_b823691973710">\s</strong></p>
|
||||
<ul id="dbss_01_0283__dbss_01_0256_ul0759235324"><li id="dbss_01_0283__dbss_01_0256_li375918352027">If information similar to the following is displayed, SSL has been disabled for the MySQL database.<div class="codecoloring" codetype="Sql" id="dbss_01_0283__dbss_01_0256_screen204051438204111"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span></pre></div></td><td class="code"><div><pre><span></span><span class="n">SSL</span><span class="p">:</span><span class="w"> </span><span class="k">Not</span><span class="w"> </span><span class="k">in</span><span class="w"> </span><span class="n">use</span><span class="w"> </span>
|
||||
</pre></div></td></tr></table></div>
|
||||
|
||||
</div>
|
||||
</li><li id="dbss_01_0283__dbss_01_0256_li37602351228">If information similar to the following is displayed, SSL has been enabled for the MySQL database. Go to <a href="#dbss_01_0283__li10221135254320">3</a>.<div class="codecoloring" codetype="Sql" id="dbss_01_0283__dbss_01_0256_screen1063392513912"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span></pre></div></td><td class="code"><div><pre><span></span><span class="n">SSL</span><span class="p">:</span><span class="w"> </span><span class="n">Cipher</span><span class="w"> </span><span class="k">in</span><span class="w"> </span><span class="n">use</span><span class="w"> </span><span class="k">is</span><span class="w"> </span><span class="n">XXX</span><span class="o">-</span><span class="n">XXX</span><span class="o">-</span><span class="n">XXXXXX</span><span class="o">-</span><span class="n">XXX</span><span class="w"> </span>
|
||||
</pre></div></td></tr></table></div>
|
||||
|
||||
</div>
|
||||
</li></ul>
|
||||
</p></li><li id="dbss_01_0283__li10221135254320"><a name="dbss_01_0283__li10221135254320"></a><a name="li10221135254320"></a><span>Log in to the MySQL database in SSL mode.</span><p><ol type="a" id="dbss_01_0283__ol34751229104419"><li id="dbss_01_0283__li42543255442">Run the following command to exit from the MySQL database:<p id="dbss_01_0283__p161041155194410"><a name="dbss_01_0283__li42543255442"></a><a name="li42543255442"></a><strong id="dbss_01_0283__b16721155712447">exit</strong></p>
|
||||
</li><li id="dbss_01_0283__li1711655310444">Log in to the MySQL database as user <strong id="dbss_01_0283__b1158175812455">root</strong>.<p id="dbss_01_0283__p9844191354512">Add the following parameters at the end of the login command:</p>
|
||||
<p id="dbss_01_0283__p984451354519"><strong id="dbss_01_0283__b1584471317458">--ssl-mode=DISABLED</strong></p>
|
||||
<p id="dbss_01_0283__p1884581313459">Or</p>
|
||||
<p id="dbss_01_0283__p128451513134515"><strong id="dbss_01_0283__b8845151374517">--ssl=0</strong></p>
|
||||
<div class="notice" id="dbss_01_0283__note84755264614"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><p id="dbss_01_0283__p164751625467">If you logged in to the MySQL database in SSL mode, you can disable SSL only for this login. To use the database audit function, log in to the MySQL database as instructed in this step.</p>
|
||||
</div></div>
|
||||
</li><li id="dbss_01_0283__dbss_01_0256_li13521650153219">Run the following command to check the connection mode of the MySQL database:<p id="dbss_01_0283__dbss_01_0256_p397751210339"><a name="dbss_01_0283__dbss_01_0256_li13521650153219"></a><a name="dbss_01_0256_li13521650153219"></a><strong id="dbss_01_0283__dbss_01_0256_b139771312113310">\s</strong></p>
|
||||
<div class="p" id="dbss_01_0283__dbss_01_0256_p13659423143316">If information similar to the following is displayed, SSL has been disabled for the MySQL database.<div class="codecoloring" codetype="Sql" id="dbss_01_0283__dbss_01_0256_screen139771712193313"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span></pre></div></td><td class="code"><div><pre><span></span><span class="n">SSL</span><span class="p">:</span><span class="w"> </span><span class="k">Not</span><span class="w"> </span><span class="k">in</span><span class="w"> </span><span class="n">use</span><span class="w"> </span>
|
||||
</pre></div></td></tr></table></div>
|
||||
|
||||
</div>
|
||||
</div>
|
||||
</li></ol>
|
||||
</p></li></ol>
|
||||
</div>
|
||||
<div>
|
||||
<div class="familylinks">
|
||||
<div class="parentlink"><strong>Parent topic:</strong> <a href="dbss_01_0114.html">Operations</a></div>
|
||||
</div>
|
||||
</div>
|
||||
|
Some files were not shown because too many files have changed in this diff Show More
Loading…
x
Reference in New Issue
Block a user