forked from docs/doc-exports
Li, Qiao
6eff629de3
Reviewed-by: Belejkanic, Lukas <lukas.belejkanic@t-systems.com> Co-authored-by: Li, Qiao <qiaoli@huawei.com> Co-committed-by: Li, Qiao <qiaoli@huawei.com>
104 lines
11 KiB
HTML
104 lines
11 KiB
HTML
<a name="dbss_01_0192"></a><a name="dbss_01_0192"></a>
|
|
|
|
<h1 class="topictitle1">Adding Risky Operations</h1>
|
|
<div id="body1544587094894"><p id="dbss_01_0192__p16481935222">After enabling database audit, add and configure risky operations for audit.</p>
|
|
<div class="notice" id="dbss_01_0192__note15999932121115"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><p id="dbss_01_0192__p169992329111">One piece of audited data can match only one risky operation rule.</p>
|
|
</div></div>
|
|
<div class="section" id="dbss_01_0192__section070891116319"><h4 class="sectiontitle">Prerequisites</h4><ul id="dbss_01_0192__ul13013312410"><li id="dbss_01_0192__li82122017515">You have applied for a database audit instance and the <strong id="dbss_01_0192__en-us_topic_0144723368_b1155217115215">Status</strong> is <strong id="dbss_01_0192__en-us_topic_0144723368_b185532015214">Running</strong>.</li><li id="dbss_01_0192__li1610855617422">Database audit has been enabled.</li></ul>
|
|
</div>
|
|
<div class="section" id="dbss_01_0192__section47411322105817"><h4 class="sectiontitle">Procedure</h4><ol id="dbss_01_0192__ol18449141653"><li id="dbss_01_0192__li435271063519"><span>In the navigation tree, choose <strong id="dbss_01_0192__b10504151693019">Rules</strong>.</span></li><li id="dbss_01_0192__li13433863512"><span>In the <strong id="dbss_01_0192__b428931773915">Instance</strong> drop-down list, select an instance to add risky operations. Click the <strong id="dbss_01_0192__b174069271396">Risky Operations</strong> tab. Click <strong id="dbss_01_0192__b9814174033918">Add</strong> above the risky operation list.</span></li><li id="dbss_01_0192__li43204368016"><span>On the <strong id="dbss_01_0192__b9696331813">Add Risky Operation</strong> page, set the basic information and client IP address, as shown in <a href="#dbss_01_0192__fig161016109141">Figure 1</a>. .</span><p><div class="fignone" id="dbss_01_0192__fig161016109141"><a name="dbss_01_0192__fig161016109141"></a><a name="fig161016109141"></a><span class="figcap"><b>Figure 1 </b>Setting the basic information and client IP address</span><br><span><img id="dbss_01_0192__image070221035716" src="en-us_image_0000001531047000.png"></span></div>
|
|
|
|
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="dbss_01_0192__table4295843716304" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameters</caption><thead align="left"><tr id="dbss_01_0192__row4338993216304"><th align="left" class="cellrowborder" valign="top" width="21%" id="mcps1.3.4.2.3.2.2.2.4.1.1"><p id="dbss_01_0192__p2492361616304">Parameter</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="61%" id="mcps1.3.4.2.3.2.2.2.4.1.2"><p id="dbss_01_0192__p554697916304">Description</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="18%" id="mcps1.3.4.2.3.2.2.2.4.1.3"><p id="dbss_01_0192__p4665219216304">Example Value</p>
|
|
</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody><tr id="dbss_01_0192__row8736194992614"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.4.2.3.2.2.2.4.1.1 "><p id="dbss_01_0192__p27371849182610">Name</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="61%" headers="mcps1.3.4.2.3.2.2.2.4.1.2 "><p id="dbss_01_0192__p673724912620">Custom name of a risky operation</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.4.2.3.2.2.2.4.1.3 "><p id="dbss_01_0192__p1373734915267">test</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="dbss_01_0192__row3896937416304"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.4.2.3.2.2.2.4.1.1 "><p id="dbss_01_0192__p240275716304">Risk Severity</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="61%" headers="mcps1.3.4.2.3.2.2.2.4.1.2 "><p id="dbss_01_0192__p6040559116304">Severity of a risky operation. The options are as follows:</p>
|
|
<ul id="dbss_01_0192__ul155751241152314"><li id="dbss_01_0192__li175751416235"><strong id="dbss_01_0192__b372703103316">High</strong></li><li id="dbss_01_0192__li105757413233"><strong id="dbss_01_0192__b192201643310">Moderate</strong></li><li id="dbss_01_0192__li185757413236"><strong id="dbss_01_0192__b716151033311">Low</strong></li><li id="dbss_01_0192__li157519418234"><strong id="dbss_01_0192__b1890771418333">No risks</strong></li></ul>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.4.2.3.2.2.2.4.1.3 "><p id="dbss_01_0192__p5366207016304">High</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="dbss_01_0192__row1332204111319"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.4.2.3.2.2.2.4.1.1 "><p id="dbss_01_0192__p33321041237">Status</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="61%" headers="mcps1.3.4.2.3.2.2.2.4.1.2 "><p id="dbss_01_0192__p153321841736">Status of a risky operation</p>
|
|
<ul id="dbss_01_0192__ul5783154085812"><li id="dbss_01_0192__li2783340165817"><span><img id="dbss_01_0192__image45071927117" src="en-us_image_0000001562224796.png"></span>: enabled</li><li id="dbss_01_0192__li215418191117"><span><img id="dbss_01_0192__image28711929111" src="en-us_image_0000001561906096.png"></span>: disabled</li></ul>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.4.2.3.2.2.2.4.1.3 "><p id="dbss_01_0192__p1215616575236"></p>
|
|
<p id="dbss_01_0192__p12921142720349"></p>
|
|
<p id="dbss_01_0192__p114771214823"><span><img id="dbss_01_0192__image34089151024" src="en-us_image_0000001562385088.png"></span></p>
|
|
</td>
|
|
</tr>
|
|
<tr id="dbss_01_0192__row0860165713317"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.4.2.3.2.2.2.4.1.1 "><p id="dbss_01_0192__p12331342414">Select Database</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="61%" headers="mcps1.3.4.2.3.2.2.2.4.1.2 "><p id="dbss_01_0192__p17861057634">Database that the risky operation will be applied to</p>
|
|
<p id="dbss_01_0192__p1494175872112">You can select <strong id="dbss_01_0192__b84259371475">ALL</strong> or a specific database.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.4.2.3.2.2.2.4.1.3 "><p id="dbss_01_0192__p198613573313">-</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="dbss_01_0192__row1319658616304"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.4.2.3.2.2.2.4.1.1 "><p id="dbss_01_0192__p6229055916304">Client IP Address or IP Range</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="61%" headers="mcps1.3.4.2.3.2.2.2.4.1.2 "><p id="dbss_01_0192__p1237050416304">IP address or IP address range of the client</p>
|
|
<p id="dbss_01_0192__p52991354131711">The IP address can be an IPv4 address (for example, 192.168.1.1) or an IPv6 address (for example, fe80:0000:0000:0000:0000:0000:0000:0000).</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.4.2.3.2.2.2.4.1.3 "><p id="dbss_01_0192__p1626715042213">192.168.0.0</p>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</p></li><li id="dbss_01_0192__li388573710185"><span>Set the operation type, operation object, and execution result, as shown in <a href="#dbss_01_0192__fig18318125817371">Figure 2</a>. For details about related parameters, see <a href="#dbss_01_0192__table1588718356449">Table 2</a>. </span><p><div class="fignone" id="dbss_01_0192__fig18318125817371"><a name="dbss_01_0192__fig18318125817371"></a><a name="fig18318125817371"></a><span class="figcap"><b>Figure 2 </b>Setting the operation type, operation object, and execution result</span><br><span><img id="dbss_01_0192__image7596142343610" src="en-us_image_0000001127298856.png"></span></div>
|
|
|
|
<div class="tablenoborder"><a name="dbss_01_0192__table1588718356449"></a><a name="table1588718356449"></a><table cellpadding="4" cellspacing="0" summary="" id="dbss_01_0192__table1588718356449" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Parameters</caption><thead align="left"><tr id="dbss_01_0192__row689253515446"><th align="left" class="cellrowborder" valign="top" width="21%" id="mcps1.3.4.2.4.2.2.2.4.1.1"><p id="dbss_01_0192__p7892835164414">Parameter</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="61%" id="mcps1.3.4.2.4.2.2.2.4.1.2"><p id="dbss_01_0192__p989343584418">Description</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="18%" id="mcps1.3.4.2.4.2.2.2.4.1.3"><p id="dbss_01_0192__p789653514416">Example Value</p>
|
|
</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody><tr id="dbss_01_0192__row48961135134415"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.4.2.4.2.2.2.4.1.1 "><p id="dbss_01_0192__p48971359440">Operations</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="61%" headers="mcps1.3.4.2.4.2.2.2.4.1.2 "><p id="dbss_01_0192__p789810359441">Type of a risky operation, including <strong id="dbss_01_0192__b19451174510374">Login</strong> and <strong id="dbss_01_0192__b411311506378">Operation</strong></p>
|
|
<p id="dbss_01_0192__p16318111314913">When you select the <strong id="dbss_01_0192__b1093511353818">Operation</strong> check box, you can select <strong id="dbss_01_0192__b9549162132219">All operations</strong> or the operations in <strong id="dbss_01_0192__b1149299390">DDL</strong>, <strong id="dbss_01_0192__b11884832163915">DML</strong>, and <strong id="dbss_01_0192__b228083715391">DCL</strong>.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.4.2.4.2.2.2.4.1.3 "><p id="dbss_01_0192__p260214765010">Operation</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="dbss_01_0192__row11901133564410"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.4.2.4.2.2.2.4.1.1 "><p id="dbss_01_0192__p129028351449">Objects</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="61%" headers="mcps1.3.4.2.4.2.2.2.4.1.2 "><p id="dbss_01_0192__p16904103518448">Enter the target database, target table, and field information after clicking <strong id="dbss_01_0192__b7964916124018">Add Operation Object</strong>. Click <strong id="dbss_01_0192__b163847111456">OK</strong> to add an operation object.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.4.2.4.2.2.2.4.1.3 "><p id="dbss_01_0192__p2910113519445">-</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="dbss_01_0192__row791153564413"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.4.2.4.2.2.2.4.1.1 "><p id="dbss_01_0192__p8911535144415">Results</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="61%" headers="mcps1.3.4.2.4.2.2.2.4.1.2 "><p id="dbss_01_0192__p8912163517447">Set <strong id="dbss_01_0192__b7772122712465">Affected Rows</strong> and <strong id="dbss_01_0192__b729932412463">Operation Duration</strong>. The operation conditions are as follows:</p>
|
|
<ul id="dbss_01_0192__ul1891243517447"><li id="dbss_01_0192__li4913235134411"><strong id="dbss_01_0192__b18453154864712">Greater than</strong></li><li id="dbss_01_0192__li11380935152119"><strong id="dbss_01_0192__b1053025411471">Less than</strong></li><li id="dbss_01_0192__li1268722216224"><strong id="dbss_01_0192__b3792185984711">Equal To</strong></li><li id="dbss_01_0192__li121102610225"><strong id="dbss_01_0192__b9915104425418">Equal to or greater than</strong></li><li id="dbss_01_0192__li19949122917222"><strong id="dbss_01_0192__b13825174815420">Less than or equal to</strong></li></ul>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.4.2.4.2.2.2.4.1.3 "><p id="dbss_01_0192__p2921835194413">-</p>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</p></li><li id="dbss_01_0192__li14946715126"><span>Click <span class="uicontrol" id="dbss_01_0192__uicontrol15646516191210"><b>Save</b></span>.</span></li></ol>
|
|
</div>
|
|
</div>
|
|
<div></div>
|
|
|