forked from docs/doc-exports
DBSS usermanual 20250630 version
Reviewed-by: Rogal, Marcel <mrogal@noreply.gitea.eco.tsi-dev.otc-service.com> Co-authored-by: qinweiwei <qinweiwei@huawei.com> Co-committed-by: qinweiwei <qinweiwei@huawei.com>
This commit is contained in:
File diff suppressed because it is too large
Load Diff
@ -252,7 +252,7 @@
|
|||||||
"code":"28"
|
"code":"28"
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
"desc":"After adding a risky operation, you can view the risk, enable, edit, disable, or delete the risky operation, or set its priority.The risky operation has been added.Before",
|
"desc":"More than 100 risk types are supported. After adding a risky operation, you can view the risk, enable, edit, disable, or delete the risky operation, or set its priority.T",
|
||||||
"product_code":"dbss",
|
"product_code":"dbss",
|
||||||
"title":"Managing Risky Operations",
|
"title":"Managing Risky Operations",
|
||||||
"uri":"dbss_01_0201.html",
|
"uri":"dbss_01_0201.html",
|
||||||
|
|||||||
@ -5,7 +5,7 @@
|
|||||||
<div class="section" id="dbss_01_0046__section135491616118"><h4 class="sectiontitle">Constraints and Limitations</h4><p id="dbss_01_0046__p1734941819118">The risky SQL statements can be added to the whitelist in data reports.</p>
|
<div class="section" id="dbss_01_0046__section135491616118"><h4 class="sectiontitle">Constraints and Limitations</h4><p id="dbss_01_0046__p1734941819118">The risky SQL statements can be added to the whitelist in data reports.</p>
|
||||||
</div>
|
</div>
|
||||||
<div class="section" id="dbss_01_0046__section169851556119"><h4 class="sectiontitle">Adding Scanned SQL Statements</h4><ol id="dbss_01_0046__ol61521721102215"><li id="dbss_01_0046__li1896224713913"><span>Log in to the management console.</span></li><li id="dbss_01_0046__li199221335798"><span>Select a region, click <span><img id="dbss_01_0046__dbss_01_0204_dbss_01_0186_image12421104763114" src="en-us_image_0000001074398929.png"></span>, and choose <span class="menucascade" id="dbss_01_0046__dbss_01_0204_dbss_01_0186_menucascade1215612612394"><b><span class="uicontrol" id="dbss_01_0046__dbss_01_0204_dbss_01_0186_uicontrol415682653911">Security</span></b> > <b><span class="uicontrol" id="dbss_01_0046__dbss_01_0204_dbss_01_0186_uicontrol2156182620396">Database Security Service</span></b></span>. The <strong id="dbss_01_0046__dbss_01_0204_dbss_01_0186_b6156926113915">Dashboard</strong> page is displayed.</span></li><li id="dbss_01_0046__li517404379"><span>In the navigation tree on the left, choose <span class="uicontrol" id="dbss_01_0046__uicontrol34301640181319"><b>Data Reports</b></span>. The <span class="wintitle" id="dbss_01_0046__wintitle13430124071314"><b>Data Reports</b></span> page is displayed.</span></li><li id="dbss_01_0046__li168521066525"><span>In the <strong id="dbss_01_0046__b1766594619135">Instance</strong> drop-down list, select the instance whose session information you want to view.</span></li><li id="dbss_01_0046__li843695702418"><span>Click the <span class="wintitle" id="dbss_01_0046__wintitle67612030132515"><b>Statements</b></span> tab to view risky SQL statements.</span></li><li id="dbss_01_0046__li2390182182813"><span>Add SQL statements to the whitelist.</span><p><ul id="dbss_01_0046__ul11601325162815"><li id="dbss_01_0046__li26244718283">Add a single SQL statement.<ol type="a" id="dbss_01_0046__ol1918810318280"><li id="dbss_01_0046__li41899318283">Click <strong id="dbss_01_0046__b9698131532">Add to Whitelist</strong> in the <strong id="dbss_01_0046__b136988315310">Operation</strong> column of the target SQL statement.</li><li id="dbss_01_0046__li17328418182916">In the displayed dialog box, select the database and description of the target SQL statement.</li><li id="dbss_01_0046__li09411942163012">Click <strong id="dbss_01_0046__b1429111015397">OK</strong>.</li></ol>
|
<div class="section" id="dbss_01_0046__section169851556119"><h4 class="sectiontitle">Adding Scanned SQL Statements</h4><ol id="dbss_01_0046__ol61521721102215"><li id="dbss_01_0046__li1896224713913"><span>Log in to the management console.</span></li><li id="dbss_01_0046__li199221335798"><span>Select a region, click <span><img id="dbss_01_0046__dbss_01_0204_dbss_01_0186_image12421104763114" src="en-us_image_0000001074398929.png"></span>, and choose <span class="menucascade" id="dbss_01_0046__dbss_01_0204_dbss_01_0186_menucascade1215612612394"><b><span class="uicontrol" id="dbss_01_0046__dbss_01_0204_dbss_01_0186_uicontrol415682653911">Security</span></b> > <b><span class="uicontrol" id="dbss_01_0046__dbss_01_0204_dbss_01_0186_uicontrol2156182620396">Database Security Service</span></b></span>. The <strong id="dbss_01_0046__dbss_01_0204_dbss_01_0186_b6156926113915">Dashboard</strong> page is displayed.</span></li><li id="dbss_01_0046__li517404379"><span>In the navigation tree on the left, choose <span class="uicontrol" id="dbss_01_0046__uicontrol34301640181319"><b>Data Reports</b></span>. The <span class="wintitle" id="dbss_01_0046__wintitle13430124071314"><b>Data Reports</b></span> page is displayed.</span></li><li id="dbss_01_0046__li168521066525"><span>In the <strong id="dbss_01_0046__b1766594619135">Instance</strong> drop-down list, select the instance whose session information you want to view.</span></li><li id="dbss_01_0046__li843695702418"><span>Click the <span class="wintitle" id="dbss_01_0046__wintitle67612030132515"><b>Statements</b></span> tab to view risky SQL statements.</span></li><li id="dbss_01_0046__li2390182182813"><span>Add SQL statements to the whitelist.</span><p><ul id="dbss_01_0046__ul11601325162815"><li id="dbss_01_0046__li26244718283">Add a single SQL statement.<ol type="a" id="dbss_01_0046__ol1918810318280"><li id="dbss_01_0046__li41899318283">Click <strong id="dbss_01_0046__b9698131532">Add to Whitelist</strong> in the <strong id="dbss_01_0046__b136988315310">Operation</strong> column of the target SQL statement.</li><li id="dbss_01_0046__li17328418182916">In the displayed dialog box, select the database and description of the target SQL statement.</li><li id="dbss_01_0046__li09411942163012">Click <strong id="dbss_01_0046__b1429111015397">OK</strong>.</li></ol>
|
||||||
</li><li id="dbss_01_0046__li889182713281">Add SQL statements in batches.<ol type="a" id="dbss_01_0046__ol34111821143716"><li id="dbss_01_0046__li5411172193716">Select the target SQL statement and click <span class="uicontrol" id="dbss_01_0046__uicontrol933126103810"><b>One-Clink Whitelisting</b></span>.</li><li id="dbss_01_0046__li1651864223820">In the displayed dialog box, select the database and description of the target SQL statement.</li><li id="dbss_01_0046__li11895102773919">Click <strong id="dbss_01_0046__dbss_01_0046_b1429111015397">OK</strong>.</li></ol>
|
</li><li id="dbss_01_0046__li889182713281">Add SQL statements in batches.<ol type="a" id="dbss_01_0046__ol34111821143716"><li id="dbss_01_0046__li5411172193716">Select the target SQL statement and click <span class="uicontrol" id="dbss_01_0046__uicontrol933126103810"><b>One-Click Whitelisting</b></span>.</li><li id="dbss_01_0046__li1651864223820">In the displayed dialog box, select the database and description of the target SQL statement.</li><li id="dbss_01_0046__li11895102773919">Click <strong id="dbss_01_0046__dbss_01_0046_b1429111015397">OK</strong>.</li></ol>
|
||||||
</li></ul>
|
</li></ul>
|
||||||
</p></li></ol>
|
</p></li></ol>
|
||||||
</div>
|
</div>
|
||||||
|
|||||||
@ -2,7 +2,7 @@
|
|||||||
|
|
||||||
<h1 class="topictitle1">Viewing Tracing Logs</h1>
|
<h1 class="topictitle1">Viewing Tracing Logs</h1>
|
||||||
<div id="body1524537597090"><p id="dbss_01_0144__p132501813413">After you enable CTS, the system starts recording operations on DBSS. Operation records for the last seven days can be viewed on the CTS console.</p>
|
<div id="body1524537597090"><p id="dbss_01_0144__p132501813413">After you enable CTS, the system starts recording operations on DBSS. Operation records for the last seven days can be viewed on the CTS console.</p>
|
||||||
<div class="section" id="dbss_01_0144__section159610420302"><h4 class="sectiontitle">Viewing a DBSS Trace on the CTS Console</h4><ol id="dbss_01_0144__ol1194546193110"><li id="dbss_01_0144__li394596113118"><span>Log in to the management console.</span></li><li id="dbss_01_0144__li42331433151114"><span>In the navigation pane on the left, click <span><img id="dbss_01_0144__image7233233121114" src="en-us_image_0000001570429773.png"></span> and choose <strong id="dbss_01_0144__b14615159104620">Management & Deployment</strong> > <strong id="dbss_01_0144__b1361559204612">Cloud Trace Service</strong>.</span></li><li id="dbss_01_0144__li8240924153816"><span>Choose <strong id="dbss_01_0144__b42162954165740">Trace List</strong> in the navigation pane.</span></li><li id="dbss_01_0144__li1199125415539"><span>Click <strong id="dbss_01_0144__b13683746114710">Region</strong> at the top of the <strong id="dbss_01_0144__b1468415465470">Trace List</strong> page to set the corresponding conditions.</span><p><div class="p" id="dbss_01_0144__p941145514539">The following four filters are available:<ul class="subitemlist" id="dbss_01_0144__ul4173195016221"><li id="dbss_01_0144__li25120207165721"><span class="parmname" id="dbss_01_0144__parmname1622918592477"><b>Trace Type</b></span>, <span class="parmname" id="dbss_01_0144__parmname18230859124713"><b>Trace Source</b></span>, <span class="parmname" id="dbss_01_0144__parmname1923185944716"><b>Resource Type</b></span>, and <span class="parmname" id="dbss_01_0144__parmname92316592470"><b>Search By</b></span><ul id="dbss_01_0144__ul138358421566"><li id="dbss_01_0144__li422110403562">Select the filter from the drop-down list. Set <strong id="dbss_01_0144__b842352706163855">Trace Source</strong> to <strong id="dbss_01_0144__b842352706163859">DBSS</strong>.</li><li id="dbss_01_0144__li5224174025618">When you select <strong id="dbss_01_0144__b842352706153249">Trace name</strong> for <strong id="dbss_01_0144__b1803301537153246">Search By</strong>, you also need to select a specific trace name.</li><li id="dbss_01_0144__li222614017560">When you select <strong id="dbss_01_0144__b1369790384153349">Resource ID</strong> for <strong id="dbss_01_0144__b1590770393153349">Search By</strong>, you also need to select or enter a specific resource ID.</li><li id="dbss_01_0144__li1822754014568">When you select <strong id="dbss_01_0144__b565110228153447">Resource name</strong> for <strong id="dbss_01_0144__b1329536783153447">Search By</strong>, you also need to select or enter a specific resource name.</li></ul>
|
<div class="section" id="dbss_01_0144__section159610420302"><h4 class="sectiontitle">Viewing a DBSS Trace on the CTS Console</h4><ol id="dbss_01_0144__ol1194546193110"><li id="dbss_01_0144__li394596113118"><span>Log in to the management console.</span></li><li id="dbss_01_0144__li42331433151114"><span>In the navigation pane on the left, click <span><img id="dbss_01_0144__image7233233121114" src="en-us_image_0000001570429773.png"></span> and choose <strong id="dbss_01_0144__b14615159104620">Management & Governance</strong> > <strong id="dbss_01_0144__b1361559204612">Cloud Trace Service</strong>.</span></li><li id="dbss_01_0144__li8240924153816"><span>Choose <strong id="dbss_01_0144__b42162954165740">Trace List</strong> in the navigation pane.</span></li><li id="dbss_01_0144__li1199125415539"><span>Click <strong id="dbss_01_0144__b13683746114710">Region</strong> at the top of the <strong id="dbss_01_0144__b1468415465470">Trace List</strong> page to set the corresponding conditions.</span><p><div class="p" id="dbss_01_0144__p941145514539">The following four filters are available:<ul class="subitemlist" id="dbss_01_0144__ul4173195016221"><li id="dbss_01_0144__li25120207165721"><span class="parmname" id="dbss_01_0144__parmname1622918592477"><b>Trace Type</b></span>, <span class="parmname" id="dbss_01_0144__parmname18230859124713"><b>Trace Source</b></span>, <span class="parmname" id="dbss_01_0144__parmname1923185944716"><b>Resource Type</b></span>, and <span class="parmname" id="dbss_01_0144__parmname92316592470"><b>Search By</b></span><ul id="dbss_01_0144__ul138358421566"><li id="dbss_01_0144__li422110403562">Select the filter from the drop-down list. Set <strong id="dbss_01_0144__b842352706163855">Trace Source</strong> to <strong id="dbss_01_0144__b842352706163859">DBSS</strong>.</li><li id="dbss_01_0144__li5224174025618">When you select <strong id="dbss_01_0144__b842352706153249">Trace name</strong> for <strong id="dbss_01_0144__b1803301537153246">Search By</strong>, you also need to select a specific trace name.</li><li id="dbss_01_0144__li222614017560">When you select <strong id="dbss_01_0144__b1369790384153349">Resource ID</strong> for <strong id="dbss_01_0144__b1590770393153349">Search By</strong>, you also need to select or enter a specific resource ID.</li><li id="dbss_01_0144__li1822754014568">When you select <strong id="dbss_01_0144__b565110228153447">Resource name</strong> for <strong id="dbss_01_0144__b1329536783153447">Search By</strong>, you also need to select or enter a specific resource name.</li></ul>
|
||||||
</li><li id="dbss_01_0144__li16990144143538"><strong id="dbss_01_0144__b842352706153633">Operator</strong>: Select a specific operator (a user other than tenant).</li><li id="dbss_01_0144__li2227630716221"><strong id="dbss_01_0144__b842352706153531">Trace Rating</strong>: Available options include <strong id="dbss_01_0144__b1447794024144642">All trace status</strong>, <strong id="dbss_01_0144__b842352706153558">normal</strong>, <strong id="dbss_01_0144__b84235270615364">warning</strong>, and <strong id="dbss_01_0144__b842352706153613">incident</strong>. You can only select one of them.</li><li id="dbss_01_0144__li2484476616221">In the upper right corner of the page, you can query traces in the last 1 hour, last 1 day, last 1 week, or within a customized period.</li></ul>
|
</li><li id="dbss_01_0144__li16990144143538"><strong id="dbss_01_0144__b842352706153633">Operator</strong>: Select a specific operator (a user other than tenant).</li><li id="dbss_01_0144__li2227630716221"><strong id="dbss_01_0144__b842352706153531">Trace Rating</strong>: Available options include <strong id="dbss_01_0144__b1447794024144642">All trace status</strong>, <strong id="dbss_01_0144__b842352706153558">normal</strong>, <strong id="dbss_01_0144__b84235270615364">warning</strong>, and <strong id="dbss_01_0144__b842352706153613">incident</strong>. You can only select one of them.</li><li id="dbss_01_0144__li2484476616221">In the upper right corner of the page, you can query traces in the last 1 hour, last 1 day, last 1 week, or within a customized period.</li></ul>
|
||||||
</div>
|
</div>
|
||||||
</p></li><li id="dbss_01_0144__li1326512181411"><span>Click <strong id="dbss_01_0144__b842352706164122">Query</strong>.</span></li><li id="dbss_01_0144__li11445413104011"><span>Click <span><img id="dbss_01_0144__image134427196485" src="en-us_image_0210925109.png"></span> on the left of a trace to expand its details.</span><p><div class="fignone" id="dbss_01_0144__fig17669149112013"><span class="figcap"><b>Figure 1 </b>Expanding trace details</span><br><span><img id="dbss_01_0144__image277616258384" src="en-us_image_0217009691.png"></span></div>
|
</p></li><li id="dbss_01_0144__li1326512181411"><span>Click <strong id="dbss_01_0144__b842352706164122">Query</strong>.</span></li><li id="dbss_01_0144__li11445413104011"><span>Click <span><img id="dbss_01_0144__image134427196485" src="en-us_image_0210925109.png"></span> on the left of a trace to expand its details.</span><p><div class="fignone" id="dbss_01_0144__fig17669149112013"><span class="figcap"><b>Figure 1 </b>Expanding trace details</span><br><span><img id="dbss_01_0144__image277616258384" src="en-us_image_0217009691.png"></span></div>
|
||||||
|
|||||||
@ -50,7 +50,15 @@
|
|||||||
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.4.2.4.2.2.2.4.1.3 "><p id="dbss_01_0192__p198613573313">-</p>
|
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.4.2.4.2.2.2.4.1.3 "><p id="dbss_01_0192__p198613573313">-</p>
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
<tr id="dbss_01_0192__row1319658616304"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.4.2.4.2.2.2.4.1.1 "><p id="dbss_01_0192__p6229055916304">Client IP Address or IP Range</p>
|
<tr id="dbss_01_0192__row147581436763"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.4.2.4.2.2.2.4.1.1 "><p id="dbss_01_0192__p2075863610615">Exception Client IP Address or IP Range (Optional)</p>
|
||||||
|
</td>
|
||||||
|
<td class="cellrowborder" valign="top" width="61%" headers="mcps1.3.4.2.4.2.2.2.4.1.2 "><p id="dbss_01_0192__p18758136465">IP addresses that do not need to be audited.</p>
|
||||||
|
<p id="dbss_01_0192__p561032410711">The IP address can be an IPv4 address (for example, 192.168.1.1) or an IPv6 address (for example, fe80:0000:0000:0000:0000:0000:0000:0000).</p>
|
||||||
|
</td>
|
||||||
|
<td class="cellrowborder" valign="top" width="18%" headers="mcps1.3.4.2.4.2.2.2.4.1.3 "><p id="dbss_01_0192__p1316118319715">192.168.0.0</p>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
<tr id="dbss_01_0192__row1319658616304"><td class="cellrowborder" valign="top" width="21%" headers="mcps1.3.4.2.4.2.2.2.4.1.1 "><p id="dbss_01_0192__p6229055916304">Client IP Address/IP Address Segment (Optional)</p>
|
||||||
</td>
|
</td>
|
||||||
<td class="cellrowborder" valign="top" width="61%" headers="mcps1.3.4.2.4.2.2.2.4.1.2 "><p id="dbss_01_0192__p1237050416304">IP address or IP address range of the client</p>
|
<td class="cellrowborder" valign="top" width="61%" headers="mcps1.3.4.2.4.2.2.2.4.1.2 "><p id="dbss_01_0192__p1237050416304">IP address or IP address range of the client</p>
|
||||||
<p id="dbss_01_0192__p52991354131711">The IP address can be an IPv4 address (for example, 192.168.1.1) or an IPv6 address (for example, fe80:0000:0000:0000:0000:0000:0000:0000).</p>
|
<p id="dbss_01_0192__p52991354131711">The IP address can be an IPv4 address (for example, 192.168.1.1) or an IPv6 address (for example, fe80:0000:0000:0000:0000:0000:0000:0000).</p>
|
||||||
|
|||||||
@ -1,7 +1,7 @@
|
|||||||
<a name="dbss_01_0201"></a><a name="dbss_01_0201"></a>
|
<a name="dbss_01_0201"></a><a name="dbss_01_0201"></a>
|
||||||
|
|
||||||
<h1 class="topictitle1">Managing Risky Operations</h1>
|
<h1 class="topictitle1">Managing Risky Operations</h1>
|
||||||
<div id="body1545227594709"><p id="dbss_01_0201__p1268218531877">After adding a risky operation, you can view the risk, enable, edit, disable, or delete the risky operation, or set its priority.</p>
|
<div id="body1545227594709"><p id="dbss_01_0201__p480184717920">More than 100 risk types are supported. After adding a risky operation, you can view the risk, enable, edit, disable, or delete the risky operation, or set its priority.</p>
|
||||||
<div class="section" id="dbss_01_0201__section070891116319"><h4 class="sectiontitle">Prerequisites</h4><ul id="dbss_01_0201__ul13013312410"><li id="dbss_01_0201__li113021731940">The risky operation has been added.</li><li id="dbss_01_0201__li19732134261016">Before enabling the risky operation, ensure that its status is <strong id="dbss_01_0201__b11420827113618">Disabled</strong>.</li><li id="dbss_01_0201__li125026531295">Before disabling the risky operation, ensure that its status is <strong id="dbss_01_0201__b159185468365">Enabled</strong>.</li></ul>
|
<div class="section" id="dbss_01_0201__section070891116319"><h4 class="sectiontitle">Prerequisites</h4><ul id="dbss_01_0201__ul13013312410"><li id="dbss_01_0201__li113021731940">The risky operation has been added.</li><li id="dbss_01_0201__li19732134261016">Before enabling the risky operation, ensure that its status is <strong id="dbss_01_0201__b11420827113618">Disabled</strong>.</li><li id="dbss_01_0201__li125026531295">Before disabling the risky operation, ensure that its status is <strong id="dbss_01_0201__b159185468365">Enabled</strong>.</li></ul>
|
||||||
</div>
|
</div>
|
||||||
<div class="section" id="dbss_01_0201__section348118488534"><h4 class="sectiontitle">Sets the Priority of the Risky Operation</h4><ol id="dbss_01_0201__ol14485848145320"><li id="dbss_01_0201__li1896224713913"><span>Log in to the management console.</span></li><li id="dbss_01_0201__li1723651814598"><span>In the navigation tree on the left, choose <strong id="dbss_01_0201__b5439144625812">Audit Rules</strong>.</span></li><li id="dbss_01_0201__li59251104112"><span>In the <strong id="dbss_01_0201__b1128316104817">Instance</strong> drop-down list, select an instance to set risky operation priority. Click the <strong id="dbss_01_0201__b118081524144811">Risky Operations</strong> tab.</span></li><li id="dbss_01_0201__li1452124825315"><span>In the <strong id="dbss_01_0201__b8916161215516">Operation</strong> column of the desired risky operation, click <strong id="dbss_01_0201__b11917412125114">Set Priority</strong>.</span></li><li id="dbss_01_0201__li452910482536"><span>In the displayed dialog box, select a priority and click <strong id="dbss_01_0201__b16379918134612">OK</strong>.</span></li></ol>
|
<div class="section" id="dbss_01_0201__section348118488534"><h4 class="sectiontitle">Sets the Priority of the Risky Operation</h4><ol id="dbss_01_0201__ol14485848145320"><li id="dbss_01_0201__li1896224713913"><span>Log in to the management console.</span></li><li id="dbss_01_0201__li1723651814598"><span>In the navigation tree on the left, choose <strong id="dbss_01_0201__b5439144625812">Audit Rules</strong>.</span></li><li id="dbss_01_0201__li59251104112"><span>In the <strong id="dbss_01_0201__b1128316104817">Instance</strong> drop-down list, select an instance to set risky operation priority. Click the <strong id="dbss_01_0201__b118081524144811">Risky Operations</strong> tab.</span></li><li id="dbss_01_0201__li1452124825315"><span>In the <strong id="dbss_01_0201__b8916161215516">Operation</strong> column of the desired risky operation, click <strong id="dbss_01_0201__b11917412125114">Set Priority</strong>.</span></li><li id="dbss_01_0201__li452910482536"><span>In the displayed dialog box, select a priority and click <strong id="dbss_01_0201__b16379918134612">OK</strong>.</span></li></ol>
|
||||||
|
|||||||
@ -4,7 +4,7 @@
|
|||||||
<div id="body1544587094894"><p id="dbss_01_0204__p6573544910">After connecting the database to the database audit instance, view the audit statistics, including the database audit information, instance information, and data analysis information.</p>
|
<div id="body1544587094894"><p id="dbss_01_0204__p6573544910">After connecting the database to the database audit instance, view the audit statistics, including the database audit information, instance information, and data analysis information.</p>
|
||||||
<div class="section" id="dbss_01_0204__section441811405410"><h4 class="sectiontitle">Prerequisites</h4><ul id="dbss_01_0204__ul1416718161018"><li id="dbss_01_0204__li89051957124915">You have applied for a database audit instance and the <strong id="dbss_01_0204__en-us_topic_0144723368_b1155217115215">Status</strong> is <strong id="dbss_01_0204__en-us_topic_0144723368_b185532015214">Running</strong>.</li><li id="dbss_01_0204__li1610855617422">Database audit has been enabled.</li></ul>
|
<div class="section" id="dbss_01_0204__section441811405410"><h4 class="sectiontitle">Prerequisites</h4><ul id="dbss_01_0204__ul1416718161018"><li id="dbss_01_0204__li89051957124915">You have applied for a database audit instance and the <strong id="dbss_01_0204__en-us_topic_0144723368_b1155217115215">Status</strong> is <strong id="dbss_01_0204__en-us_topic_0144723368_b185532015214">Running</strong>.</li><li id="dbss_01_0204__li1610855617422">Database audit has been enabled.</li></ul>
|
||||||
</div>
|
</div>
|
||||||
<div class="section" id="dbss_01_0204__section16337113512514"><h4 class="sectiontitle">Procedure</h4><ol id="dbss_01_0204__ol8561155420380"><li id="dbss_01_0204__li1896224713913"><span>Log in to the management console.</span></li><li id="dbss_01_0204__li10800202815715"><span>Select a region, click <span><img id="dbss_01_0204__dbss_01_0186_image12421104763114" src="en-us_image_0000001074398929.png"></span>, and choose <span class="menucascade" id="dbss_01_0204__dbss_01_0186_menucascade1215612612394"><b><span class="uicontrol" id="dbss_01_0204__dbss_01_0186_uicontrol415682653911">Security</span></b> > <b><span class="uicontrol" id="dbss_01_0204__dbss_01_0186_uicontrol2156182620396">Database Security Service</span></b></span>. The <strong id="dbss_01_0204__dbss_01_0186_b6156926113915">Dashboard</strong> page is displayed.</span></li><li id="dbss_01_0204__li2020718217812"><span>In the <strong id="dbss_01_0204__b6578132315344">Instance</strong> drop-down list, select the instance whose audit information you want to view.</span></li><li id="dbss_01_0204__li56501633204913"><span>View the overall audit statistics, risk distribution, session statistics, and SQL distribution.</span><p><ul id="dbss_01_0204__ul9293658163018"><li id="dbss_01_0204__li1028161893016">Select <strong id="dbss_01_0204__b14585505710">All databases</strong> or a specified database from the <strong id="dbss_01_0204__b1311513157720">Database</strong> drop-down list to view the statistics about all databases in the instance or a specified database.</li><li id="dbss_01_0204__li17214152618304">Select <strong id="dbss_01_0204__b153781741594">Last 30 minutes</strong>, <strong id="dbss_01_0204__b5811693910">1 hour</strong>, <strong id="dbss_01_0204__b242617121093">Today</strong>, <strong id="dbss_01_0204__b102491717913">7 days</strong>, or <strong id="dbss_01_0204__b13372920891">30 days</strong>, or click <span><img id="dbss_01_0204__image623063410010" src="en-us_image_0000001148018506.png"></span> to customize start time and end time to view the statistics of the specified time range.</li></ul>
|
<div class="section" id="dbss_01_0204__section16337113512514"><h4 class="sectiontitle">Procedure</h4><ol id="dbss_01_0204__ol8561155420380"><li id="dbss_01_0204__li1896224713913"><span>Log in to the management console.</span></li><li id="dbss_01_0204__li10800202815715"><span>Select a region, click <span><img id="dbss_01_0204__dbss_01_0186_image12421104763114" src="en-us_image_0000001074398929.png"></span>, and choose <span class="menucascade" id="dbss_01_0204__dbss_01_0186_menucascade1215612612394"><b><span class="uicontrol" id="dbss_01_0204__dbss_01_0186_uicontrol415682653911">Security</span></b> > <b><span class="uicontrol" id="dbss_01_0204__dbss_01_0186_uicontrol2156182620396">Database Security Service</span></b></span>. The <strong id="dbss_01_0204__dbss_01_0186_b6156926113915">Dashboard</strong> page is displayed.</span></li><li id="dbss_01_0204__li2020718217812"><span>In the <strong id="dbss_01_0204__b6578132315344">Instance</strong> drop-down list, select the instance whose audit information you want to view.</span></li><li id="dbss_01_0204__li56501633204913"><span>View the overall audit statistics, risk distribution, session statistics, and SQL distribution.</span><p><ul id="dbss_01_0204__ul9293658163018"><li id="dbss_01_0204__li1028161893016">Select <strong id="dbss_01_0204__b14585505710">All databases</strong> or a specified database from the <strong id="dbss_01_0204__b1311513157720">Database</strong> drop-down list to view the statistics about all databases in the instance or a specified database.</li><li id="dbss_01_0204__li17214152618304">Select <strong id="dbss_01_0204__b1821495112129">Last 30 minutes</strong>, <strong id="dbss_01_0204__b132141651151212">1 hour</strong>, <strong id="dbss_01_0204__b2215105113120">Today</strong>, <strong id="dbss_01_0204__b17215551151216">7 days</strong>, or <strong id="dbss_01_0204__b4215195161212">30 days</strong>, or click <span><img id="dbss_01_0204__image22151051131214" src="en-us_image_0000001148018506.png"></span> to customize start time and end time to view the statistics of the specified time range.</li></ul>
|
||||||
<div class="fignone" id="dbss_01_0204__fig077713432352"><span class="figcap"><b>Figure 1 </b>Viewing the audit statistics</span><br><span><img id="dbss_01_0204__image1935219111117" src="en-us_image_0000001293796118.png"></span></div>
|
<div class="fignone" id="dbss_01_0204__fig077713432352"><span class="figcap"><b>Figure 1 </b>Viewing the audit statistics</span><br><span><img id="dbss_01_0204__image1935219111117" src="en-us_image_0000001293796118.png"></span></div>
|
||||||
<div class="fignone" id="dbss_01_0204__fig11444449413"><span class="figcap"><b>Figure 2 </b>Risk distribution</span><br><span><img id="dbss_01_0204__image207866489584" src="en-us_image_0000001173095271.png"></span></div>
|
<div class="fignone" id="dbss_01_0204__fig11444449413"><span class="figcap"><b>Figure 2 </b>Risk distribution</span><br><span><img id="dbss_01_0204__image207866489584" src="en-us_image_0000001173095271.png"></span></div>
|
||||||
<div class="fignone" id="dbss_01_0204__fig842781211482"><span class="figcap"><b>Figure 3 </b>Session statistics</span><br><span><img id="dbss_01_0204__image1596162919592" src="en-us_image_0000001127059132.png"></span></div>
|
<div class="fignone" id="dbss_01_0204__fig842781211482"><span class="figcap"><b>Figure 3 </b>Session statistics</span><br><span><img id="dbss_01_0204__image1596162919592" src="en-us_image_0000001127059132.png"></span></div>
|
||||||
|
|||||||
@ -6,8 +6,7 @@
|
|||||||
|
|
||||||
</div>
|
</div>
|
||||||
<div class="section" id="dbss_01_0205__section16337113512514"><h4 class="sectiontitle">Procedure</h4><ol id="dbss_01_0205__ol8561155420380"><li id="dbss_01_0205__li1896224713913"><span>Log in to the management console.</span></li><li id="dbss_01_0205__li199221335798"><span>Select a region, click <span><img id="dbss_01_0205__dbss_01_0204_dbss_01_0186_image12421104763114" src="en-us_image_0000001074398929.png"></span>, and choose <span class="menucascade" id="dbss_01_0205__dbss_01_0204_dbss_01_0186_menucascade1215612612394"><b><span class="uicontrol" id="dbss_01_0205__dbss_01_0204_dbss_01_0186_uicontrol415682653911">Security</span></b> > <b><span class="uicontrol" id="dbss_01_0205__dbss_01_0204_dbss_01_0186_uicontrol2156182620396">Database Security Service</span></b></span>. The <strong id="dbss_01_0205__dbss_01_0204_dbss_01_0186_b6156926113915">Dashboard</strong> page is displayed.</span></li><li id="dbss_01_0205__li517404379"><span>In the navigation tree on the left, choose <span class="uicontrol" id="dbss_01_0205__uicontrol58079427133858"><b>Data Reports</b></span>. The <span class="wintitle" id="dbss_01_0205__wintitle99615821433858"><b>Data Reports</b></span> page is displayed.</span></li><li id="dbss_01_0205__li168521066525"><span>In the <strong id="dbss_01_0205__b993520346407">Instance</strong> drop-down list, select the instance whose SQL statement information you want to view.</span></li><li id="dbss_01_0205__li4174122125815"><span>Click the <strong id="dbss_01_0205__b1922342184017">Statements</strong> tab.</span></li><li id="dbss_01_0205__li4880132612226"><span>View SQL statement information.</span><p><div class="fignone" id="dbss_01_0205__fig78811126122218"><span class="figcap"><b>Figure 1 </b>Querying SQL statements</span><br><span><img id="dbss_01_0205__image93064119142" src="en-us_image_0000001294276970.png"></span></div>
|
<div class="section" id="dbss_01_0205__section16337113512514"><h4 class="sectiontitle">Procedure</h4><ol id="dbss_01_0205__ol8561155420380"><li id="dbss_01_0205__li1896224713913"><span>Log in to the management console.</span></li><li id="dbss_01_0205__li199221335798"><span>Select a region, click <span><img id="dbss_01_0205__dbss_01_0204_dbss_01_0186_image12421104763114" src="en-us_image_0000001074398929.png"></span>, and choose <span class="menucascade" id="dbss_01_0205__dbss_01_0204_dbss_01_0186_menucascade1215612612394"><b><span class="uicontrol" id="dbss_01_0205__dbss_01_0204_dbss_01_0186_uicontrol415682653911">Security</span></b> > <b><span class="uicontrol" id="dbss_01_0205__dbss_01_0204_dbss_01_0186_uicontrol2156182620396">Database Security Service</span></b></span>. The <strong id="dbss_01_0205__dbss_01_0204_dbss_01_0186_b6156926113915">Dashboard</strong> page is displayed.</span></li><li id="dbss_01_0205__li517404379"><span>In the navigation tree on the left, choose <span class="uicontrol" id="dbss_01_0205__uicontrol58079427133858"><b>Data Reports</b></span>. The <span class="wintitle" id="dbss_01_0205__wintitle99615821433858"><b>Data Reports</b></span> page is displayed.</span></li><li id="dbss_01_0205__li168521066525"><span>In the <strong id="dbss_01_0205__b993520346407">Instance</strong> drop-down list, select the instance whose SQL statement information you want to view.</span></li><li id="dbss_01_0205__li4174122125815"><span>Click the <strong id="dbss_01_0205__b1922342184017">Statements</strong> tab.</span></li><li id="dbss_01_0205__li4880132612226"><span>View SQL statement information.</span><p><div class="fignone" id="dbss_01_0205__fig78811126122218"><span class="figcap"><b>Figure 1 </b>Querying SQL statements</span><br><span><img id="dbss_01_0205__image93064119142" src="en-us_image_0000001294276970.png"></span></div>
|
||||||
<p id="dbss_01_0205__p1588120267221">To query a specified SQL statement, perform the following steps:</p>
|
<ul id="dbss_01_0205__ul288192602216"><li id="dbss_01_0205__li1988232622210"><div class="p" id="dbss_01_0205__p953010369711"><a name="dbss_01_0205__li1988232622210"></a><a name="li1988232622210"></a><div class="note" id="dbss_01_0205__note1111242193316"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="dbss_01_0205__p212144223319">A maximum of 10,000 records can be retrieved in a query.</p>
|
||||||
<ul id="dbss_01_0205__ul288192602216"><li id="dbss_01_0205__li17881152616226">Select <strong id="dbss_01_0205__b655917154292">All</strong>, <strong id="dbss_01_0205__b35591015112916">Last 30 minutes</strong>, <strong id="dbss_01_0205__b1555931592919">1 hour</strong>, <strong id="dbss_01_0205__b5559181562915">24 hours</strong>, <strong id="dbss_01_0205__b95591815102915">7 days</strong>, or <strong id="dbss_01_0205__b75597155294">30 days</strong> for <strong id="dbss_01_0205__b195606151290">Time</strong> and click <span><img id="dbss_01_0205__image456081518293" src="en-us_image_0000001625668645.png"></span> to view SQL statements of the specified time range.</li><li id="dbss_01_0205__li1988232622210">Select <strong id="dbss_01_0205__b273084591413">All</strong>, <strong id="dbss_01_0205__b13256184815146">High</strong>, <strong id="dbss_01_0205__b14784758141417">Moderate</strong>, <strong id="dbss_01_0205__b142831821151">Low</strong>, or <strong id="dbss_01_0205__b498519920159">Trusted</strong> for <strong id="dbss_01_0205__b1410613010157">Risk Severity</strong> and click <span><img id="dbss_01_0205__image14453822579" src="en-us_image_0000001626494753.png"></span>. SQL statements of specified severity are displayed in the list.<div class="p" id="dbss_01_0205__p953010369711"><div class="note" id="dbss_01_0205__note1111242193316"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="dbss_01_0205__p212144223319">A maximum of 10,000 records can be retrieved in a query.</p>
|
|
||||||
</div></div>
|
</div></div>
|
||||||
</div>
|
</div>
|
||||||
</li></ul>
|
</li></ul>
|
||||||
|
|||||||
@ -3,7 +3,7 @@
|
|||||||
<h1 class="topictitle1">How Do I Back Up the Database Audit Logs?</h1>
|
<h1 class="topictitle1">How Do I Back Up the Database Audit Logs?</h1>
|
||||||
<div id="body1544666186153"><p id="dbss_01_0226__p18174105916405">Database audit supports manual backup and automatic backup. Audit logs are backed up to OBS. Buckets will be automatically created and will incur a separate bill.</p>
|
<div id="body1544666186153"><p id="dbss_01_0226__p18174105916405">Database audit supports manual backup and automatic backup. Audit logs are backed up to OBS. Buckets will be automatically created and will incur a separate bill.</p>
|
||||||
<p id="dbss_01_0226__p19970016192810">Perform the following operations to automatically back up audit logs.</p>
|
<p id="dbss_01_0226__p19970016192810">Perform the following operations to automatically back up audit logs.</p>
|
||||||
<div class="section" id="dbss_01_0226__section117835520294"><h4 class="sectiontitle">Automatically Backing Up Database Audit Logs</h4><ol id="dbss_01_0226__en-us_topic_0145057228_ol18449141653"><li id="dbss_01_0226__en-us_topic_0145057228_li1829112494372"><span>Log in to the management console.</span></li><li id="dbss_01_0226__en-us_topic_0145057228_li1723651814598"><span>In the navigation tree on the left, choose <strong id="dbss_01_0226__en-us_topic_0145057228_b1432475172820">Settings</strong>.</span></li><li id="dbss_01_0226__en-us_topic_0145057228_li6202174705919"><span>In the <strong id="dbss_01_0226__en-us_topic_0145057228_b2218329102913">Instance</strong> drop-down list, select the required instance and click the <strong id="dbss_01_0226__en-us_topic_0145057228_b1098142173015">Backup and Restoration</strong> tab.</span></li><li id="dbss_01_0226__en-us_topic_0145057228_li1859172013308"><span>Click <strong id="dbss_01_0226__en-us_topic_0145057228_b203402020155415">Set Automated Backup</strong>. In the displayed dialog box, set the auto backup parameters. <a href="#dbss_01_0226__en-us_topic_0145057228_table18602206309">Table 1</a> describes the parameters. </span><p><div class="fignone" id="dbss_01_0226__en-us_topic_0145057228_fig559320113012"><span class="figcap"><b>Figure 1 </b>Configure Automatic Backup dialog box</span><br><span><img id="dbss_01_0226__en-us_topic_0145057228_image18589115017461" src="en-us_image_0000001294284718.png"></span></div>
|
<div class="section" id="dbss_01_0226__section117835520294"><h4 class="sectiontitle">Automatically Backing Up Database Audit Logs</h4><ol id="dbss_01_0226__en-us_topic_0145057228_ol18449141653"><li id="dbss_01_0226__en-us_topic_0145057228_li1829112494372"><span>Log in to the management console.</span></li><li id="dbss_01_0226__en-us_topic_0145057228_li1723651814598"><span>In the navigation tree on the left, choose <strong id="dbss_01_0226__en-us_topic_0145057228_b1432475172820">Settings</strong>.</span></li><li id="dbss_01_0226__en-us_topic_0145057228_li6202174705919"><span>In the <strong id="dbss_01_0226__en-us_topic_0145057228_b2218329102913">Instance</strong> drop-down list, select the required instance and click the <strong id="dbss_01_0226__en-us_topic_0145057228_b1098142173015">Backup and Restoration</strong> tab.</span></li><li id="dbss_01_0226__en-us_topic_0145057228_li1859172013308"><span>Click <strong id="dbss_01_0226__en-us_topic_0145057228_b089617522219">Set Automated Backup</strong>. In the displayed dialog box, set the auto backup parameters. <a href="#dbss_01_0226__en-us_topic_0145057228_table18602206309">Table 1</a> describes the parameters. </span><p><div class="fignone" id="dbss_01_0226__en-us_topic_0145057228_fig559320113012"><span class="figcap"><b>Figure 1 </b>Configure Automatic Backup dialog box</span><br><span><img id="dbss_01_0226__en-us_topic_0145057228_image18589115017461" src="en-us_image_0000001294284718.png"></span></div>
|
||||||
|
|
||||||
<div class="tablenoborder"><a name="dbss_01_0226__en-us_topic_0145057228_table18602206309"></a><a name="en-us_topic_0145057228_table18602206309"></a><table cellpadding="4" cellspacing="0" summary="" id="dbss_01_0226__en-us_topic_0145057228_table18602206309" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameters</caption><thead align="left"><tr id="dbss_01_0226__en-us_topic_0145057228_row66082019309"><th align="left" class="cellrowborder" valign="top" width="21%" id="mcps1.3.3.2.4.2.2.2.4.1.1"><p id="dbss_01_0226__en-us_topic_0145057228_p1660112023010">Parameter</p>
|
<div class="tablenoborder"><a name="dbss_01_0226__en-us_topic_0145057228_table18602206309"></a><a name="en-us_topic_0145057228_table18602206309"></a><table cellpadding="4" cellspacing="0" summary="" id="dbss_01_0226__en-us_topic_0145057228_table18602206309" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameters</caption><thead align="left"><tr id="dbss_01_0226__en-us_topic_0145057228_row66082019309"><th align="left" class="cellrowborder" valign="top" width="21%" id="mcps1.3.3.2.4.2.2.2.4.1.1"><p id="dbss_01_0226__en-us_topic_0145057228_p1660112023010">Parameter</p>
|
||||||
</th>
|
</th>
|
||||||
|
|||||||
@ -2,7 +2,7 @@
|
|||||||
|
|
||||||
<h1 class="topictitle1">How Do I View All Alarms in Database Audit?</h1>
|
<h1 class="topictitle1">How Do I View All Alarms in Database Audit?</h1>
|
||||||
<div id="body1545297742259"><p id="dbss_01_0234__p8060118">To check the alarms of database audit, perform the following steps:</p>
|
<div id="body1545297742259"><p id="dbss_01_0234__p8060118">To check the alarms of database audit, perform the following steps:</p>
|
||||||
<ol id="dbss_01_0234__ol3976165912213"><li id="dbss_01_0234__li1896224713913"><span>Log in to the management console.</span></li><li id="dbss_01_0234__li4990487358"><span id="dbss_01_0234__p1983613271494">To query specified alarms, perform the following steps:</span><p><ul id="dbss_01_0234__dbss_01_0252_ul1149562962616"><li id="dbss_01_0234__dbss_01_0252_li174951829102614">Select <strong id="dbss_01_0234__dbss_01_0252_b9987155142420">Last 30 minutes</strong>, <strong id="dbss_01_0234__dbss_01_0252_b1679416565247">1 hour</strong>, <strong id="dbss_01_0234__dbss_01_0252_b6251152252">24 hours</strong>, <strong id="dbss_01_0234__dbss_01_0252_b119871276255">7 days</strong>, or <strong id="dbss_01_0234__dbss_01_0252_b121311118257">30 days</strong> from the drop-down list, and click <span><img id="dbss_01_0234__dbss_01_0252_image167968241613" src="en-us_image_0000001575677796.png"></span> to view alarms of the specified time range.</li><li id="dbss_01_0234__dbss_01_0252_li204961629132617">Select <strong id="dbss_01_0234__dbss_01_0252_b1075116454468">All</strong>, <strong id="dbss_01_0234__dbss_01_0252_b675224510461">High</strong>, <strong id="dbss_01_0234__dbss_01_0252_b1175214456463">Moderate</strong>, or <strong id="dbss_01_0234__dbss_01_0252_b167532454463">Low</strong> for <strong id="dbss_01_0234__dbss_01_0252_b8753144514461">Risk Severity</strong>. Alarms of specified severity are displayed in the list.</li><li id="dbss_01_0234__dbss_01_0252_li13496729152615">Select an alarm type, and alarms of specified alarm type is displayed in the list.</li></ul>
|
<ol id="dbss_01_0234__ol3976165912213"><li id="dbss_01_0234__li1896224713913"><span>Log in to the management console.</span></li><li id="dbss_01_0234__li4990487358"><span id="dbss_01_0234__p1983613271494">To query specified alarms, perform the following steps:</span><p><ul id="dbss_01_0234__dbss_01_0252_ul1149562962616"><li id="dbss_01_0234__dbss_01_0252_li174951829102614">Select <strong id="dbss_01_0234__b1179424335014">Last 30 minutes</strong>, <strong id="dbss_01_0234__b15794154311507">1 hour</strong>, <strong id="dbss_01_0234__b1779494319500">24 hours</strong>, <strong id="dbss_01_0234__b10794144311504">7 days</strong>, or <strong id="dbss_01_0234__b4794184395018">30 days</strong> from the drop-down list, and click <span><img id="dbss_01_0234__dbss_01_0252_image167968241613" src="en-us_image_0000002291173653.png"></span> to view alarms of the specified time range.</li><li id="dbss_01_0234__dbss_01_0252_li204961629132617">Select <strong id="dbss_01_0234__b162671719142717">All</strong>, <strong id="dbss_01_0234__b18267519132713">High</strong>, <strong id="dbss_01_0234__b1026791915277">Moderate</strong>, or <strong id="dbss_01_0234__b19267111910273">Low</strong> for <strong id="dbss_01_0234__b112679197271">Risk Severity</strong>. Alarms of specified severity are displayed in the list.</li><li id="dbss_01_0234__dbss_01_0252_li13496729152615">Select an alarm type, and alarms of specified alarm type is displayed in the list.</li></ul>
|
||||||
</p></li></ol>
|
</p></li></ol>
|
||||||
</div>
|
</div>
|
||||||
<div>
|
<div>
|
||||||
|
|||||||
@ -5,7 +5,7 @@
|
|||||||
<p id="dbss_01_0235__p133740292293">In this case, perform the following operations to troubleshoot the problem:</p>
|
<p id="dbss_01_0235__p133740292293">In this case, perform the following operations to troubleshoot the problem:</p>
|
||||||
<ul id="dbss_01_0235__ul125631048143312"><li id="dbss_01_0235__li9563144816332"><a href="#dbss_01_0235__section8232320142510">Checking Database Information and Audit Function Settings</a></li><li id="dbss_01_0235__li12299591336"><a href="#dbss_01_0235__section1815818210314">Checking Audited Database Settings</a></li><li id="dbss_01_0235__li177281613413"><a href="#dbss_01_0235__section439162819315">Checking Database Agent Status</a></li><li id="dbss_01_0235__li538318241347"><a href="#dbss_01_0235__section20936182118324">Checking the Security Group Rules of the Database Audit Instance</a></li></ul>
|
<ul id="dbss_01_0235__ul125631048143312"><li id="dbss_01_0235__li9563144816332"><a href="#dbss_01_0235__section8232320142510">Checking Database Information and Audit Function Settings</a></li><li id="dbss_01_0235__li12299591336"><a href="#dbss_01_0235__section1815818210314">Checking Audited Database Settings</a></li><li id="dbss_01_0235__li177281613413"><a href="#dbss_01_0235__section439162819315">Checking Database Agent Status</a></li><li id="dbss_01_0235__li538318241347"><a href="#dbss_01_0235__section20936182118324">Checking the Security Group Rules of the Database Audit Instance</a></li></ul>
|
||||||
</div>
|
</div>
|
||||||
<div class="section" id="dbss_01_0235__section8232320142510"><a name="dbss_01_0235__section8232320142510"></a><a name="section8232320142510"></a><h4 class="sectiontitle">Checking Database Information and Audit Function Settings</h4><ol id="dbss_01_0235__ol19428205443415"><li id="dbss_01_0235__li1896224713913"><span>Log in to the management console.</span></li><li id="dbss_01_0235__li62917254391"><span>Check whether the database information is correct.</span><p><ul id="dbss_01_0235__ul57626357389"><li id="dbss_01_0235__li20762135143813">If the database information is correct, go to <a href="#dbss_01_0235__li941038153911">3</a>.</li><li id="dbss_01_0235__li1762335143810">If the database information is incorrect, click <strong id="dbss_01_0235__b1289185919195">Delete</strong> to delete the database, and then click <strong id="dbss_01_0235__b108928596194">Add Database</strong> to add the database again.<ul id="dbss_01_0235__ul976223513810"><li id="dbss_01_0235__li77621359383">If the fault is rectified, no further operation is required.</li><li id="dbss_01_0235__li7762203513810">If the problem persists, go to <a href="#dbss_01_0235__li941038153911">3</a>.</li></ul>
|
<div class="section" id="dbss_01_0235__section8232320142510"><a name="dbss_01_0235__section8232320142510"></a><a name="section8232320142510"></a><h4 class="sectiontitle">Checking Database Information and Audit Function Settings</h4><ol id="dbss_01_0235__ol19428205443415"><li id="dbss_01_0235__li1896224713913"><span>Log in to the management console.</span></li><li id="dbss_01_0235__li10761161110533"><span>Select a region, click <span><img id="dbss_01_0235__dbss_01_0186_image12421104763114" src="en-us_image_0000001074398929.png"></span>, and choose <span class="menucascade" id="dbss_01_0235__dbss_01_0186_menucascade1215612612394"><b><span class="uicontrol" id="dbss_01_0235__dbss_01_0186_uicontrol415682653911">Security</span></b> > <b><span class="uicontrol" id="dbss_01_0235__dbss_01_0186_uicontrol2156182620396">Database Security Service</span></b></span>. The <strong id="dbss_01_0235__dbss_01_0186_b6156926113915">Dashboard</strong> page is displayed.</span></li><li id="dbss_01_0235__li174304541364"><span>In the navigation tree on the left, choose <strong id="dbss_01_0235__b10912153281313">Databases</strong>.</span></li><li id="dbss_01_0235__li147246523913"><span>View the database information.</span></li><li id="dbss_01_0235__li62917254391"><span>Check whether the database information is correct.</span><p><ul id="dbss_01_0235__ul57626357389"><li id="dbss_01_0235__li20762135143813">If the database information is correct, go to <a href="#dbss_01_0235__li941038153911">6</a>.</li><li id="dbss_01_0235__li1762335143810">If the database information is incorrect, click <strong id="dbss_01_0235__b1289185919195">Delete</strong> to delete the database, and then click <strong id="dbss_01_0235__b108928596194">Add Database</strong> to add the database again.<ul id="dbss_01_0235__ul976223513810"><li id="dbss_01_0235__li77621359383">If the fault is rectified, no further operation is required.</li><li id="dbss_01_0235__li7762203513810">If the problem persists, go to <a href="#dbss_01_0235__li941038153911">6</a>.</li></ul>
|
||||||
</li></ul>
|
</li></ul>
|
||||||
</p></li><li id="dbss_01_0235__li941038153911"><a name="dbss_01_0235__li941038153911"></a><a name="li941038153911"></a><span>Check whether the database audit function is enabled.</span><p><ul id="dbss_01_0235__ul5763435133814"><li id="dbss_01_0235__li276314359382">If <strong id="dbss_01_0235__b382782911225">Audit Status</strong> is <strong id="dbss_01_0235__b1832329142217">Enabled</strong>, go to <a href="#dbss_01_0235__section1815818210314">Checking Audited Database Settings</a>.</li><li id="dbss_01_0235__li97631835123819">If <strong id="dbss_01_0235__b149091720238">Audit Status</strong> is <strong id="dbss_01_0235__b149097792314">Disabled</strong>, click <strong id="dbss_01_0235__b6910187122315">Enable</strong> to enable the database audit function.<ul id="dbss_01_0235__ul17763143533816"><li id="dbss_01_0235__li27631535183811">If the fault is rectified, no further operation is required.</li><li id="dbss_01_0235__li13763183503814">If the problem persists, go to <a href="#dbss_01_0235__section1815818210314">Checking Audited Database Settings</a>.</li></ul>
|
</p></li><li id="dbss_01_0235__li941038153911"><a name="dbss_01_0235__li941038153911"></a><a name="li941038153911"></a><span>Check whether the database audit function is enabled.</span><p><ul id="dbss_01_0235__ul5763435133814"><li id="dbss_01_0235__li276314359382">If <strong id="dbss_01_0235__b382782911225">Audit Status</strong> is <strong id="dbss_01_0235__b1832329142217">Enabled</strong>, go to <a href="#dbss_01_0235__section1815818210314">Checking Audited Database Settings</a>.</li><li id="dbss_01_0235__li97631835123819">If <strong id="dbss_01_0235__b149091720238">Audit Status</strong> is <strong id="dbss_01_0235__b149097792314">Disabled</strong>, click <strong id="dbss_01_0235__b6910187122315">Enable</strong> to enable the database audit function.<ul id="dbss_01_0235__ul17763143533816"><li id="dbss_01_0235__li27631535183811">If the fault is rectified, no further operation is required.</li><li id="dbss_01_0235__li13763183503814">If the problem persists, go to <a href="#dbss_01_0235__section1815818210314">Checking Audited Database Settings</a>.</li></ul>
|
||||||
</li></ul>
|
</li></ul>
|
||||||
|
|||||||
@ -36,7 +36,7 @@
|
|||||||
</tr>
|
</tr>
|
||||||
<tr id="dbss_01_0252__row1666214161896"><td class="cellrowborder" valign="top" width="17%" headers="mcps1.3.3.2.3.2.2.2.3.1.1 "><p id="dbss_01_0252__p9663171613916">Confirmed Or Not</p>
|
<tr id="dbss_01_0252__row1666214161896"><td class="cellrowborder" valign="top" width="17%" headers="mcps1.3.3.2.3.2.2.2.3.1.1 "><p id="dbss_01_0252__p9663171613916">Confirmed Or Not</p>
|
||||||
</td>
|
</td>
|
||||||
<td class="cellrowborder" valign="top" width="83%" headers="mcps1.3.3.2.3.2.2.2.3.1.2 "><p id="dbss_01_0252__p1666371620915">Confirmation status of an alarm. Click <span><img id="dbss_01_0252__image733125633810" src="en-us_image_0214600463.png"></span> to filter alarms in <strong id="dbss_01_0252__b45531415422">Unconfirmed</strong> or <strong id="dbss_01_0252__b756353194215">Confirmed</strong> state.</p>
|
<td class="cellrowborder" valign="top" width="83%" headers="mcps1.3.3.2.3.2.2.2.3.1.2 "><p id="dbss_01_0252__p1666371620915">Confirmation status of an alarm. </p>
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
<tr id="dbss_01_0252__row1839683313910"><td class="cellrowborder" valign="top" width="17%" headers="mcps1.3.3.2.3.2.2.2.3.1.1 "><p id="dbss_01_0252__p639612334919">Description</p>
|
<tr id="dbss_01_0252__row1839683313910"><td class="cellrowborder" valign="top" width="17%" headers="mcps1.3.3.2.3.2.2.2.3.1.1 "><p id="dbss_01_0252__p639612334919">Description</p>
|
||||||
@ -47,8 +47,6 @@
|
|||||||
</tbody>
|
</tbody>
|
||||||
</table>
|
</table>
|
||||||
</div>
|
</div>
|
||||||
<div class="p" id="dbss_01_0252__p1553584417558">To query specified alarms, perform the following steps:<ul id="dbss_01_0252__ul1149562962616"><li id="dbss_01_0252__li174951829102614">Select <strong id="dbss_01_0252__b9987155142420">Last 30 minutes</strong>, <strong id="dbss_01_0252__b1679416565247">1 hour</strong>, <strong id="dbss_01_0252__b6251152252">24 hours</strong>, <strong id="dbss_01_0252__b119871276255">7 days</strong>, or <strong id="dbss_01_0252__b121311118257">30 days</strong> from the drop-down list, and click <span><img id="dbss_01_0252__image167968241613" src="en-us_image_0000001575677796.png"></span> to view alarms of the specified time range.</li><li id="dbss_01_0252__li204961629132617">Select <strong id="dbss_01_0252__b1075116454468">All</strong>, <strong id="dbss_01_0252__b675224510461">High</strong>, <strong id="dbss_01_0252__b1175214456463">Moderate</strong>, or <strong id="dbss_01_0252__b167532454463">Low</strong> for <strong id="dbss_01_0252__b8753144514461">Risk Severity</strong>. Alarms of specified severity are displayed in the list.</li><li id="dbss_01_0252__li13496729152615">Select an alarm type, and alarms of specified alarm type is displayed in the list.</li></ul>
|
|
||||||
</div>
|
|
||||||
</p></li></ol>
|
</p></li></ol>
|
||||||
</div>
|
</div>
|
||||||
<div class="section" id="dbss_01_0252__section030712235511"><h4 class="sectiontitle">Follow-Up Procedure</h4><div class="p" id="dbss_01_0252__p58451054135516"><div class="note" id="dbss_01_0252__note726013364559"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="dbss_01_0252__p162601036125513">You can select multiple alarms to be confirmed and click <strong id="dbss_01_0252__b265185591015">Batch Confirm</strong> to batch confirm alarms.</p>
|
<div class="section" id="dbss_01_0252__section030712235511"><h4 class="sectiontitle">Follow-Up Procedure</h4><div class="p" id="dbss_01_0252__p58451054135516"><div class="note" id="dbss_01_0252__note726013364559"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="dbss_01_0252__p162601036125513">You can select multiple alarms to be confirmed and click <strong id="dbss_01_0252__b265185591015">Batch Confirm</strong> to batch confirm alarms.</p>
|
||||||
|
|||||||
@ -2,10 +2,7 @@
|
|||||||
|
|
||||||
<h1 class="topictitle1">Auditing an RDS DB Instance (Without Agents)</h1>
|
<h1 class="topictitle1">Auditing an RDS DB Instance (Without Agents)</h1>
|
||||||
<div id="body8662426"><div class="section" id="dbss_06_0020__en-us_topic_0000001438668561_section921711138525"><h4 class="sectiontitle">Overview</h4><p id="dbss_06_0020__en-us_topic_0000001438668561_p1761614631710">This section describes how to audit the security of a relational database instance. (Applications connected to this DB instance are deployed on ECS.) DBSS can audit certain types of relational databases without installing agents.</p>
|
<div id="body8662426"><div class="section" id="dbss_06_0020__en-us_topic_0000001438668561_section921711138525"><h4 class="sectiontitle">Overview</h4><p id="dbss_06_0020__en-us_topic_0000001438668561_p1761614631710">This section describes how to audit the security of a relational database instance. (Applications connected to this DB instance are deployed on ECS.) DBSS can audit certain types of relational databases without installing agents.</p>
|
||||||
<ul id="dbss_06_0020__en-us_topic_0000001438668561_ul18625144274212"><li id="dbss_06_0020__en-us_topic_0000001438668561_li562534274216"> </li></ul>
|
|
||||||
<div class="note" id="dbss_06_0020__en-us_topic_0000001438668561_note37158149344"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="dbss_06_0020__en-us_topic_0000001438668561_ul4313105418360"><li id="dbss_06_0020__en-us_topic_0000001438668561_li1887763545">DBSS without agents is easy to configure and use, but the following functions are not supported:<ul id="dbss_06_0020__en-us_topic_0000001438668561_ul1344181055413"><li id="dbss_06_0020__en-us_topic_0000001438668561_li16313754133614">Successful and failed login sessions cannot be counted.</li><li id="dbss_06_0020__en-us_topic_0000001438668561_li115681539203914">The port number of the client for accessing the database cannot be obtained.</li></ul>
|
|
||||||
</li><li id="dbss_06_0020__en-us_topic_0000001438668561_li526881565413">GaussDB(DWS) has the permission control policy for the log audit function. Only accounts and users with the <strong id="dbss_06_0020__en-us_topic_0000001438668561_b7976103894318">Security Administrator</strong> permission can enable or disable the DWS database audit function.</li><li id="dbss_06_0020__en-us_topic_0000001438668561_li1141810349569">By default, DDL is disabled in GaussDB. You need to enable it by referring to the GaussDB user manual (audit_system_object = 130023423). In addition, ensure that the date format is yyyy-MM-dd HH:mm: ss+Z (datastyle=ISO,YMD) .</li></ul>
|
|
||||||
</div></div>
|
|
||||||
</div>
|
</div>
|
||||||
<div class="section" id="dbss_06_0020__en-us_topic_0000001438668561_section687975712555"><h4 class="sectiontitle">Solution Architecture</h4><p id="dbss_06_0020__en-us_topic_0000001438668561_p15908312198">The DBSS instance receives the logs sent from databases, such as certain GaussDB(for MySQL) or RDS for MySQL versions, and saves the logs to its log library for security analysis, aggregation statistics, and compliance analysis.</p>
|
<div class="section" id="dbss_06_0020__en-us_topic_0000001438668561_section687975712555"><h4 class="sectiontitle">Solution Architecture</h4><p id="dbss_06_0020__en-us_topic_0000001438668561_p15908312198">The DBSS instance receives the logs sent from databases, such as certain GaussDB(for MySQL) or RDS for MySQL versions, and saves the logs to its log library for security analysis, aggregation statistics, and compliance analysis.</p>
|
||||||
<div class="fignone" id="dbss_06_0020__en-us_topic_0000001438668561_fig181911021314"><span class="figcap"><b>Figure 1 </b>Auditing an RDS DB instance (without agents)</span><br><span><img id="dbss_06_0020__en-us_topic_0000001438668561_image81910213312" src="en-us_image_0000001438417909.png"></span></div>
|
<div class="fignone" id="dbss_06_0020__en-us_topic_0000001438668561_fig181911021314"><span class="figcap"><b>Figure 1 </b>Auditing an RDS DB instance (without agents)</span><br><span><img id="dbss_06_0020__en-us_topic_0000001438668561_image81910213312" src="en-us_image_0000001438417909.png"></span></div>
|
||||||
|
|||||||
Binary file not shown.
|
Before Width: | Height: | Size: 500 B |
Binary file not shown.
|
Before Width: | Height: | Size: 500 B |
|
Before Width: | Height: | Size: 443 B After Width: | Height: | Size: 443 B |
Binary file not shown.
|
Before Width: | Height: | Size: 406 B |
Reference in New Issue
Block a user