Hi team,

Wanted to know if there is any predefined alert or report available for the below requirement in case of any DML modification made to database tables, we want alert or either report to see who has accessed this tables and what action has been taken, we want all this info. We tried through alert builder for working on this as well as through report, but did not able to find this.

Below is the requirement :
We wanted to setup alerts or report in DAM to notify in case of any change to the database tables.
For ex- We wanted to alert to user whenever if any DML activity occurs on table, irrrespective of no criteria. We have already DML rule defined in the policy but tried certain reports but still it did not fetching correct data.

Let me know your inputs on same how to achieve this. Also please your support on how to view all DBs tables and schemas in Guardium.
Appreciate any response on this. 

Regards, AB

Ankeet,
There are smart assistants to help you get started with basics.
You can use Guardium delivered groups like "Sensitive Objects" or "SAP related object groups" or one of the 70+ OOTB Object groups.
Then you can create a query or clone a report like Sensitive Objects Usage and add more columns if you like.
You will need to add the DML commands group to the query as another condition to be more specific in what you want to alert/report on. 
The alerting mechanism depends really on the delivery you prefer like Syslog or email. My recommendation is to create a count of timestamp field so the Alert Builder can have a threshold to determine when it has some records to report based upon the count.  
Or you can use and Audit Process to email the contents or link using the same query.
If you have the DML handled in the policy, you can add the object group in the SQL criteria as well if you want to send those in real-time to your SIEM.
It really depends on how fast and what you want to do with the logs when the actions occur.
I hope this helps to get you started.
Jennifer

------------------------------
Jennifer Dodson
Data Protection Managed Services
Converge Technology Solutions Corp.
Formerly Information Insights LLC
_____________
m: 469.502.8850
convergetp.com | Jennifer.Dodson@convergetp.com

Original Message:
Sent: Sun May 14, 2023 06:12 AM
From: Ankeet Buradkar
Subject: Alert / Report required to notify in case of any DML changes made in database table

Hi team,

Wanted to know if there is any predefined alert or report available for the below requirement in case of any DML modification made to database tables, we want alert or either report to see who has accessed this tables and what action has been taken, we want all this info. We tried through alert builder for working on this as well as through report, but did not able to find this.

Below is the requirement :
We wanted to setup alerts or report in DAM to notify in case of any change to the database tables.
For ex- We wanted to alert to user whenever if any DML activity occurs on table, irrrespective of no criteria. We have already DML rule defined in the policy but tried certain reports but still it did not fetching correct data.

Let me know your inputs on same how to achieve this. Also please your support on how to view all DBs tables and schemas in Guardium.
Appreciate any response on this. 

Regards, AB

------------------------------
A B
------------------------------

Hi Jennifer, Thanks for your detailed explanation. It will help me to get started on this to figure this. However, I would appreciate if you could send certain document containing certain practical information, like certain screenshots, demonstrating process, etc. Wanted to know your past experience if you work on it. Let me know if it possible. Thanks

------------------------------
Ankeet Buradkar

Original Message:
Sent: Tue May 16, 2023 01:59 PM
From: Jennifer Dodson
Subject: Alert / Report required to notify in case of any DML changes made in database table

Ankeet,
There are smart assistants to help you get started with basics.
You can use Guardium delivered groups like "Sensitive Objects" or "SAP related object groups" or one of the 70+ OOTB Object groups.
Then you can create a query or clone a report like Sensitive Objects Usage and add more columns if you like.
You will need to add the DML commands group to the query as another condition to be more specific in what you want to alert/report on. 
The alerting mechanism depends really on the delivery you prefer like Syslog or email. My recommendation is to create a count of timestamp field so the Alert Builder can have a threshold to determine when it has some records to report based upon the count.  
Or you can use and Audit Process to email the contents or link using the same query.
If you have the DML handled in the policy, you can add the object group in the SQL criteria as well if you want to send those in real-time to your SIEM.
It really depends on how fast and what you want to do with the logs when the actions occur.
I hope this helps to get you started.
Jennifer

------------------------------
Jennifer Dodson
Data Protection Managed Services
Converge Technology Solutions Corp.
Formerly Information Insights LLC
_____________
m: 469.502.8850
convergetp.com | Jennifer.Dodson@convergetp.com

Original Message:
Sent: Sun May 14, 2023 06:12 AM
From: Ankeet Buradkar
Subject: Alert / Report required to notify in case of any DML changes made in database table

Hi team,

Wanted to know if there is any predefined alert or report available for the below requirement in case of any DML modification made to database tables, we want alert or either report to see who has accessed this tables and what action has been taken, we want all this info. We tried through alert builder for working on this as well as through report, but did not able to find this.

Below is the requirement :
We wanted to setup alerts or report in DAM to notify in case of any change to the database tables.
For ex- We wanted to alert to user whenever if any DML activity occurs on table, irrrespective of no criteria. We have already DML rule defined in the policy but tried certain reports but still it did not fetching correct data.

Let me know your inputs on same how to achieve this. Also please your support on how to view all DBs tables and schemas in Guardium.
Appreciate any response on this. 

Regards, AB

------------------------------
A B
------------------------------