IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

Failed SQLs Attribute of Access Period Entity not showing counts of Unsuccessful SQLs

  • 1.  Failed SQLs Attribute of Access Period Entity not showing counts of Unsuccessful SQLs

    Posted Thu August 19, 2021 04:02 AM
    Hello Experts, Hope all is well.

    We have a Report where we are capturing Full SQL and also added "Successful Sqls" / "Failed Sqls" - Attributed of "Access Period" Entity. 

    However, it seems not to be working because if user's SQL Statement gets failed due to user permission OR Syntax Error. the "Failed Sqls" - Attributed of "Access Period" Entity - showing zero(0) value despite of Failed SQL. 

    Request if  anyone can explain this - I mean how this will work OR how these "Successful Sqls" / "Failed Sqls" - Attributed of "Access Period" Entity are working together. Many thanks in advance. Stay Safe.


  • 2.  RE: Failed SQLs Attribute of Access Period Entity not showing counts of Unsuccessful SQLs

    Posted Sun August 22, 2021 08:40 PM
    Hi Akashkumar,

    The sql with syntax error won't be recorded in SQL.  But you can find them in exception("SQL string that caused the exception" field). Hope it helps.

    ------------------------------
    Jonathan LU
    Security Support Engineer
    IBM
    ------------------------------

    Original Message


  • 3.  RE: Failed SQLs Attribute of Access Period Entity not showing counts of Unsuccessful SQLs

    Posted Wed September 08, 2021 07:49 AM
    Hello Jonathan, Hope all is well.

    Thank you for your valuable reply. however, can you tell me if user doesn't have the permission on the database and still execute the SQL Statement , then, will it be captured in exception("SQL string that caused the exception" field).

    Also, If we need to prepare report on another different Domain\Entity then why there is a Attributed of "Failed SQL" , "Successful SQL" in Access Domain if these are not showing us the accurate data. thank you.


  • 4.  RE: Failed SQLs Attribute of Access Period Entity not showing counts of Unsuccessful SQLs

    Posted Thu September 09, 2021 05:39 AM
    Hi Akashkumar,

    If db_ignore_response is set it maybe possible Failed Sqls count is ignored.

    These will not be ignored:
    • User doesn't have the permission on the database - This results in SQL Error.
    • SQL Syntax Error - This is another SQL Error.
    If you're able to reproduce the issue please raise a support ticket to investigate.


    Demi

    ------------------------------
    DEMI SIEW PING LEE
    ------------------------------

    Original Message