IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

Guardium V12 - REGEX Groups in Queries

  • 1.  Guardium V12 - REGEX Groups in Queries

    Posted Wed August 28, 2024 03:21 AM
    Edited by Russell Petersen Wed August 28, 2024 03:37 AM

    I have been building a report for a DataMart on V12 and I have been using the new feature which is incorporates REGEX into the group

    I have a group defined [SERVER IP RANGE] and the members are:

    GUARDIUM://REGEXP/^10\.(5|6|7)\.(25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])\.(25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])$

    GUARDIUM://REGEXP/^172\.12\.(25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])\.(25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])$

    and then use it in the report as:
    The generated query  is

    AND ( ( GDM_ACCESS.CLIENT_IP Not In ( select G_1_20759.GROUP_MEMBER from GROUP_MEMBER G_1_20759 where G_1_20759.GROUP_ID = 20759 ) )

     
    Which I don't think works 

    I would expect to see something similar to REGEXP_LIKE(value, 'REGEXP')

    Does anyone have it working this working in a group?

    At the moment I get around this by having to define each range in the query conditions.

    However, this is not ideal when creating a DataMart because it does not allow me to dynamically change the DATAMART Query based on a group.

    If anyone is using this successfully, I would be very interested in understanding your method.

    REGEXP_LIKE is not part of the Query Condition options.



    ------------------------------
    Russell Petersen
    ------------------------------