IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  MongoDB integration || Not receiving logs

    Posted Thu March 30, 2023 01:44 AM

    Hi all,

    I have Integrated MongoDB with Guardium but i am not receiving logs, need to understand why logs are not coming.

    any information will be helpful.

    Thanks,

    Avinash Minj



    ------------------------------
    Avinash Minj
    ------------------------------


  • 2.  RE: MongoDB integration || Not receiving logs

    Posted Mon April 03, 2023 12:43 AM

    Hi Avinash,

    Do run instance discovery from respective S-Tap and Check?

    Thanks,
    Panendar Rao.C



    ------------------------------
    PHANENDRA RAO CHAVANA
    ------------------------------



  • 3.  RE: MongoDB integration || Not receiving logs

    Posted Mon April 03, 2023 08:59 AM

    Avinash,
    We need a few more pieces of information.
    What operating system and version is Mongo running on?
    What version of Mongo?
    Is it encrypted? If so, an ATAP will need to be configured. (Linux based/Non-Windows)
    Is the firewall open from the DB server to the collector(s)?
    If we can get a few more pieces of information, that will help us be more precise with some help.
    Thank you.
    Jennifer



    ------------------------------
    Jennifer Dodson
    Data Protection Managed Services
    Converge Technology Solutions Corp.
    Formerly Information Insights LLC
    _____________
    m: 469.502.8850
    convergetp.com | Jennifer.Dodson@convergetp.com
    ------------------------------



  • 4.  RE: MongoDB integration || Not receiving logs

    Posted Tue April 04, 2023 01:40 AM

    Hi Jennifer,

    Please find the details mentioned below:
    OS - RHEL (Linux)V8.4
    Mongo version - 4.4.14
    It is not encrypted.
    All the required ports are opened.

    Thanks,
    Avinash



    ------------------------------
    Avinash Minj
    ------------------------------



  • 5.  RE: MongoDB integration || Not receiving logs

    Posted Tue April 04, 2023 09:12 AM

    Avinash,
    Make sure your KTAP is enabled. Check the STAP log to make sure you aren't using PCAP. 
    If there is no encryption, you might recheck your IE configuration per the link below.
    Linux-UNIX: MongoDB IE configuration - IBM Documentation
    Otherwise, you might need to engage IBM support to do some networking troubleshooting from the DB server to the collector.
    Jennifer



    ------------------------------
    Jennifer Dodson
    Data Protection Managed Services
    Converge Technology Solutions Corp.
    Formerly Information Insights LLC
    _____________
    m: 469.502.8850
    convergetp.com | Jennifer.Dodson@convergetp.com
    ------------------------------



  • 6.  RE: MongoDB integration || Not receiving logs

    Posted Tue April 04, 2023 01:34 AM

    Hi Phanendra,

    I have checked that but there is no change.

    Thanks,
    Avinash 



    ------------------------------
    Avinash Minj
    ------------------------------