IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Expand all | Collapse all

Monitor Databases hosted on Google Cloud Platform

  • 1.  Monitor Databases hosted on Google Cloud Platform

    Posted Mon March 22, 2021 02:47 PM
    Does anyone has experience in database activity monitoring for databases hosts on Google Cloud.
    Is Guardium capable of monitoring databases such CloudSQL SQL Server , Memorystore ,CloudSQL PostgreSQL hosted on Google Cloud Platform (GCP)
    looked for supported databases but GCP is not listed there.
    Please let me know someone has experienced and what solution Guardium, GBDI or Google native solution are being used?

    ------------------------------
    Rohit Goyal
    ------------------------------


  • 2.  RE: Monitor Databases hosted on Google Cloud Platform

    Posted Wed March 24, 2021 12:39 PM

    Hi Rohit, though I also don't see an out-of-the-box solution to connect Google Cloud data activity logs, I'd like to refer you to Universal Connector (introduced in Guardium Data Protection 11.3), as an option that can help connect any other datasources, with some devevlopment: As most of these databases' grammar is familiar to Guardium (SQL syntax), Universal Connector can help you install an Elastic Logstash plugin that can get your data activity logs from GCP. You also need to develop another plugin that will be responsible for transforming the data structure from the format the GDP registers in the logs into a Guardium Record standard, before Guardium can take control and parse it along with the operation details/grammar.

    For fetching data from Google CloudSQL, these might help you get the data activity logs out into the Guardium collector, by using either beats plugin, google pub/sub plugin, or  google cloud storage plugin. As for the second transformation step plugin, see Universal connector documentation and developer guide.





    ------------------------------
    TAL DANIEL
    Guardium developer
    IBM Security
    Israel
    ------------------------------



  • 3.  RE: Monitor Databases hosted on Google Cloud Platform

    Posted Wed March 24, 2021 12:48 PM
    Thanks Tal for your response.

    Universal Connector seems to be impressing but this is at very early I stage see from the support side and supported databases.

    Do you have an details about Guardium Insight? Can this tool directly support GCP databases other than Universal Connector?


    ------------------------------
    Rohit Goyal
    ------------------------------



  • 4.  RE: Monitor Databases hosted on Google Cloud Platform

    Posted Mon March 29, 2021 04:16 AM
    Hi Rohit, Guardium Insights has no Google cloud capabilities that I'm aware of at the moment. It currently supports AWS and Azure.
    Universal connector enables clients and 3rd parties to develop new capabilities with low effort, but you can always send a request by opening an RFE.

    ------------------------------
    TAL DANIEL
    Guardium developer
    IBM Security
    Israel
    ------------------------------



  • 5.  RE: Monitor Databases hosted on Google Cloud Platform

    Posted Tue March 30, 2021 08:20 AM
    Rohit - what event stream in GCP are you looking to use?  Stackdriver?

    ------------------------------
    JOSHUA KLAHN
    ------------------------------



  • 6.  RE: Monitor Databases hosted on Google Cloud Platform

    Posted Wed March 31, 2021 08:08 AM
    Hi Joshua,

    We've limited knowledge on GCP. Is that the event stream helps in monitoring database activity logs?
    do you have working solution which monitors GCP hosted databases?

    ------------------------------
    Rohit Goyal
    ------------------------------



  • 7.  RE: Monitor Databases hosted on Google Cloud Platform

    Posted Wed March 31, 2021 09:10 AM
    Guardium Insights doesn't have any coverage of GCP.  It's on our roadmap.  I had planned to start with Stackdriver (based on some limited client feedback).  But I don't know GCP too well and wanted to gather more feedback from clients on what they prefer.

    ------------------------------
    Josh Klahn
    Offering Manager - Guardium Insights
    United States
    ------------------------------



  • 8.  RE: Monitor Databases hosted on Google Cloud Platform

    Posted Mon May 03, 2021 02:10 PM
    Hi Josh,

    It is the Stackdriver here too. Would it possible to support in Guardium too along with the Insights in near future.

    ------------------------------
    Rohit Goyal
    ------------------------------



  • 9.  RE: Monitor Databases hosted on Google Cloud Platform

    Posted Mon May 03, 2021 03:32 PM
    Rohit,

    I've got 'Google Cloud Operations Suite (Stack Driver)' in our request queue for Universal Connector plugin support.  This will make it available for both Guardium Data Protection and Guardium Insights.

    ------------------------------
    Josh Klahn
    Offering Manager - Guardium Insights
    United States
    ------------------------------



  • 10.  RE: Monitor Databases hosted on Google Cloud Platform

    Posted Mon May 03, 2021 03:47 PM
    Any tentative timelines Josh we are looking for to be available in Guardium?

    ------------------------------
    Rohit Goyal
    ------------------------------