IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Quick Search enabling issue in Central Manager

    Posted Thu January 21, 2021 10:42 PM
    HI Everyone,

    I have an issue in enabling quick search in order to make Risk Spotter active, So I have given command as per the below screenshot and i have noticed that quick search is enabled for all managed units but for CM I think it is not active. Kindly suggest the next step for this issue




    Thanks,
    Panendar Rao.C

    ------------------------------
    PHANENDRA RAO CHAVANA
    ------------------------------


  • 2.  RE: Quick Search enabling issue in Central Manager

    Posted Sun January 24, 2021 08:18 AM
    Edited by TAL DANIEL Sun January 24, 2021 08:50 AM

    Hi Phanendra, there's an error at the end of the GuardAPI you ran. It hints that there's an issue with scheduling, due to data-level security. You should disable that if you want Enterprise search (Investigation dashboard). From Knowledge center documentation,  Data Security - User Hierarchy and Databases associations:

    Restriction

    Data Level Security and the Investigation Dashboard cannot be enabled concurrently.


    BTW, see also related discussion here for other related commands like grdapi test_solr . You can also try to run  grdapi get_quick_search_info to better understand what is going on (see knowledge center page).


    ------------------------------
    TAL DANIEL
    Guardium developer
    IBM Security
    Israel
    ------------------------------

    Original Message


  • 3.  RE: Quick Search enabling issue in Central Manager

    Posted Tue January 26, 2021 07:20 AM
    Hello,

    Also note that the CM and collectors time zone must be the same.

    ------------------------------
    Regards,

    Fırat Bişkin
    System Security Specialist
    IBM Global Technology Services
    ------------------------------

    Original Message