IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  ? Usernames

    Posted 02/06/20 09:31 AM

     

    I know this is a hot topic, and I've seen some articles on it.  But we are still struggling with seeing ? usernames on our Oracle DBs.  What has been everyone's best resource to solve these?


    Privacy Information: http://privacynotice.net (data rate charges may apply) or 800-524-2621.


  • 2.  RE: ? Usernames

    Posted 02/06/20 11:33 AM
    Edited by Zbigniew (Zibi) Szmigiero 02/06/20 11:33 AM

    Hi Brian,
    ? can be tied with two main issues:

    - User cannot be extracted because connection was not set correctly (Exceptions)

    - Sniffer missed login packets or session context

    The second issue can appear because:

    - STAP has been started or restarted when session existed (there is no way to identify user) - if restart was not planned - investigate it!

    - Sniffer has been restarted - you should investigate the reason, mostly related to resource shortage on collector level



    ------------------------------
    Zbigniew Szmigiero
    IBM
    Warsaw
    ------------------------------