Universal Connector for AWS RDS cloudwatch

Question

I have enabled Universal connector on guardium 11.5 and used universal-connectors/filter-plugin/logstash-filter-mariadb-aws-guardium/README.md at main · IBM/universal-connectors · GitHub for AWS RDS cloudwatch pull. script has been saved successfully but i can see logs on cloudwatch but unable to view on guardium. Will the sessions come through normal session detail report or logs saved to a separate file or table for UC. If separate then how do i retrieve it? thanks

Answer

Hi @sara rehan,

You will see the logs in the same reports that you use for your data from STAPs. Do you see the universal connector in the "STAP Status Monitor" list? It doesn't show up there until it receives a log.

If it's there, you should have an event in your reports. If you don't, you'll want to check your policy to make sure it isn't dropping them.
If it's not there, you need to troubleshoot your UC configuration and/or connectivity to the endpoint.

IBM Guardium