IBM Security Guardium

 View Only

  • 1.  Quick Search enabling issue in Central Manager

    Posted Thu January 21, 2021 10:42 PM
    HI Everyone,

    I have an issue in enabling quick search in order to make Risk Spotter active, So I have given command as per the below screenshot and i have noticed that quick search is enabled for all managed units but for CM I think it is not active. Kindly suggest the next step for this issue




    Thanks,
    Panendar Rao.C

    ------------------------------
    PHANENDRA RAO CHAVANA
    ------------------------------


  • 2.  RE: Quick Search enabling issue in Central Manager

    Posted Sun January 24, 2021 08:18 AM
    Edited by TAL DANIEL Sun January 24, 2021 08:50 AM

    Hi Phanendra, there's an error at the end of the GuardAPI you ran. It hints that there's an issue with scheduling, due to data-level security. You should disable that if you want Enterprise search (Investigation dashboard). From Knowledge center documentation,  Data Security - User Hierarchy and Databases associations:

    Restriction

    Data Level Security and the Investigation Dashboard cannot be enabled concurrently.


    BTW, see also related discussion here for other related commands like grdapi test_solr . You can also try to run  grdapi get_quick_search_info to better understand what is going on (see knowledge center page).


    ------------------------------
    TAL DANIEL
    Guardium developer
    IBM Security
    Israel
    ------------------------------

    Original Message


  • 3.  RE: Quick Search enabling issue in Central Manager

    Posted Tue January 26, 2021 07:20 AM
    Hello,

    Also note that the CM and collectors time zone must be the same.

    ------------------------------
    Regards,

    Fırat Bişkin
    System Security Specialist
    IBM Global Technology Services
    ------------------------------

    Original Message