IBM Security Guardium

 View Only
  • 1.  How to Prepare Guardium Login Success Report?

    Posted Fri January 24, 2020 09:06 AM
      |   view attached

    Hi everyone,

    I'm using Guardium V11.1 and I'm monitoring a MS. SQL Server 2012 R2 database. I can create Login Failed report, no problem, but I could not prepare login success report.

    How I can prepare the login success report from SQL Server?

    *You can find below my login failed report conditions.



    ------------------------------
    Regards,

    Fırat Bişkin
    System Security Specialist
    IBM Global Technology Services
    ------------------------------


  • 2.  RE: How to Prepare Guardium Login Success Report?

    Posted Fri January 24, 2020 09:20 AM
    The report will be very similar. Instead of using the Exception entity you will use a Session, Session Start, or Access Period entity (I cannot remember which is most accurate; I typically use Session Start)​. Be sure to replace your Exception Type condition with the condition 'Session:Login Succeeded = Value 1' in order to filter out failed logins.

    ------------------------------
    Chase Walkup
    ------------------------------



  • 3.  RE: How to Prepare Guardium Login Success Report?

    Posted Mon January 27, 2020 07:09 AM
    Hi Chase,

    When I changed the Exception Type to Session Login Succeeded, the report ran successfully. Thank you so much.

    ------------------------------
    Regards,

    Fırat Bişkin
    System Security Specialist
    IBM Global Technology Services
    ------------------------------



  • 4.  RE: How to Prepare Guardium Login Success Report?

    Posted Tue March 14, 2023 05:30 AM

    Hi Fırat ,

    I got the same requirement , But, I am not able to achive this. I tried to create report based on session\access period entity but not able to see any exception type column where we can put condition. have you created report  as well as in Policy rule for this use case. Can you able to share the screenshots with me. thanks a lot !



    ------------------------------
    Akash Parmar
    ------------------------------



  • 5.  RE: How to Prepare Guardium Login Success Report?

    Posted Wed October 28, 2020 01:50 PM
    Its possible register login success with policies? To send by syslog

    ------------------------------
    Chosko
    ------------------------------