IBM Security Guardium

 View Only
  • 1.  filter based on SQL string

    Posted Tue May 11, 2021 09:10 AM
    Hello all,

    please can anyone  tell me how can I configure my Guardium policy to not send mail notification for the SQL string starting with "begin" see the examples below

    SQL String: begin :Result := SYS_CONTEXT (?, ?);end;
    SQL String: begin dbms_output.get_lines(:lines,:num); end;
    SQL String: begin dbms_output.get_lines(?,null); end;

    Regards.

    ------------------------------
    cherbani samir
    ------------------------------


  • 2.  RE: filter based on SQL string

    Posted Sat May 15, 2021 09:05 AM
    Hi Cherbani,

    I suppose you can use regular expression as below example:
    ^(?!begin)

    In the rule --> SQL Criteria , select "Pattern", and set it = ^(?!begin). Hope it helps.


    ------------------------------
    Jonathan LU
    Security Support Engineer
    IBM
    ------------------------------



  • 3.  RE: filter based on SQL string

    Posted Tue May 18, 2021 10:44 AM
    Hi Jonathan,

    Thank you very  much, your proposal solved the issue.

    Regards.

    ------------------------------
    cherbani samir
    ------------------------------



  • 4.  RE: filter based on SQL string

    Posted Tue May 18, 2021 10:07 PM
    Good to hear that. Thanks for the feedback.

    ------------------------------
    Jonathan LU
    Security Support Engineer
    IBM
    ------------------------------