Imperva Cyber Community

communities_1.jpg
 View Only

  • 1.  Audit Data Operations

    Posted 04-16-2020 06:39
    Hello,

    In Audit Data, in field Operations except for delete, insert, update are also showed some custom operations with different names, that client says they are not operations :/ Any idea why DAM classifies them as operations? Also, what are they? How can I define to the client what are they, if not operations?

    P.s, for example, it shows as operation even: PL/SQL

    Any help is appriciated :)
    P.s.s oracle.
    #DatabaseActivityMonitoring

    ------------------------------
    Sabajete Elezaj
    SNT Albania
    ------------------------------


  • 2.  RE: Audit Data Operations

    Posted 04-20-2020 08:42
    Hi Sabajete,

    I assume that the reason for the wrong operation field is due to reserved words that appear in the query and Imperva analyzer works according to those words.
    Maybe you can get some insights from this article from IBM about z/OS:
    https://www.ibm.com/support/knowledgecenter/SSEPEK_10.0.0/sqlref/src/tpc/db2z_reservedwords.html

    Sorry for not providing more info about Oracle.
    Best,

    ------------------------------
    Ira Miga
    Imperva
    Knowledge Engineer
    ------------------------------

    Original Message


  • 3.  RE: Audit Data Operations

    Posted 04-20-2020 11:45
    If you can post more examples, we might be able to give you more insight.  You can also reach out to Imperva support for a more direct and immediate answer.

    However, I did want to suggest that you might be seeing stored procedures being executed (or whatever the corresponding function process is on your platform).

    Check out https://docs.imperva.com/bundle/v14.1-database-activity-monitoring-user-guide/page/2527.htm for some details.

    Jim