Imperva Cyber Community

We had added several tables under table group, however it was not captured on the audit policies. Can someone explain why the audit policy not working on this case?

We did some testing over the MSSQL DB Server by using the query below.

Example:
select top 100 * from
abc.dbo.qwer;

For the table group from global object, we only define dbo.qwer

From the example above, can we monitoring everything of *.dbo.qwer?


#DatabaseActivityMonitoring

------------------------------
kahhou looi
------------------------------

In the example given you have included the schema (owner) with the table name into the table group list.
just add the table and columns to table groups and ensure the table group is associated to the site tree service / application. 
The database and schema mapping can be done via the application tab from the service in the site tree.

Regards

------------------------------
Trevor Jackson
------------------------------

Original Message:
Sent: 02-13-2020 08:41
From: kahhou looi
Subject: DB Monitoring and Audit on specific Table Group

We had added several tables under table group, however it was not captured on the audit policies. Can someone explain why the audit policy not working on this case?

We did some testing over the MSSQL DB Server by using the query below.

Example:
select top 100 * from
abc.dbo.qwer;

For the table group from global object, we only define dbo.qwer

From the example above, can we monitoring everything of *.dbo.qwer?

#DatabaseActivityMonitoring

------------------------------
kahhou looi
------------------------------

Hello Kahhou
I hope the information you received from Trevor helped address your issue. Please reply if it did not and we can help you get the right response.
Kedar

------------------------------
Kedar Dhuru
------------------------------

Original Message:
Sent: 02-14-2020 04:55
From: Trevor Jackson
Subject: DB Monitoring and Audit on specific Table Group

In the example given you have included the schema (owner) with the table name into the table group list.
just add the table and columns to table groups and ensure the table group is associated to the site tree service / application. 
The database and schema mapping can be done via the application tab from the service in the site tree.

Regards

------------------------------
Trevor Jackson

Original Message:
Sent: 02-13-2020 08:41
From: kahhou looi
Subject: DB Monitoring and Audit on specific Table Group

We had added several tables under table group, however it was not captured on the audit policies. Can someone explain why the audit policy not working on this case?

We did some testing over the MSSQL DB Server by using the query below.

Example:
select top 100 * from
abc.dbo.qwer;

For the table group from global object, we only define dbo.qwer

From the example above, can we monitoring everything of *.dbo.qwer?

#DatabaseActivityMonitoring

------------------------------
kahhou looi
------------------------------

Hi Trevor,

By followed the step, right now we are able to capture the table and columns after mapping into the application tab

Thank you so much.


------------------------------
kahhou looi
------------------------------

Original Message:
Sent: 02-14-2020 04:55
From: Trevor Jackson
Subject: DB Monitoring and Audit on specific Table Group

In the example given you have included the schema (owner) with the table name into the table group list.
just add the table and columns to table groups and ensure the table group is associated to the site tree service / application. 
The database and schema mapping can be done via the application tab from the service in the site tree.

Regards

------------------------------
Trevor Jackson

Original Message:
Sent: 02-13-2020 08:41
From: kahhou looi
Subject: DB Monitoring and Audit on specific Table Group

We had added several tables under table group, however it was not captured on the audit policies. Can someone explain why the audit policy not working on this case?

We did some testing over the MSSQL DB Server by using the query below.

Example:
select top 100 * from
abc.dbo.qwer;

For the table group from global object, we only define dbo.qwer

From the example above, can we monitoring everything of *.dbo.qwer?

#DatabaseActivityMonitoring

------------------------------
kahhou looi
------------------------------

Hi,

please note that, in addition to referencing your TGs in Policies, Table Groups will have to be attached to your Application they relate to.


------------------------------
Pal Balint
------------------------------

Original Message:
Sent: 02-13-2020 08:41
From: kahhou looi
Subject: DB Monitoring and Audit on specific Table Group

We had added several tables under table group, however it was not captured on the audit policies. Can someone explain why the audit policy not working on this case?

We did some testing over the MSSQL DB Server by using the query below.

Example:
select top 100 * from
abc.dbo.qwer;

For the table group from global object, we only define dbo.qwer

From the example above, can we monitoring everything of *.dbo.qwer?

#DatabaseActivityMonitoring

------------------------------
kahhou looi
------------------------------