Imperva Cyber Community

communities_1.jpg
 View Only
  • 1.  MariaDB Audit "OS hostname" empty

    Posted 07-04-2021 14:47
    Edited by Freddy Brito 07-04-2021 16:21
    Hi Community

    I found in one of our customers, while checking audit records, that OS hostname (client doing the query) is empty when is about mariaDB.  For MSSQL is fine. I can see the hostname of the query issuer.

    Then, I reproduce this in my lab

    1- Is this a limitation of the agent for mariaDB?

    2- Here a screenshot of part of the audit. As you see, for MSSQL there is not problem at all. 

    3- The Os hostname "daitek-vm" that you see in the previous picture, it's not resolved by dns. Also, I checked DNS en GWs and MX. they are resolving. 

    4- I conducted another test, this time assigning a FQDN to the vm that is issuing the query.  Same results.  Nothing. Still OS hostname empty

    any idea?

    My versions are:

    MX 13.6.0.60
    GW 13.6.0.60

    agent: 13.6.0.60.0.604640


    Regards














    #DatabaseActivityMonitoring
    #ImpervaAgent

    ------------------------------
    Freddy Brito
    Technician
    Daitek S.A.
    Buenos Aires
    ------------------------------


  • 2.  RE: MariaDB Audit "OS hostname" empty

    Posted 07-30-2021 04:07
    Hey Freddy,

    Sorry to see no one was able to help out here. Did you find the information you need?

    Thanks,

    Sarah

    ------------------------------
    Sarah Lamont
    Digital Community Manager
    ------------------------------



  • 3.  RE: MariaDB Audit "OS hostname" empty

    Posted 07-30-2021 09:14
    Hi

    Thanks for answering.  I'm still without an answer. 

    Regards

    --
    Freddy Brito
    freddy.brito@daitek.com.ar

    Avda Corrientes 3360 Piso 12

    C1193AAS - CABA - Argentina

    t + 54 11 5275 9710 | c +54 9 11 2653 9420 

    info@daitek.com.ar | www.daitek.com.ar






  • 4.  RE: MariaDB Audit "OS hostname" empty

    Posted 11-22-2021 18:01
    anyone with this issue?

    ------------------------------
    Freddy Brito
    Technician
    Daitek S.A.
    Buenos Aires
    ------------------------------



  • 5.  RE: MariaDB Audit "OS hostname" empty

    Posted 11-23-2021 10:03
    Hi Freddy,

    The parameters OS Username and OS Hostname are provided by DB connection string. If the application/user adds these fields in the DB Connection string, then you can see these in logs.

    https://mariadb.com/kb/en/about-mariadb-connector-j/




    ------------------------------
    Karol Gruszczynski
    IT SECURITY EXPERT
    Trafford IT
    Warsaw
    ------------------------------



  • 6.  RE: MariaDB Audit "OS hostname" empty

    Posted 11-26-2021 15:59
    Karol

    Thanks for asnwering.  I 'll try it :)


    Regards


    ------------------------------
    Freddy Brito
    Technician
    Daitek S.A.
    Buenos Aires
    ------------------------------