Imperva Cyber Community

communities_1.jpg
 View Only
  • 1.  MX reporting question

    Posted 11-14-2020 18:52

    Hi,

     

    I would like to configure MX report generation only when some field (like database field) is not blank. I try to set up the following REGEX in the associated audit policy but it does not work. Since there is not Advanced Criteria REGEX in MX report, is there a way to do so please?

     

    Don't match if any of the Databases matches regular expression [ [0-9a-z_\.]{1,100} ] or Don't match if Databases is unknown .

     

    Thanks and Regards,

    Dom

     

    Database Security Specialist

    Cyber Security , Cyber Protection & Design, Cyber Protective Service - DBAM

     

    Level 19, 2 Market Street Sydney NSW 2000

    Mobile +61 401 540 873
    Email    
    dominic.tsang@cba.com.au  

     


    ************** IMPORTANT MESSAGE *****************************
    This e-mail message is intended only for the addressee(s) and contains information which may be
    confidential.
    If you are not the intended recipient please advise the sender by return email, do not use or
    disclose the contents, and delete the message and any attachments from your system. Unless
    specifically indicated, this email does not constitute formal advice or commitment by the sender
    or the Commonwealth Bank of Australia (ABN 48 123 123 124 AFSL and Australian credit licence 234945)
    or its subsidiaries.
    We can be contacted through our web site: commbank.com.au.
    If you no longer wish to receive commercial electronic messages from us, please reply to this
    e-mail by typing Unsubscribe in the subject line.
    **************************************************************


  • 2.  RE: MX reporting question

    Posted 11-18-2020 01:31
      |   view attached
    Hi,

    It isn't the most elegant of solutions, but it works until we formally support regex here.  Have a look at the attached. Hope this helps.

    Best,

    BA

    ------------------------------
    Brian Anderson
    ------------------------------



  • 3.  RE: MX reporting question

    Posted 11-18-2020 01:38

    Got it. Thanks Brian.

     

    One more thing. Can we configure MX to email report if and only if there is at least one record.

     

     

    Thanks again and Regards,

    Dom

     

    Database Security Specialist

    Cyber Security , Cyber Protection & Design, Cyber Protective Service - DBAM

     

    Level 19, 2 Market Street Sydney NSW 2000

    Mobile +61 401 540 873
    Email    
    dominic.tsang@cba.com.au  

     


    ************** IMPORTANT MESSAGE *****************************
    This e-mail message is intended only for the addressee(s) and contains information which may be
    confidential.
    If you are not the intended recipient please advise the sender by return email, do not use or
    disclose the contents, and delete the message and any attachments from your system. Unless
    specifically indicated, this email does not constitute formal advice or commitment by the sender
    or the Commonwealth Bank of Australia (ABN 48 123 123 124 AFSL and Australian credit licence 234945)
    or its subsidiaries.
    We can be contacted through our web site: commbank.com.au.
    If you no longer wish to receive commercial electronic messages from us, please reply to this
    e-mail by typing Unsubscribe in the subject line.
    **************************************************************