Imperva Cyber Community

communities_1.jpg
 View Only

  • 1.  How to filter records with the Application User field empty?

    Posted 01-13-2020 03:55
    Hello, any suggestions on how to filter in Audit Data, only records that have the field Application User empty?
    #DatabaseActivityMonitoring
    #AllImperva

    ------------------------------
    Sabajete Elezaj
    SNT Albania
    ------------------------------


  • 2.  RE: How to filter records with the Application User field empty?

    Posted 01-14-2020 07:39
    have you tried to match on unknown value 

    https://docs.imperva.com/bundle/v12.5-file-security-user-guide/page/3016.htm

    Application User

    Set Operation to one of:

    • At least one
    • Exclude all

    For Value, enter a user name.

    Enable Match Unknown Value if you want the criterion to be matched when the user name is unknown.