Imperva Cyber Community

communities_1.jpg
 View Only
  • 1.  Alert to be generated Based on a SQL Query

    Posted 29 days ago

    Hello Imperva Community Members,

    Greetings for the day,

    I have a requirement in Database Activity Monitoring (DAM)

    An alert should be received and the user/query should be blocked for an UPDATE SQL query executed without where condition, 

    Is there a way we can achieve that?

    i Have tried the following

       Operations=> Update
       SQL Exception String=> Exclude All=>  Value Where
       SQL Exception => Generated/Not Generated (Tested for both)

    I have tried few other combinations with Columns and custom command groups but not luck

    Would appreciate if some one could provide guidance regarding the same

    #DatabaseActivityMonitoring 


    #DatabaseActivityMonitoring

    ------------------------------
    Bharath Patil
    Manager | DAM admin
    Karnataka Bank Ltd.
    Bengaluru
    ------------------------------


  • 2.  RE: Alert to be generated Based on a SQL Query
    Best Answer

    Posted 29 days ago

    Hi Bharath,

    Please follow the steps below and let me know it helps you.

    Firstly, go to "Setup>Global Objects>Generic Dictionary Groups" path and add new dictionary from scratch with only giving name. After add an entry in it and type part="where" for Pattern value like below.

    Then add new DB Service Custom security policy with the following parameters and apply to related service.



    ------------------------------
    Cezmi Cal
    Consultant
    Barikat Internet Guvenligi Bilisim Ticaret A.S.
    Ankara
    ------------------------------



  • 3.  RE: Alert to be generated Based on a SQL Query

    Posted 28 days ago

    Hello Cezmi Cal,

    I am Glad to report that the solution provided by you is working perfectly,

    Thanks for your assistance Buddy, Cheers!!



    ------------------------------
    Bharath Patil
    Manager
    Karnataka Bank Ltd.
    Bengaluru
    ------------------------------



  • 4.  RE: Alert to be generated Based on a SQL Query

    Posted 27 days ago

    Hi Bharath,

    I'm happy it worked out the way you wanted it to.

    Please mark the answer as "Best Answer" so that others can quickly reach the solution.



    ------------------------------
    Cezmi Cal
    Consultant
    Barikat Internet Guvenligi Bilisim Ticaret A.S.
    Ankara
    ------------------------------