Imperva Cyber Community

communities_1.jpg
 View Only
Back to discussions
Expand all | Collapse all

Some logs appear in the database server /var/log/message when agent is installed.

  • 1.  Some logs appear in the database server /var/log/message when agent is installed.

    Posted 10-16-2023 23:20

    When I installed agent on the database server.
    Some logs appear on the database server /var/log/message

    Server System Version:

    Red Hat Enterprise Linux Server release 7.9 (Maipo)

    Agent Version：

    Imperva-ragent-RHEL-v7-kSMP-px86_64-b13.6.0.60.0.604640.tar.gz

    DB software：MySQL 5.7

    logs appear：

    su: (to root) root on none

    su: (to mysql) root on none

    DB software：Oracle 19c

    logs appear：

    su: (to root) root on none

    su: (to grid) root on none

    su: (to oracle) root on none

    DB software：PostgreSQL 14.5

    logs appear：

    su: (to postgres) root on none

    Is this normal? Does it have any effect?

    What is the Agent doing with the su command?

    My Zabbix keeps alerting me about these logs!


    #DatabaseActivityMonitoring

    ------------------------------
    Wenlong Wang
    Technical Director
    Beijing China
    ------------------------------


  • 2.  RE: Some logs appear in the database server /var/log/message when agent is installed.

    Posted 10-27-2023 09:45

    Hi Wenlong Wang, 

    This possibly is a bug depending on where you are seeing the logs and depending on the version of SecureSphere you are running. 

    Raise a case with support and they will be able to check further but I think looking at the information you have supplied this is a bug that is fixed in 14.3.0.10 onwards. 

    Regards,


    Philip



    ------------------------------
    Philip Acton
    ------------------------------

    Original Message