Imperva Cyber Community

communities_1.jpg
 View Only

  • 1.  Unable to audit with PostgreSQL on Ubuntu 22.04

     
    Posted 06-11-2025 00:40

    Dear ALL,

    I am having a problem with the Agent installed with the PostgreSQL DB on Ubuntu 22.04. Although the installation is successful, when using the DB via DBeaver or pgAdmin4 tool, the agent does not record any commands. In the Alert, it only records Untraceable SSL Sessions (Unknown SSL Session), even though DB does not use SSL. If anyone has encountered the same case as me, please help me find a solution to this problem.

    Thank you very much!


    #DatabaseActivityMonitoring

    ------------------------------
    Loc Do
    Technical
    Misoft
    Hà Nội
    ------------------------------


  • 2.  RE: Unable to audit with PostgreSQL on Ubuntu 22.04

    Posted 06-13-2025 08:12
    Edited by Karol Gruszczynski 06-13-2025 08:13

    Hi,

    You have to use the flag in the agent's advanced configuration, and after that, do an agent restart.

    https://docs.imperva.com/bundle/v14.7-dam-user-guide/page/77566.htm

    Set both flags: collect-PostgreSql-in-user-space

    collect-SSL-PostgreSql-in-user-space

    One more:

    In the glibc library in Ubuntu, there is a bug. The agent will possibly be able to crash the database. Do upgrade Ubuntu.



    ------------------------------
    Karol Gruszczynski
    IT Security Expert
    Trafford IT Sp. z o.o.
    Warszawa
    ------------------------------

    Original Message


  • 3.  RE: Unable to audit with PostgreSQL on Ubuntu 22.04

     
    Posted 06-16-2025 23:08

    Hi Karol,

    Thanks for the solution, I followed it and it actually worked.



    ------------------------------
    Loc Do
    Technical
    Misoft
    Hà Nội
    ------------------------------

    Original Message