InfoSphere Guardium 9.1 TechTalk Reporting 101

Size: px

Start display at page:

Download "InfoSphere Guardium 9.1 TechTalk Reporting 101"

Jewel Patrick
5 years ago
Views:

1 InfoSphere Guardium 9.1 TechTalk Reporting 101 Click to add text Dario Kramer, Senior System Architect 2013 IBM Corporation

2 Acknowledgements and Disclaimers Availability. References in this presentation to IBM products, programs, or services do not imply that they will be available in all countries in which IBM operates. The workshops, sessions and materials have been prepared by IBM or the session speakers and reflect their own views. They are provided for informational purposes only, and are neither intended to, nor shall have the effect of being, legal or other guidance or advice to any participant. While efforts were made to verify the completeness and accuracy of the information contained in this presentation, it is provided AS-IS without warranty of any kind, express or implied. IBM shall not be responsible for any damages arising out of the use of, or otherwise related to, this presentation or any other materials. Nothing contained in this presentation is intended to, nor shall have the effect of, creating any warranties or representations from IBM or its suppliers or licensors, or altering the terms and conditions of the applicable license agreement governing the use of IBM software. All customer examples described are presented as illustrations of how those customers have used IBM products and the results they may have achieved. Actual environmental costs and performance characteristics may vary by customer. Nothing contained in these materials is intended to, nor shall have the effect of, stating or implying that any activities undertaken by you will result in any specific sales, revenue growth or other results. Copyright IBM Corporation All rights reserved. U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp. IBM, the IBM logo, ibm.com, InfoSphere, and InfoSphere Guardium are trademarks or registered trademarks of International Business Machines Corporation in the United States, other countries, or both. If these and other IBM trademarked terms are marked on their first occurrence in this information with a trademark symbol ( or ), these symbols indicate U.S. registered or common law trademarks owned by IBM at the time this information was published. Such trademarks may also be registered or common law trademarks in other countries. A current list of IBM trademarks is available on the Web at Copyright and trademark information at Other company, product, or service names may be trademarks or service marks of others. 2

audiocast and ask questions in the chat to the Q and A group.

3 Logistics This tech talk is being recorded. If you object, please hang up and leave the webcast now. We ll post a copy of slides and link to recording on the Guardium community tech talk wiki page: You can listen to the tech talk using audiocast and ask questions in the chat to the Q and A group. We ll try to answer questions in the chat or address them at speaker s discretion. If we cannot answer your question, please do include your so we can get back to you. When speaker pauses for questions: We ll go through existing questions in the chat 3 3

4 Reminder: Guardium Tech Talks Next tech talk: Advanced Reporting Speaker: Dario Kramer Date &Time: Thursday, February 27, :30 AM Eastern Standard Time (90 minutes) Register here: Link to more information about this and upcoming tech talks can be found on the InfoSpere Guardium developerworks community: Please submit a comment on this page for ideas for tech talk topics. 4

5 Agenda Brief Database Activity Flow Description Reporting Domains, Entities and Attributes Creating a new Report and Cloning Existing Reports Drill Downs A Few Decisions To Make What else can we do from the Report View Online Report Vs Audit Process Advance Reporting Please Come see us again next month 5

the DB Server to the DB Client Failed Login Messages SQL Errors Result sets What needs to be audited?

6 Database activity flow Activity from the DB client to the DB server Client/Server network connections Session starts (log in) SQL Requests (commands) Session ends (log out) Database Server Activity from the DB Server to the DB Client Failed Login Messages SQL Errors Result sets What needs to be audited? Session information User information SQL statements Responses Failed Events Result Sets Database Client 6

7 How policy definition impacts data collection Recommended: Watch YouTube videos on policies and logging. First one at 7

8 Basic Domains and Entities Access Domain Client / Server - From / To Session Construct Sentences Objects Fields Full SQL Exceptions Domain Policy Violations Domain 8

9 Construct Structure Select c1,c2 from mytable One Sentence with VERB = SELECT One Object: mytable Two Fields: C1, C2 Construct GDM_CONSTRUCT GDM_SENTENCE Update table1 set col1=5 where col2 in (select col2 from table2) Two Sentences with Verbs: 1 Update, 2 Select Sentence 1: Object table1, two fields col1 and col2 Sentence 2: Object: table2 one Field: col2. Sentence 1: depth=0 Sentence 2: depth=1 GDM_OBJECT GDM_FIELD Inside each of these tables, CONSTRUCT_ID is the key for the SQL statement that will be written in GDM_SENTENCE, GDM_OBECT and GDM_FIELD 9

10 Internal Tables and Relationships - Logical Structure Domains Entities Attributes Access Exceptions Policy Violations Client/Server Session Access Period Server type Client IP Server IP DB User For more information on what information is included in each, check the info center: Domains: omains.html Entities and attributes: ntities_attributes.html 10

11 Logical Structure Domains Entities Attributes 11

12 Finding the query builder Admin role: Choose the domain Click New to build a new query 12

13 Finding the query builder User role: 13

14 Ask A Question Build a Query Question: When was the first time that data from this client/server was collected? Choose what to see Save your Addquery it to one of your panes 14

15 What is displayed One Line Per Client/Server What is the Main Entity? When we first collected data for this client/server 15

16 Main Entity Every Report has a Main Entity Every report is defined on one specific domain On our examples the access domain The main entity is one of the entities in the domain Main Entity determines: What a row on a report represents. What Attributes can be displayed as values and what attributes must be aggregated. What attribute/s will be used for the timeframe (Query From and Query To conditions) If Should Add Count is set the Main Entity will determine what count will actually be used. 16

17 Clone an existing query: Access an existing query: - Pre-defined - Custom Cannot change the main entity. Clone: Will be prompted to provide a new name for the cloned query 17 Can perform any other modifications

A more sophisticated example Question: What did the SYSTEM user do during the last few months? How many SQL statements were executed? Who executed them?

18 A more sophisticated example Question: What did the SYSTEM user do during the last few months? How many SQL statements were executed? Who executed them? From where What SQL commands were executed On how many tables? How many times? Can I see more details now? Let s go step by step: 1. Decide what will be the Main Entity 2. Decide what we want to display 3. Add some conditions 4. Place it in a pane 18

19 Pick the main entity and define the query New Query Query Name Main Entity: Will allow seeing Client /Server Information, Session, Command Will allow ONLY count of Objects 19

20 Choose some fields to display Only Count What command was executed? 20 Who? From which client? What server? No Object Details

21 Add a condition Remember we want to see only what user SYSTEM did Mode Filter On DB User Name 21 Operator: =, >, <, etc. Group Operators Category Aliases Use Expressions Compare To Value

22 Place it in a pane Save the Query and generate a Tabular Report: 22

23 Set up the run time parameters: 23

24 The report 24

25 Can we see more detailed information? Drilldowns! Drilldowns available Work on a specific row Different types: Record details Other reports Show SQL Show SQL with Values Add mapping Invoke 25

26 Record details 15 different Objects Object Names shown in 15 records 26

27 Show SQL with and without Values: No Values Are Displayed..?... Show The Values 27

28 Drill down to another report Client IP Activity Summary - Summary of a Client activitty Detailed Sessions List - Sessions on a specific DB Server 28

Other options: Add Count Shows the total number of times this happened Add Distinct Show only different combinations of the columns displayed Sort By

29 Other options: Add Count Shows the total number of times this happened Add Distinct Show only different combinations of the columns displayed Sort By Count Sort the records by the number of times it happened in descendent order Run in two stages In some specific cases this may improve performance 29

30 A Few More Questions: How many sessions were opened on each database server? 30

31 From how many client IP s was a server accessed? 31

32 Which servers did a user access? Count Of SQL requests on the specified period, by the specified user and source program on each server 32 Run Time parameter Can execute same query for different users

33 Which servers did a user access? Setup The Run Time Parameters 33

34 Which servers did a user access? User SYSTEM: User DB2ADMIN: 34

35 What else I can do from the report viewer Navigate Cancel Execution Refresh Download Partial/Complete Report to CSV File Print Download PDF Edit The query Customize Report Add API Mapping Display in New window Datamart Builder Invoke API Create and Submit Audit Process 35

36 Audit process Schedule execution of reports, classification processes, VA etc. Distribute The Results No timeout for reports execution Results are saved and remain available for review for a period of time Can Compare Results Results Distribution Creates the audit process and Submits for execution Setup Parameters using the values from the report customizer 36

37 Defining the audit process 37

38 Audit process result 38

39 Advance Reporting Next Tech Talk February, Using the Data Mart to speed the performance of your regular reports API s - Mapping, Execution and script generation Audit process scheduling report executions Computed and Constant attributes Considerations For Reporting in a federated environment Advance reporting options Register here: 39

40 Information, training, and community InfoSphere Guardium YouTube Channel includes overviews and technical demos InfoSphere Guardium newsletter developerworks forum (very active) Guardium DAM User Group on Linked-In (very active) Community on developerworks (includes content and links to a myriad of sources, articles, etc) Guardium Info Center New! InfoSphere Guardium Virtual User Group. Open, technical discussions with other users. Send a note to bamealm@us.ibm.com if interested IBM InfoSphere Guardium Tech Talk

AD406: What s New in Digital Experience Development with IBM Web Experience Factory

AD406: What s New in Digital Experience Development with IBM Web Experience Factory Jonathan Booth, Senior Architect, Digital Experience Tooling, IBM Adam Ginsburg, Product Manager, Digital Experience