D100 quick start

Prerequisites

You have purchased a D100 instance of Database Audit. For instructions, see Purchase a Database Audit instance (no longer available for new purchase).

Procedure

1. Log on to the Database Audit system. For instructions, see Log on to the Database Audit system.

2. Add the databases that you want to audit.

   1. In the left-side navigation pane, choose Assets > asset management.

   2. On the asset management page, click Add.

   3. In the Add asset panel, configure the database.

      We recommend adding an ApsaraDB RDS database. You can select an existing instance from your Alibaba Cloud account.

      You can also add a self-managed database. For configuration details, see Add a self-managed database.

   4. Click Save.

3. Install the traffic collection tool (agent).

   If your database server is an ECS instance with Cloud Assistant installed, we recommend using Cloud Assistant to install the agent. Otherwise, you must manually download and install the agent for your server's operating system. The following steps describe how to install the agent by using Cloud Assistant. For more information about how to manually install the agent, see Install an agent.

   1. In the left-side navigation pane, choose system settings > agent management.

   2. Click the Agent installation tab.

   3. In the Install by using Cloud Assistant section, click Start installation.

   4. In the Install agent by using Cloud Assistant dialog box, find the instance where you want to install the agent.

      A message at the top of the dialog box indicates that the agent does not support automatic installation or uninstallation on Windows operating systems. Use the VpcId, instance ID (exact match), and instance name (fuzzy match) filters to find the instance, and then confirm that the target instance's Cloud Assistant status is Installed.

   5. In the Actions column of the instance, click Install.

      After installation, the agent's status changes to Running, connected.

4. Configure audit rules.

   For instructions, see rule configuration. On the security rule management page, select a rule group from the left pane. Then, in the Basic information section on the right, enter a rule name, select a risk level (High, Medium, Low, or Trusted), select a rule type (such as SQL injection) and a rule group. You can click Add to configure exception rules (up to three). After you finish the configuration, click Save.

   Audit rules help you identify risks in your databases. When an audit record matches an audit rule, Database Audit triggers an alert.

5. Configure alert notifications.

   1. In the left-side navigation pane, click Alert notification.

   2. On the Risk alert or System alert tab, click Add.

   3. In the Add alert task panel, set the Name, Risk level to trigger alert, Alert content, Associated database, and Contact email for the alert task.

   4. Click Save.

      After you save the configuration, you will receive an email notification when an alert is triggered.

6. Subscribe to reports.

   After you create a report subscription, Database Audit periodically sends reports to your specified email address. This helps you monitor the status of your databases. Follow the steps below to create a subscription task.

   1. In the left-side navigation pane, choose report center > report subscription.

   2. On the report subscription page, click Add.

   3. In the Add subscription task panel, configure the task settings.

   4. Click Save.

      The subscription task is created.