The associated data feature lets you group resources with similar attributes to simplify batch configurations. Database Audit supports managing IP groups, database account groups, application user groups, time groups, object groups, and personnel. Once defined, you can select these groups directly when creating custom rules.
Manage IP groups
The IP group feature lets you group IP addresses. You can then apply these groups to custom rules.
Create an IP group
Log on to Database Audit. For more information, see Log on to Database Audit.
In the left-side navigation pane, choose .
On the IP group tab, click Create.
In the Create IP group panel, configure the parameters and click Save.
Parameter
Description
Name
The name of the IP group. It must be 1 to 64 characters long and can contain Chinese characters, letters, periods (.), underscores (_), and hyphens (-).
IP
The IP addresses to include in the group. You can use the following formats:
Multiple IP addresses separated by commas (,).
An IP address range, such as 10.1.1.10-10.1.1.20.
An IP address range that contains wildcards, such as 10.10.*.*.
Description
An optional description for the IP group.
Import an IP group
Log on to Database Audit. For more information, see Log on to Database Audit.
In the left-side navigation pane, choose .
Optional: On the IP group tab, click Download Template, edit the template file, and save it.
You can skip this step if you already have an IP group template file.
Click Import, select the IP group template file, and click Open.
Manage database account groups
The database account group feature lets you group database accounts. You can then apply these groups to custom rules. The following steps describe how to create a database account group. The import procedure is similar to that for IP groups and is not repeated here.
Log on to Database Audit. For more information, see Log on to Database Audit.
In the left-side navigation pane, choose .
On the associated data page, click the database account group tab.
On the database account group tab, click Create.
In the Create database account group panel, enter the database account group name and the database accounts, and then click Save.
Use a comma (,) to separate multiple database accounts.
Manage application user groups
The application user group feature lets you group application users. You can then apply these groups to custom rules. The following steps describe how to create an application user group. The import procedure is similar to that for IP groups and is not repeated here.
Log on to Database Audit. For more information, see Log on to Database Audit.
In the left-side navigation pane, choose .
On the associated data page, click the application user group tab.
On the application user group tab, click Create.
In the Create application user group panel, enter the application user group name and the application usernames, and then click Save.
Use a comma (,) to separate multiple application usernames.
Manage time groups
The time group feature helps you manage collections of specific time periods. If a custom rule must be active only during certain times, you can create a time group and use it directly in the rule. The following steps describe how to create a time group. The import procedure is similar to that for IP groups and is not repeated here.
Log on to Database Audit. For more information, see Log on to Database Audit.
In the left-side navigation pane, choose .
On the associated data page, click the time group tab.
On the time group tab, click Create.
In the Create time group panel, enter a name for the time group, select a time range, and click Save.
Manage object groups
An object is a collection of specific tables and columns in a database. The object group feature lets you manage these objects in groups. If a custom rule applies to specific database objects, you can create an object group and apply it to the rule. The following steps describe how to create an object group.
Log on to Database Audit. For more information, see Log on to Database Audit.
In the left-side navigation pane, choose .
On the associated data page, click the object group tab.
On the object group tab, click Create.
In the Create object group dialog box, enter a name for the object group and click Save and Add Object.
In the Actions column for the new object group, click Edit.
In the Edit object group dialog box, configure the object's parameters in the Add Object section, and then click Add Object.
You can add multiple objects to an object group.
Parameter
Description
Asset
The asset to which the object applies. By default, this is set to all assets.
database/schema
The name of the database.
Table
The name of the table. If left empty, all tables in the specified database are included.
Column
The name of the column. If left empty, all columns in the specified table are included.
Manage personnel
The personnel feature lets you manage information about internal personnel who access your databases. When this feature is used with application identity recognition (for more information, see application identity recognition), Database Audit automatically links personnel information to the corresponding SQL statements. The following steps describe how to add personnel. The import procedure is similar to that for importing an IP group and is not repeated here.
Log on to Database Audit. For more information, see Log on to Database Audit.
In the left-side navigation pane, choose .
On the associated data page, click the personnel tab.
On the personnel tab, click Create.
In the Create personnel panel, configure the personnel information and click Save.
Key parameters:
Application User Name: The application username linked to this personnel entry. If you also provide a name for the person, their name and employee ID are used for association. Otherwise, this application username is used.
IP Address: The IP address of the asset used by the person. You can use the following formats:
Multiple IP addresses separated by commas (,).
An IP address range, such as 10.1.1.10-10.1.1.20.
An IP address range that contains wildcards, such as 10.10.*.*.