Audit a database instance in a classic network

Updated at:

To audit a database instance in a classic network, first use ClassicLink to enable communication between an ECS instance in the classic network and the Database Audit system in a VPC. Then, deploy the agent on the ECS instance.

Background

We recommend placing your ECS instance and Database Audit system in the same VPC. For instructions, see Install an agent. For details on using ClassicLink, see Connect a classic network to a VPC by using ClassicLink.

If your ECS instance is in a classic network, use ClassicLink to enable communication with the Database Audit system in a VPC.

Procedure

  1. Obtain the instance ID of the VPC where the Database Audit system is located.

    1. Log on to the Database Audit console.

      For instructions, see Log on to the Database Audit console.

    2. In the navigation pane, choose System > Agent Management.

    3. Click the Agent Installation tab to view the instance ID of the VPC where the Database Audit system is located.

      In the information bar at the top of the page, the VPC ID of This Instance field displays the VPC ID of your Database Audit system. The ID starts with vpc-.

  2. Create a ClassicLink connection from the ECS instance in the classic network to the VPC where the Database Audit system is located.

    1. Enable ClassicLink for the VPC where the Database Audit system is located. For instructions, see Enable ClassicLink.

      Note

      For this step, use the VPC ID that you obtained in Step 1.

    2. Establish a ClassicLink connection from the ECS instance in the classic network. For instructions, see Establish a ClassicLink connection.

      When you establish the ClassicLink connection, use the VPC ID from Step 1. In the Link To VPC dialog box, select the target VPC, such as vpc-bp***, from the VPC drop-down list, and then click OK.

    3. Optional: If the VPC CIDR block is 192.168.0.0/16, add a route on the ECS instance in the classic network that directs traffic destined for 192.168.0.0/16 to the private network interface.

      For more information, see Limitations.

      Note

      This step is required only if the VPC CIDR block is 192.168.0.0/16.

  3. Manually install the Database Audit agent on the ECS instance in the classic network.

  4. Verify the agent deployment.

    1. Log on to the Database Audit console.

      For instructions, see Log on to the Database Audit console.

    2. In the navigation pane, choose System > Agent Management.

    3. Click the Agent Management tab and verify that the private IP of the ECS instance is listed.

      If the private IP of the ECS instance is displayed in the Agent IP column, the connection is successful.

What to do next

After deploying the agent, go to the Assets > Asset Management page to configure the database asset. After configuration, go to the Query and Analysis > Audit Logs page to verify audit log collection.