Audit a database instance in a classic network
To audit a database instance in a classic network, first use ClassicLink to enable communication between an ECS instance in the classic network and the Database Audit system in a VPC. Then, deploy the agent on the ECS instance.
Background
We recommend placing your ECS instance and Database Audit system in the same VPC. For instructions, see Install an agent. For details on using ClassicLink, see Connect a classic network to a VPC by using ClassicLink.
If your ECS instance is in a classic network, use ClassicLink to enable communication with the Database Audit system in a VPC.
Procedure
-
Obtain the instance ID of the VPC where the Database Audit system is located.
-
Log on to the Database Audit console.
For instructions, see Log on to the Database Audit console.
-
In the navigation pane, choose .
-
Click the Agent Installation tab to view the instance ID of the VPC where the Database Audit system is located.
In the information bar at the top of the page, the VPC ID of This Instance field displays the VPC ID of your Database Audit system. The ID starts with
vpc-.
-
-
Create a ClassicLink connection from the ECS instance in the classic network to the VPC where the Database Audit system is located.
-
Enable ClassicLink for the VPC where the Database Audit system is located. For instructions, see Enable ClassicLink.
NoteFor this step, use the VPC ID that you obtained in Step 1.
-
Establish a ClassicLink connection from the ECS instance in the classic network. For instructions, see Establish a ClassicLink connection.
When you establish the ClassicLink connection, use the VPC ID from Step 1. In the Link To VPC dialog box, select the target VPC, such as
vpc-bp***, from the VPC drop-down list, and then click OK. -
Optional: If the VPC CIDR block is 192.168.0.0/16, add a route on the ECS instance in the classic network that directs traffic destined for 192.168.0.0/16 to the private network interface.
For more information, see Limitations.
NoteThis step is required only if the VPC CIDR block is 192.168.0.0/16.
-
-
Manually install the Database Audit agent on the ECS instance in the classic network.
-
If the ECS instance runs Linux, follow the instructions in the Download the agent and install it manually section of Install an agent.
-
If the ECS instance runs Windows, see Manually install an agent.
-
-
Verify the agent deployment.
-
Log on to the Database Audit console.
For instructions, see Log on to the Database Audit console.
-
In the navigation pane, choose .
-
Click the Agent Management tab and verify that the private IP of the ECS instance is listed.
If the private IP of the ECS instance is displayed in the Agent IP column, the connection is successful.
-
What to do next
After deploying the agent, go to the page to configure the database asset. After configuration, go to the page to verify audit log collection.
-
For more information about how to configure database information, see Manage database assets.
-
For more information about how to view audit logs, see View audit logs.