Topic
IC4NOTICE: developerWorks Community will be offline May 29-30, 2015 while we upgrade to the latest version of IBM Connections. For more information, read our upgrade FAQ.
5 replies Latest Post - ‏2013-01-25T01:53:16Z by RayUsingAllDBtypes
SystemAdmin
SystemAdmin
483 Posts
ACCEPTED ANSWER

Pinned topic Show SQL Values in Report Results

‏2013-01-24T03:00:23Z |
Hi all,

I have a question that probably has a very simple answer, but I'm just not sure how to do it. I have created reports in Guardium, and the "sql" field shows question marks (?) instead of the actual value. For instance, the sql field in the report might look like this:

WHERE ID = ?

Management wants to see the actual value. How can I change this so that the actual value is displaying instead of the question mark?

Thank you for your help,
Justin
Updated on 2013-01-25T01:53:16Z at 2013-01-25T01:53:16Z by RayUsingAllDBtypes
  • Muris
    Muris
    45 Posts
    ACCEPTED ANSWER

    Re: Show SQL Values in Report Results

    ‏2013-01-24T08:01:16Z  in response to SystemAdmin
    Hi,

    Check rules inside Policy you are using. You are probably using action 'Log Masked Details' so that's the reason why you have question marks in reports. Change it to 'Log Full Details' and it should work.

    Regards,
    • SystemAdmin
      SystemAdmin
      483 Posts
      ACCEPTED ANSWER

      Re: Show SQL Values in Report Results

      ‏2013-01-24T18:32:14Z  in response to Muris
      Hi,

      thank you for the response. I wasn't trying to pull the data using any kind of policy. I had setup a new query in the query builder to monitor activity from users on a certain server. When I create a report based on that query, the report just has "?" in the sql value instead of the actual value. I was hoping to find a way to configure that, if that's possible.

      Thank you,
      Justin
  • rsubramani@us.ibm.com
    30 Posts
    ACCEPTED ANSWER

    Re: Show SQL Values in Report Results

    ‏2013-01-24T19:02:21Z  in response to SystemAdmin
    Hi:

    You will need LOG_FULL_DETAILS in your policy, in order to see the actual values. Guardium, by default, stores a generalized form of the query.

    For example:

    select * from customer where custno = 100 and
    select * from customer where custno = 200

    are essentially the same query when generalized as:

    select * from customer where custno = ?.

    This is what Guardium logs by default. In order to see the actual values (100 and 200 in the example above) you will need LOG_FULL_DETAILS in your policy.

    Thanks,
    Ravi.
    • SystemAdmin
      SystemAdmin
      483 Posts
      ACCEPTED ANSWER

      Re: Show SQL Values in Report Results

      ‏2013-01-25T00:29:47Z  in response to rsubramani@us.ibm.com
      As was mentioned earlier you need to have a policy of LOG FULL Details, but in addition you will also have to change the attribute in your report from Entity of "SQL" -> SQL to the Entity "FULL SQL" -> FULL SQL using the Query Builder
  • RayUsingAllDBtypes
    RayUsingAllDBtypes
    24 Posts
    ACCEPTED ANSWER

    Re: Show SQL Values in Report Results

    ‏2013-01-25T01:53:16Z  in response to SystemAdmin
    ***As you see it seemed like a simple question with a complex answer:***

    ***1--You need the RULE ACTION as LOG FULL DETAILS***
    ***and***

    ***2--You need a new Query/report with FULL SQL as the starting Entity***
    ***(but I think you cannot edit an old report's entity)***

    ***good luck!***