I have a question that probably has a very simple answer, but I'm just not sure how to do it. I have created reports in Guardium, and the "sql" field shows question marks (?) instead of the actual value. For instance, the sql field in the report might look like this:
WHERE ID = ?
Management wants to see the actual value. How can I change this so that the actual value is displaying instead of the question mark?
Thank you for your help,
This topic has been locked.
5 replies Latest Post - 2013-01-25T01:53:16Z by RayUsingAllDBtypes
Pinned topic Show SQL Values in Report Results
Answered question This question has been answered.
Unanswered question This question has not been answered yet.
Updated on 2013-01-25T01:53:16Z at 2013-01-25T01:53:16Z by RayUsingAllDBtypes
Muris 270004S0UJ42 PostsACCEPTED ANSWER
Re: Show SQL Values in Report Results2013-01-24T08:01:16Z in response to SystemAdminHi,
Check rules inside Policy you are using. You are probably using action 'Log Masked Details' so that's the reason why you have question marks in reports. Change it to 'Log Full Details' and it should work.
Re: Show SQL Values in Report Results2013-01-24T18:32:14Z in response to MurisHi,
thank you for the response. I wasn't trying to pull the data using any kind of policy. I had setup a new query in the query builder to monitor activity from users on a certain server. When I create a report based on that query, the report just has "?" in the sql value instead of the actual value. I was hoping to find a way to configure that, if that's possible.
firstname.lastname@example.org 120000HESE21 PostsACCEPTED ANSWER
Re: Show SQL Values in Report Results2013-01-24T19:02:21Z in response to SystemAdminHi:
You will need LOG_FULL_DETAILS in your policy, in order to see the actual values. Guardium, by default, stores a generalized form of the query.
select * from customer where custno = 100 and
select * from customer where custno = 200
are essentially the same query when generalized as:
select * from customer where custno = ?.
This is what Guardium logs by default. In order to see the actual values (100 and 200 in the example above) you will need LOG_FULL_DETAILS in your policy.
Re: Show SQL Values in Report Results2013-01-25T00:29:47Z in response to email@example.comAs was mentioned earlier you need to have a policy of LOG FULL Details, but in addition you will also have to change the attribute in your report from Entity of "SQL" -> SQL to the Entity "FULL SQL" -> FULL SQL using the Query Builder
RayUsingAllDBtypes 270001VV1824 PostsACCEPTED ANSWER
Re: Show SQL Values in Report Results2013-01-25T01:53:16Z in response to SystemAdmin***As you see it seemed like a simple question with a complex answer:***
***1--You need the RULE ACTION as LOG FULL DETAILS***
***2--You need a new Query/report with FULL SQL as the starting Entity***
***(but I think you cannot edit an old report's entity)***