Managing object audit in one database

About this task

The Objects in Datasource <name> window lists all objects found by the classification processes run on this datasource. Objects can be found by more than one classification process.

When objects have been identified by the classification process but were not enabled automatically for object audit, New objects found appears above the objects table. Click New Only to filter for all new found objects that require handling. New objects could be found every time the classification runs. When there are no New objects, you are up to date with the new objects evaluation.

Review the data sources periodically, checking for New objects, and optionally adding or removing objects from the object audit. For example, you might remove objects that do not need auditing but were automatically added, or if a database is having performance issues. Or you might identify a suspicious object that is not audited, and add it to the object audit.

Use the classification filter for objects that you know must be audited. Select all objects in the filtered view, and enable object auditing.

Procedure

  1. If you assigned the Classification process before you enabled DB Audit, run the Classification once now and wait a few minutes (or wait for the next scheduled run) for Guardium® to identify objects.
  2. Select one datasource. Consider using the filter New objects found to identify datasources with new objects.
  3. Select DB Auditing > Manage Object Auditing.
    The Manage Object Auditing window opens listing all objects found by the classification processes to which this datasource is assigned.
  4. Consider using the filter New only to identify all objects classified as New.
  5. Select one or more objects (rows) in the table.
  6. To enable audit trail, select Actions > Enable Audit.
    The system responds with the success or failure of the operation.
  7. To clear the New flag, click Actions > Clear New flag.
  8. To disable audit trail, select Actions > Disable audit.
    The system responds with the success or failure of the operation.