Transform parameters

Transform actions support additional parameters not available with other actions.

Source (SOURCE)

Source is used as a filter to tell the action which value should be matched. Values include:

ANALYZED CLIENT IP (ANALYZED_CLIENT_IP)
APP USR NAME (APP_USER_NAME)
CLIENT HOST NAME (CLIENT_HOST_NAME)
CLIENT OS NAME (CLIENT_OS_NAME)
DB NAME (DB_NAME)
DB USER (DB_USER)
OS USER (OS_USER)
SERVER DESCRIPTION (SERVER_DESC)
SERVER HOST NAME (SERVER_HOST_NAME)
SERVER IP (SERVER_IP)
SERVER OS NAME (SERVER_OS_NAME)
SERVICE NAME (SERVICE_NAME)
SOURCE PROGRAM NAME (SOURCE_PROGRAM)
STATEMENT (STATEMENT)

The source parameter defines the content used for search parameters in transform actions.

Example:

TRANSFORM_DB_USER SEARCH_PREFIX = 'CHE' SOURCE = OS_USER OUTPUT_FORMAT = '(.*)'

This copies the value of OS USER to DB USER if OS USER begins with the string CHE.

Mask (MASK)

Mask uses the regular expression defined by the match pattern parameter to search the source and replace (mask) all matched occurrences using the value defined by the output format parameter. Use the mask parameter with match pattern (MATCH_PATTERN) and output format (OUTPUT_FORMAT). For example

Example:

TRANSFORM_OS_USER SEARCH_PREFIX = '?' MATCH_PATTERN = '\d' MASK OUTPUT_FORMAT = '0'

This matches all digits and replaces them with 0, such that if OS USER is ORACLE19 it becomes ORACLE00.

Output format (OUTPUT_FORMAT)

Output format defines the output for transform actions. When source (SOURCE) is specified, the output format can be (.*) to replace the transformed value with the source value. When used with match pattern, custom strings and the contents of regular expression groups like \1 can be used. Specify guardium://empty for empty output.