Creating data source profiles

12.1 and later Create a data source profile or multiple data source profiles to configure universal connectors on managed units. You can also install, uninstall, and reinstall the created profiles along with enabling, disabling, restarting, and troubleshooting universal connectors.

About this task

From the Datasource Profile Management page, you can create a single data source profile or multiple data source profiles at once.

Creating a data source profile

Procedure

  1. In Guardium Data Protection Central Manager, or Standalone system, click Manage > Universal Connector > Datasource Profile Management.
  2. To create a data source profile, click the Add icon new and enter values in the following fields. 
    Table 1. Managing data source parameters
    Parameters Description
    Name Enter the name of the data source connection.
    Description Enter the data source description.
    Plug-in Select the plug-in.
    Label Enter the label for the data source profile to easily search the profile by label.
    Credential Enter the credentials that you created in the Credential Management page. To create new credentials, click the Add icon new to create credentials. For more information, see Creating credentials.
    Attention: This field is displayed only if the plug-in requires credentials.
    Kafka cluster Select the appropriate Kafka cluster from the available Kafka cluster list or to create a Kafka cluster, see Creating Kafka clusters.
    Attention: This field is displayed only if the plug-in requires the Kafka cluster.
    Parameters Depending on the type of plug-in that is selected in the Plug-in field, enter the parameters value.

    See the parameter details in the specific readme file of the plug-ins. See all the available plug-ins.

    For example, if you select OUA over JDBC Connect plug-in, then see Oracle Unified Audit Universal Connector Over JDBC Connect readme file.

  3. Click OK.
  4. Select a profile, and select the relevant installation option from the Install list.
  5. In the Collectors tab, select one or more collectors to install, uninstall or reinstall the data source profile.
  6. Click Run now to install, uninstall or reinstall, or click Schedule to run later.
  7. In the Groups tab, select a managed unit to install, uninstall, or reinstall the data source profile.
  8. Select from the available managed unit groups or to create a new managed unit group, click new add icon, enter the Group name, and select the managed units. For more information, see Creating managed unit groups.
  9. Click Run now to install, uninstall or reinstall, or click Schedule to run later.
    Important: For the OUA over JDBC connect 2.0 and OUA MultiTenant over JDBC connect 2.0 plug-ins, a single collector can handle up to 250 data source profiles. For other plug-ins, a single collector can manage a maximum of 10 data source profiles.
  10. Click Actions and select one of the following applicable options: 
    Enable UC
    Use this option to enable the UC on the applicable collectors.
    Disable UC
    Use this option to disable the UC on the applicable collectors.
    Restart UC
    Use this option to restart the UC on the applicable collectors.
    Troubleshoot
    Troubleshoots the collector for errors in the uc-logstash.log and logstash-plain.log file.
  11. Click OK.
  12. Optional: The following are options to test the connection of data source profiles.
    Restriction: Test connection option is only available for OUA MultiTenant over JDBC connect 2.0 and OUA over JDBC connect 2.0 plug-ins for Guardium Data Protection version 12.1 along with applicable bundle 12.0p120 and universal connector patch 12.0p5002.
    1. Select one or more profiles and click Test connection.
    2. Select a data source profile, click edit icon, and then click Test connection.
    You can check the connection status in the Status column on the Datasource Profile Management page.
  13. If required, download the server (data source) CA certificate to make sure that Syslog accepts the communication with data source.
    1. Click Download server CA.
    2. Copy the certificate to the database server and note the location. For more information, see Installing an appliance certificate to avoid a browser SSL certificate challenge.

Creating multiple data source profiles

12.1 and later You can create multiple Universal Connector data sources profiles by using a .csv profile template file. By using the template, you can minimize manual labor, boosts efficiency, and aim for uniformity in profile configurations.

About this task

Restriction: This feature is applicable only on Guardium Data Protection version 12.1 along with applicable bundle 12.0p120 and later and universal connector patch 12.0p5002.

Downloading the profile template

Procedure

  1. In the Guardium Data Protection Central Manager or a stand-alone system, click Manage > Universal Connector > Datasource Profile Management.
  2. Click Actions > Download profile template and update the following.
    • Select a plug-in.
    • If the plug-in requires, enter the credentials. To create new credentials, refer to the Creating credentials topic.
    • If the plug-in requires, enter the Kafka cluster name. To create a new Kafka cluster, refer to the Creating Kafka clusters topic.
    • If the plug-in requires, upload the necessary supporting files. For example, upload the JDBC library for the OUA over JDBC Connect plug-in. When you configure OUA over JDBC connect 2.0 and OUA Multitenant over JDBC connect 2.0 plug-ins, you must add separate JAR files for each plug-in.
      Important: When entering the Upload name during the upload of supporting files for a plugin, make sure that the same name is used in the template. For example, when choosing the AWS MSSQL over JDBC plugin and uploading the JDBC driver library, and you enter an Upload name, make sure to use the same upload name in the .csv file when updating it for multiple data source profiles.
  3. Click Download.
    A .csv file that contains the template for the selected profile is generated. The first row displays the selected values such as the credential name, cluster name, and the default parameter values recommended by the plugin.

Updating the profile template

Procedure

Add new rows to the profile template file downloaded in the previous step.
Refer following template format to create multiple data source profiles at once.
Table 2. Template format
Column Names Description Required
profile_definition_name The plug-in name. Use the same name in all new rows. Yes
name Enter a unique name for the data source connection.

If the connection name from the template matches with an existing connection name, you can update the parameters of the existing connection by selecting the Update existing profiles on name match option when you upload the CSV file. If the Update existing profiles on name match option is not selected, a Duplicate profile name error is displayed.

Yes
description Enter a data source description. No
credential_name Enter your credentials. Create credentials by using the Credential Management page before you upload the template. Yes
cluster_name Enter the Kafka Cluster name in the Guardium environment. Create the cluster by using the Kafka cluster management page before you upload the template. Yes
other parameters Depending on the type of plug-in that is selected in the Plug-in field, enter the parameters value. The parameter varies according to the selected plug-in.

See the parameter details in the specific readme file of the plug-ins. See all the available plug-ins.

For example, if you are creating multiple profiles for the OUA over JDBC Connect plug-in, then refer Oracle Unified Audit Universal Connector Over JDBC Connect readme file. Each plug-in contains a readme file.

Important: Do not update the default values for any parameters.
If required

Uploading .csv file to create multiple data source profiles

Upload the .csv file that contains details of data source profiles to be created.

Procedure

  1. On the Datasource Profile Management page, click add icon icon, Upload from CSV, Browse, and select the .csv file that you downloaded from the Datasource Profile Management page, Actions > Download profile template option and later updated.
    Select the following options, if applicable.
    • Update existing profiles on name match: If connection name from the template matches with an existing connection name, then that profile details are updated.
    • Test connection for imported profiles: Test the connection is appropriate and working for the created profiles. You can check the connection status in the Status column, on the Datasource Profile Management page.
  2. Click Upload.
  3. Optional: Options to test the connections of data source profiles.
    Restriction: Test connection option is only available for OUA MultiTenant over JDBC connect 2.0 and OUA over JDBC connect 2.0 plug-ins.
    • Select one or more profiles, and click Test connection.
    • Select a data source profile, and click the Edit icon . Then click Test connection.
    You can check the connection status in the Status column on the Datasource Profile Management page.
  4. Select a profile, and select the relevant installation option from the Install list.
    Successfully test the connection for OUA MultiTenant over JDBC connect 2.0 and OUA over JDBC connect 2.0 plug-ins before you install the profiles. Unless you test the connection, the Status column is blank, and the UI displays the following message.
    Cannot install profiles that have not been successfully tested.

Exporting data source profiles

You can export data source profiles from the Datasource Profile Management page in the CSV format.

Procedure

  1. On the Datasource Profile Management page, select the profiles of the data source type that you want to export. Make sure that the profiles you select are of the same type of data source.
  2. Click the Download as csv icon to export the created profiles.
    The selected data source profiles are downloaded in a CSV file.