SSMPHH_12.x - Documentation Index

Table of Contents

• Product overview
  • IBM Guardium
  • What's new in this release
  • Release information
  • Applying feature flags
    • Feature patch reference
  • Product legal notices
    • Trademarks
    • Terms and conditions
    • Privacy policy considerations
    • FIPS 140-2
• Getting started
  • Components and topology
  • Getting started with the user interface
  • Customizing the User Interface
  • Identifying and investigating risks: getting started
  • Smart assistant for monitoring and compliance
  • System view
  • Data activity monitoring
    • Policies and rules
    • Workflows
    • Auditing
    • Classification
  • File activity monitoring on Windows and Unix-Linux file servers
    • File activity monitoring functionality
    • High level workflow for file activity monitoring
  • File activity monitoring for NAS and SharePoint
  • Key concepts and tools
    • Queries and reports
    • Access control
    • User roles
    • Groups
    • Data archive and purge
    • Guardium Installation Manager
• Discover
  • Datasources
    • Creating a datasource definition
    • Creating a datasource group
    • Configuring your datasource
      • Amazon DynamoDB
      • Amazon ElastiCache
      • Amazon Neptune
      • Amazon Redshift
      • Apache Cassandra
      • Aster
      • Azure MySQL
      • Azure PostgreSQL
      • Cloudera Manager
      • CockroachDB
      • Couchbase
      • DataStax Cassandra
      • Db2
      • Db2 for i
      • Db2 for z/OS
      • EDB PostgreSQL
      • GreenplumDB
      • Guardium Big Data Intelligence
      • Hive
      • Informix
      • MariaDB
      • MongoDB
      • MS SQL Server (DataDirect - Dynamic Port)
      • MS SQL Server (DataDirect)
      • MS SQL Server (Microsoft - Dynamic Port)
      • MS SQL Server (Microsoft)
      • MySQL
      • Neo4j
      • Netezza
      • Oracle (Data Direct - Cloud Wallet)
      • Oracle (Data Direct - Service Name)
      • Oracle (Data Direct - SID)
      • Percona MySQL
      • PostgreSQL
      • SAP HANA
      • Snowflake
      • SQL DB Azure
      • Sybase
      • Sybase IQ
      • TERADATA
      • Text datasources
    • Configuring custom properties for your datasources
    • Working with existing datasources
    • Reporting on datasources
    • Defining a datasource using a service name
    • Managing KDC definitions
    • Managing datasource credentials with CyberArk
      • CyberArk deployment overview
      • Setting up the CyberArk vault system
        • Creating an application ID on CyberArk
        • Adding and removing account permissions on CyberArk
      • Deploying CyberArk on your Guardium system
        • Downloading and installing the CyberArk SDK patch
        • Installing CyberArk
        • Configuring CyberArk on your Guardium system
        • Defining Guardium datasources to access CyberArk
      • Upgrading the CyberArk SDK on a central manager or standalone system
      • Upgrading the CyberArk SDK on a managed unit
      • Uninstalling CyberArk
    • Managing datasource credentials with AWS Secrets Manager
      • Gathering required information
      • Creating a secret user
      • Creating a secret key
      • Selecting the authentication type and setting up roles
        • Authenticating by using security credentials
        • Authenticating by using IAM Role
          • Authenticating by using IAM Role for AWS Secrets Manager
          • Authenticating by using IAM Role for AWS database service
        • Authenticating by using IAM instance profile
      • Configuring the AWS Secrets Manager on your Guardium system
      • Defining Guardium datasources to access AWS Secret Manager
    • Managing datasource credentials with HashiCorp
      • Gathering required information
      • Creating a HashiCorp Policy
      • Creating and importing a client certificate
      • Configuring HashiCorp on your Guardium system
      • Defining Guardium datasources to access the HashiCorp vault
  • Database Auto-discovery
  • Cloud database service protection
    • Cloud database service protection Amazon AWS setup
      • Define AWS IAM for data streams
      • Define, modify, and delete AWS cloud DB service accounts
      • Discover and configure AWS data streams
      • Manage AWS data streams
    • Cloud database service protection Azure setup
      • Define, modify, and delete Azure cloud database service accounts
      • Monitor Azure event hubs
      • Manage Azure event hubs
    • Cloud database service protection with native audit
      • Cloud database service protection workflow
      • Define AWS IAM for native audit
      • Create, modify, delete cloud accounts
      • Discover cloud databases
      • Catalog and manage databases
      • Manage Classification and Vulnerability Assessment
      • Configure database auditing
      • Manage object auditing
        • Managing object audit in one database
        • Managing object audit in multiple databases
  • Database discovered instances rules
    • Database discovered instance rules scheduler
    • Adding reports and alerts for inspection engine changes
  • Classification
    • Classification process performance
    • Classification Rule Handling
  • Discover Sensitive Data
    • Discovery scenarios
    • Name and description
    • What to discover
      • Rule Criteria
      • Actual Member Content
    • Where to search
    • Run discovery and review report
      • Remove false-positives from discovery results
    • Audit
    • Scheduling
  • Runtime sensitive-object identification
  • Regular Expressions
  • FAM discovery and classification in Windows and UNIX-Linux file servers
    • Installing and activating the FAM discovery agent (crawler) on UNIX servers
    • Installing and activating FAM discovery agent (crawler) on Windows servers
    • File discovery and classification GIM parameters
    • Rules for GDPR File Activity
  • File discovery and classification for NAS and SharePoint
    • Supported platforms
    • Scan Permissions
    • Installing client software
    • Configure Scan Settings
    • View Scan Results
    • Creating User-Defined Criteria
  • Entitlement Optimization
    • Enable and configure entitlement optimization
    • Entitlement Optimization What's New
    • Entitlement Optimization Users and Roles
    • Entitlement Optimization Recommendations
    • Entitlement Optimization browse entitlements
    • Entitlement Optimization What If
• Protect
  • Active threat analytics
    • Investigating cases
    • Threat descriptions
    • Creating threat categories from policy rules
    • Creating threat categories from threshold alerts
    • Excluding items from Active Threat Analytics
    • Active threat analytics setup
    • Managing threat processes
    • Closing cases in bulk
    • Reopening cases in bulk
  • Risk Spotter
    • Risk Spotter functions
    • Risk Spotter risk indicators
    • Use the Risk Spotter results
    • Create a Dynamic Auditing policy
    • Configure and enable Risk Spotter
  • Outliers detection
    • Quick start for outlier detection
    • Enabling and disabling outliers detection
    • Interpreting data outliers in the investigation dashboard
    • Interpreting file activity outliers in the investigation dashboard
    • Switching DB and OS users
    • Grouping users and objects for outliers detection
    • Outliers detection clustering
  • Real-time trust evaluator
    • Configuring the trust evaluator
    • Viewing trust evaluator status
    • Adding post-training automation
    • Configuring the connections table
  • Policies
    • Understanding policies
      • Rule types, categories, classifications
      • Minimum counts and reset intervals
      • Continue to next rule
      • Record values with policy violation
      • Values and groups of values in rules
      • Matching patterns with regular expressions
      • Special pattern tests
      • Log flat
      • Rules on flat
      • Selective audit trail
      • Analyzer rules
      • Character sets
    • Session-level policies
      • Creating session-level and advanced session-level policies
        • Creating session-level policies
          • Creating tuple parameters for session-level policies
        • Creating advanced session-level policies
      • Using session-level and advanced session-level policies
        • Wildcards
        • Tokens
        • IPv6 support
        • Groups
        • Grammar
        • Unsupported databases for session-level policies
      • Criteria
      • Tuples
      • Actions
        • Audit and ignore session actions
        • Mark session actions
        • Alert and Log actions
        • Parse actions
        • Configure actions
        • Transform actions
          • Transform parameters
        • Exception actions
        • Extrusion actions
      • Action parameters
        • Label action and criteria
        • Distinct parameter
        • Track option
        • Search parameters
      • Session-level policy examples
        • Ignoring sessions example
        • Log LOGIN_FAILED sessions only example
        • REQUEST_ERROR example
        • Add DB name on failed login example
        • Get correct service name (MS SQL Server) example
        • Ignoring exceptions examples
        • Firewall and latency issues examples
        • Sniffer overload issues examples
        • Query masking examples
        • Correct IP address (Oracle) example
        • Show SQL schema names example
        • Server and S-TAP IP addresses example
        • User authentication (Oracle) example
        • Redacting data example
        • Hostname caching example
        • Ignore specified users example (MongoDB)
        • Scheduling with SESSION_START examples
        • Logging access activity for trusted sessions example
        • Creating a custom exception message example
        • Find name in SQL query example
        • Detect local admin example
        • Strict username example (Oracle)
        • Login information dump example
      • Known limitations
    • Policy rule actions
      • Blocking rule actions
      • Alerting rule actions
      • Logging or ignoring rule actions
      • Understanding ignore actions
      • Log full details
      • Set character set
      • Rule definition fields
    • Creating and installing a policy and policy rules
    • Tagging policy rules
      • Importing rules by tag
      • Adding tags while defining policy rules
      • Managing policy rule tags
    • Using the Policy Installation tool
    • Using compliance templates
    • Running policy analyzer and reviewing results
    • Security incident policies
      • Security anomalies
      • Access to unaudited sensitive data
      • Administrative user accessing sensitive data
      • Administrative users and applications
      • All users
      • Credential stuffing attack
      • Repeated failed logins or possible denial of service attack
      • Suspicious user activity with sensitive data (user not privileged)
      • Quarantine users with multiple failed logins
  • Managing correlation alerts
  • Incident Management
  • Query rewrite
    • How query rewrite works
    • Using query rewrite
      • Enabling query rewrite
      • Creating query rewrite definitions
      • Testing query rewrite definitions
      • Defining a security policy to activate query rewrite
      • Creating a custom report to validate query rewrite results
  • File Activity policies for UNIX and Windows file servers
    • Using rules for file activity policies
    • Create a FAM policy and its rules from scratch for Windows and UNIX servers
    • Creating a FAM policy rule from the Investigative Dashboard Entitlements tab
  • File activity policies for network-attached storage (NAS) and SharePoint
    • Creating file activity policies for network-attached storage (NAS) devices
    • Creating file activity policies for SharePoint
    • Creating a DAM access policy to monitor files on NAS and SharePoint
  • Configuring consolidation of FAM MS Office events
• Using the executive dashboard
• Investigation Dashboard for data
• Filtering data and saving filters in the investigation dashboard
• Monitor and audit
  • Enabling and disabling the Investigation Dashboard
  • Security monitoring policies
    • Prerequisites
    • Install a data security monitoring policy
      • Understand the basic data security monitoring policy rules
    • Create reports for data security monitoring
      • Create an Admin Users Activity report
      • Create an Administration Commands Execution report
    • Next steps for data security monitoring
  • Smart assistant for compliance monitoring
    • Databases
      • Add an individual database
      • Import multiple databases
      • Reconciling database inventory
    • Applications
      • Add an individual application
      • Import multiple applications
    • Compliance summary
    • Application summary
    • Set up compliance monitoring or application data monitoring
      • Prerequisites
      • Select compliance type
      • Select databases or applications to monitor
      • Search for sensitive data
      • Select databases for vulnerability assessment
      • Summary
  • Data compliance
    • Setting up a custom data compliance program
      • Creating a data compliance control
      • Creating data compliance thresholds
    • Monitoring your organization's data compliance
  • Investigation Dashboards
    • Enabling File Activity in the investigation dashboard
    • Accessing the investigation dashboard
    • Using the Sankey chart
    • Using Data In-Sight
    • Investigation Dashboard for files
    • Filtering data and saving filters in the investigation dashboard
    • Filtering an individual chart
    • Creating, saving, and exporting investigation dashboards
    • Using the topology view
    • Local and distributed search
    • Monitoring and automatic recovery for the Investigation Dashboard
      • Viewing the Investigation Dashboard's status in deployment health views
      • Viewing Investigation Dashboard issues in reports
      • Viewing the Investigation Dashboard Issues alert for the Investigation dashboard
      • Addressing Investigation Dashboard issues
      • Running manual intervention for Investigation Dashboard issues
  • Threat Detection Analytics
    • Characteristics of an SQL injection attack
      • SQL injection detection for stored procedures and dynamic SQL
    • Characteristics of a stored procedure attack
    • Enabling and disabling threat detection analytics
    • Viewing case reports
    • Activating the audit process workflow for threat analytics
    • Working with threat diagnostic dashboards
      • Investigating SQL injection threats
      • Investigating stored procedure threats
  • Data Protection Dashboard
  • Building audit processes
    • Audit process task types
    • Audit process receivers
    • Exporting audit results
    • Distributing workflow through Guardium groups
    • Audit Process To-Do List
    • Comparing discovery and classification results
    • Using the host references report
  • Audit and Report
  • External data correlation
  • Privacy sets
  • Custom Alerting
  • Flat Log Process
  • Running database entitlement reports
  • Distributing workflow through Guardium groups
  • User Identification
    • Identify users by using the Application User Translation
    • Identify Users with API
    • Identify Users via Stored Procedures
  • Value Change Auditing
  • Creating an Audit Database
  • Monitored Table Access
  • Installing and activating the FamMonitor on Windows servers
    • Install the FamMonitor installation package with the wizard
    • Install the FamMonitor bundle with GIM
    • FamMonitor GIM installation parameters
    • Install and uninstall the FamMonitor installation package with command line
    • FamMonitor command line installation parameters
    • FamMonitor general parameters
  • File Activity Monitor for NAS and SharePoint
    • Supported platforms
    • Monitoring Permissions
    • Installation
    • Configuration
    • Viewing Results
    • Uninstallation
  • Using PCI/DSS Accelerator to implement PCI compliance
  • Workflow Builder
    • Creating customized workflows
    • Using customized workflows
    • Opening Workflow Process Results
• Reports
  • Predefined reports
    • Predefined admin reports
    • Predefined user reports
    • Predefined common reports
  • Creating dashboards and adding reports
  • Opening the investigation dashboard, filtered for report entities
  • Viewing reports
    • Modifying the runtime parameters
    • Refreshing reports
    • Exporting a report
    • Viewing Drill-Down Reports
    • Ad-hoc process for run once now
  • Using the Query-Report Builder
    • Optimizing queries
    • Creating a new query, modifying an existing query
    • Defining the query name and attributes
      • Managing query security roles
      • Adding a query to a datamart
      • Modifying the query drilldown control
      • Modifying the API assignment
    • Selecting the column display
    • Setting the sort order
    • Defining the Query Conditions
    • Adding a build expression on query condition
    • Having conditions
    • Modifying the report display
  • Domains, Entities, and Attributes
    • Entities and Attributes in the domains
      • Access domain
      • Access Policy domain
      • Aggregation/Archive domain
      • Alert domain
      • Analytic Threat Analytics domain
      • Analytic Outlier Details domain
      • Analytic Outliers Status domain
      • Analytic Outlier Summary domain
      • Application Data domain
      • Audit Process domain
      • Audit Process Log domain
      • Auto-discovery domain
      • BigData Intelligence Buff Usage Monitor domain
      • BigData Intelligence Classification Process Log domain
      • BigData Intelligence Classifier Results domain
      • BigData Intelligence Databases Discovered domain
      • BigData Intelligence Discovered Instances domain
      • BigData Intelligence Exception domain
      • BigData Intelligence Full SQL domain
      • BigData Intelligence Installed Patches domain
      • BigData Intelligence Instance domain
      • BigData Intelligence Outliers List Enhanced domain
      • BigData Intelligence Outliers Summary Enhanced domain
      • BigData Intelligence Policy Violations domain
      • BigData Intelligence Session domain
      • BigData Intelligence STAP Status domain
      • BigData Intelligence System Info domain
      • BigData Intelligence VA Results domain
      • CAS Changes domain
      • CAS Config domain
      • CAS Host History domain
      • CAS Templates domain
      • Catalog domain: entities and attributes
      • Classification Process Results domain
      • CM Buffer Usage Monitor domain
      • Comments domain
      • Custom DB Usage domain
      • DB Default Users Enabled domain
      • Discovered Instances domain
      • Distributed Datamart domain
      • Eagle Eye domain
      • Exceptions domain
      • FAM domain
      • FAM groups domain
      • FAM System domain
      • File Activity Monitor domain
      • Flat Log domain
      • GIM Clients domain
      • GIM Events domain
      • Group domain
      • Guard Process Log domain
      • Guardium Activity domain
      • Guardium Jobs Queue domain
      • Guardium Login domain
      • IMS Event domain
      • Installed Patches domain
      • Installed Policy domain
      • Managed units domain
      • Parser Errors domain
      • Policy Violations domain
      • Policy Violations Summary domain
      • Query Rewrite domain
      • Runtime Sensitive Object Identifier domain
      • Security Assessment Result domain
      • Sniffer Buffer Usage Monitor domain
      • S-TAP Status domain
      • S-TAP status history domain
      • S-TAP Statistics domain
      • S-TAP verification domain
      • Unit Utilization Levels domain
      • User/Role/Application domain
      • VA Summary domain
      • VA Tests domain
      • Value Change domain
    • Database entitlements
      • How use GuardAPI to add a datasource to Sybase IQ reports
  • Custom Domains
  • Data Mart
    • Viewing your data marts
    • Extracting data mart to table
    • Extracting data mart to file
    • Manage predefined data extraction to file
  • Distributed Report Builder
    • Creating a distributed report
  • Working with API calls and reports
    • Mapping APIs to report results
    • Generating API call from reports
  • Working with external feeds
    • Mapping an External Feed
    • Creating an external feed
  • Creating reports for z/OS
    • Built-in reports for Data Sets
    • Report entities and attributes for Data Sets
    • Built-in reports for DB2 for z/OS
    • Example reports for DB2 for z/OS
    • Report entities and attributes for DB2 for z/OS
    • Built-in reports for IMS
    • Example reports for IMS
    • Report entities and attributes for IMS
• Assess and harden
  • Viewing Common Vulnerabilities and Exposures information
  • Introducing Guardium Vulnerability Assessment
    • Database privileges for vulnerability assessments and classification
    • Deploying VA for Db2 for i
    • Using VA with Cloudera
    • Troubleshooting Cassandra
  • Set up your environment for Vulnerability Assessment
  • Types of vulnerability assessments
    • Defining a query-based test
    • Defining a CAS-based test
  • Assessments
    • Creating an assessment
    • Finding an assessment
    • Running an assessment
    • Simplifying vulnerability assessments through containerization
      • Installing and running a containerized scanner
      • Installing the vulnerability assessment scanner on supported cloud environments
        • Deploy and configure the vulnerability assessment scanner
        • Prerequisites, common operations, and advanced configuration
        • Configuration reference and monitoring
        • Installation methods for vulnerability assessment scanner Helm chart
      • Setting the environment variables
    • Viewing assessment results
    • Tuning a test
    • Determining test severity
    • Deleting an assessment
    • Creating a test exception
    • Group exceptions
    • Test detail exceptions
    • Adding custom comments to a test
    • Modifying the database version and patch level
    • VA summary
    • Using the modernized vulnerability management UI
  • IBM Guardium Data Protection app in ServiceNow
  • Required schema change
  • Assessing RACF vulnerabilities
  • Configuration Auditing System (CAS)
    • CAS server authentication with SSL
    • Prerequisites, installing, and running CAS on a Windows server
      • Installing CAS from the CLI
      • Installing CAS with GIM
    • Prerequisites, installing and running CAS on a Linux or UNIX server
      • Locating the Java home directory and version
    • CAS start-up and failover
    • CAS templates
    • Working with CAS templates
    • CAS hosts
    • CAS reporting
    • CAS status
  • License information for Guardium Vulnerability Assessment
    • Example scenarios
• Configuring your Guardium system
  • System Configuration
  • Configuring a baseline
  • Managing data: archive, restore, aggregation, and system backup
    • Planning archiving, storage capacity, and scheduling
    • Managing stored data
      • Configuring the data archive
      • Archiving (audit) results
      • Restoring archived data
        • Restoring archived data on an empty appliance
        • Restoring a few days of recent data
        • Restoring and viewing audit results in the investigation center
    • Exporting (files) results
    • Viewing days whose data was not archived or exported
    • Data and Result catalogs
      • Import catalog entries
      • Export catalog entries
      • Adding, removing, and modifying catalog entries
    • Data aggregation
      • Exporting data
      • Importing data
    • Purging data
      • Configuring data purge
      • Purging data to resolve a full disk when the GUI is down
    • Configuring system backup
    • Restoring a Guardium system
      • Preparing to restore your Guardium system
      • Restoring a standalone collector
      • Restoring a collector with an aggregator that is not centrally managed
      • Restoring an aggregator that is not centrally managed
      • Restoring a centrally managed collector
      • Restoring a centrally managed aggregator
      • Restoring a dedicated central manager (no data aggregation)
      • Restoring default and custom certificates
    • Enabling SSH key pairs for data archive, data export, data mart
    • Transferring data to a remote host by using SSH key pairs for authentication
    • Configuring external storage
      • Configure an Amazon S3 (Amazon Simple Storage Service) target for archive or backup
      • Configuring an Azure target for archive or backup
      • Configuring an IBM COS (formerly Cleversafe) target for archive or backup
      • Configuring an ECS/S3 Compatible target for archive or backup
      • Configuring an NFS backup
      • Configuring an SCP or SFTP target for archive or backup
      • Configuring a Tivoli Storage Manager archive or backup
    • Known limitations for backup and archive
  • Internet Protocol modes
    • Enable IPv4
    • Enable dual IP mode in an existing IPv4 deployment
    • Migrate to IPv6 in an existing IPv4 deployment
    • Enable IPv6 in a new deployment
    • Assign IPv6 addresses to your devices
    • IPv6 limitations, best practices, FAQ, and troubleshooting
  • Network mirroring methods (SPAN , N-TAP) and related inspection engines
  • Configuring inspection engines
    • How IP addresses work
  • Configuring the Guardium portal
    • Configuring authentication
    • Enabling smart card authentication
    • Configuring multi-factor authentication
  • Managing the TLS version
  • Global profile
    • The alert message template
  • Configuring the alerter
    • Configuring the alerter for S/MIME mail encryption
  • Facility and priority of syslog messages
  • Anomaly Detection
  • Session Inference
  • Allow (approve) S-TAP connection to Guardium (S-TAP certification)
  • IP to Hostname Aliasing
  • Configure Permission to Socket connection
  • Configuring generative AI
• Managing access to Guardium
  • Understanding Roles
  • Access for default roles and applications
  • Managing roles and permissions
  • Creating a role with minimal access
  • Managing users
  • Managing Guardium credentials with CyberArk
  • Creating a user who can run GuardAPI commands
  • Importing users from LDAP
  • Data Security - User Hierarchy and Database Associations
• Central Management
  • Guardium Component Services
  • Implementing Central Management
    • Implementing Central Management in a New Installation
      • Registering Units
      • Unregistering a Managed Unit
      • Synchronizing Portal User Accounts
    • Implementing Central Management in an Existing Installation
  • Using Central Management Functions
    • Managing expiring certificates
    • Deployment health views
      • Configuring a central manager for the deployment health views
      • Deployment health topology and table views
      • Deployment health dashboard
      • Scenario: Troubleshooting overloaded systems using the deployment health topology view
    • Create an enterprise hub or cross-CM health view
    • Viewing aggregated deployment health data
    • Managing patches on a central manager or enterprise hub
    • S-TAP and GIM dashboard
    • Create and manage S-TAP clusters
    • Modernizing data collection with the Edge Gateway
      • Deployment considerations for Edge Gateway
      • Preparing the GDP environment for Edge Gateway
      • Setting up an Edge Gateway
      • Monitoring edge gateways
      • Upgrading Edge Gateway
      • Deploying Edge by using Terraform
      • Downloading Edge Images
      • Using an external image registry for Edge
      • Configuring data streaming on Edge
    • Enterprise load balancing
      • Enabling enterprise load balancing
      • Associating an entity group with managed units for load balancing
      • Restarting (resynchronizing) S-TAPs for enterprise load balancing
      • Viewing the enterprise load balancing load map
      • Viewing an enterprise load balancing activity report
      • Enterprise load balancing configuration parameters
    • Deployment inventory
    • Resource deployment view
    • Monitoring managed units
    • Creating managed unit groups
    • Installing security policies on managed units
    • Central patch management
    • Distributing authentication configuration
    • Distributing configurations
    • Distributing configuration profiles from central managers
    • Distributing configuration profiles from the enterprise hub
    • Distribute custom tables
    • Central manager redundancy
• Managing your Guardium system
  • Guardium Administration
  • Certificates
    • Installing an appliance certificate to avoid a browser SSL certificate challenge
    • Configuring Guardium-S-TAP communication by using an SSL certificate
    • Identify expired certificates and certificates that will expire within six months
    • Using GuardAPI to retrieve certificates
    • Managing certificates by using Venafi
      • Creating a Venafi instance
      • Configuring Venafi for GUI and sniffer certificates
      • Configuring Venafi for GIM certificates
    • Restoring the Guardium Insights certificate
  • Alerts
    • Creating a real-time alert
    • Notifications
    • Predefined alerts
    • Custom Alerting Class Administration
  • System performance and monitoring
    • Unit utilization and inspection core performance
      • Buffer usage monitor report
      • Unit utilization and Unit utilization details reports
      • Performance issue: buffer usage process not running
      • Performance issue: analyzer queue overflow
      • Performance issue: logger queue overflow
      • Configuring unit utilization data processing
    • Self Monitoring
      • Monitoring with SNMP
      • Running Query Monitor
    • Services Status panel
  • Scheduling
    • Job dependencies
    • Viewing job history
  • Aliases
  • Dates and Timestamps
  • Building Time Periods
  • Cipher suites
  • Comments
  • Customer uploads
  • Stream Guardium data to another application
  • Long term retention
    • Configuring long term retention
    • Data Lake Reports
      • Custom reports for long term retention
      • Running a report
      • SQL for predefined reports
    • Central Manager view
    • Maintenance log
    • Datamart extraction and ingestion reports
    • Long term retention views and tables
  • Big Data Intelligence
    • Big Data Intelligence with data marts
      • Configure key pair authentication for GBDI file extraction
    • Big Data Intelligence with data streaming
      • Configure GBDI data streaming
  • Exporting and importing definitions
  • Remote loggers
  • Manage Custom Classes
  • GDPR readiness: Considerations when configuring Guardium
  • Groups
    • Groups overview
    • Using the group builder
      • Creating and editing groups
      • Viewing group membership and where groups are used
      • Populating groups
        • Importing from external datasources
        • Importing from IBM Knowledge Catalog
    • Using groups in queries and policies
    • Example: Using groups to create rules and policies
    • Predefined Groups
  • Security Roles
  • Installing patches
  • Support Maintenance
• Product integration
  • Configure BIG-IP Application Security Manager (ASM) to communicate with Guardium system
  • Embedded integrations
  • PIM integration
  • Configuring an external ticketing system
  • Configuring vulnerability scanner agents
  • Integrating with IBM Bob
  • QRadar and Guardium integration
  • OPTIM to Guardium Interface
  • Combining real-time alerts and correlation analysis with SIEM products
  • CEF Mapping
  • LEEF Mapping
  • Integrating with Unified Discovery and Classification
• Troubleshooting problems
  • Techniques for troubleshooting problems
    • Getting fixes from Fix Central
    • Running must gather in the UI
    • Running MustGather from the CLI
    • Running the slon looper utility
      • Configuring the slon looper utility
    • Must gather for UNIX-Linux S-TAP
    • Must gather for Windows S-TAP and other Windows agents
      • Running Must Gather V3.0
    • Exchanging information with IBM
  • Problems and solutions
    • User interface
      • Changes are not saved when you add an inspection engine
      • Duplicate identifiers detected
      • HTTP error 403
      • Java.lang.IllegalStateException
      • Pages are not loading correctly
    • Policies
      • Query does not appear in the co-relation alert definition
      • Rule does not trigger
      • REDACT function causes overly masked result
      • REDACT - Working with regex on Windows DB servers
      • SSH sessions and automated CRON jobs that log in to your Oracle database are shown as failed logins
    • Reports
      • Cannot modify the receiver table for an Audit Process after it has been executed at least once
      • Cannot see multi-byte characters
      • File system is almost full
      • Guardium audit reports viewed in Microsoft Excel have rows with unexpected characters
      • Reports show IP address as 0.0.0.0
      • Request was interrupted or quota exceeded error message
      • Scheduled Job Exceptions every 5 minutes
      • Scheduled jobs exception: merge required, delay executing process
      • The database user is not shown correctly in Guardium reports when you monitor Teradata
      • Unexpected results in Guardium reports with embedded commands
    • Assess and harden
      • CAS is not working with Java 1.7 on Windows
      • Vulnerability Assessment exception group members appear in failed test
    • Configuring your Guardium system
      • Cannot configure STAP after upgrade
      • Guardium fails to recognize the network device VMXNET x
      • Guardium network interface error after system board replacement
      • SSLv3 is enabled
      • Unable to import backup files by using Azure
      • Resolving Kerberos authentication issues for MSSQL datasources
    • Access management
      • Cannot log in to Guardium except as admin or accessmgr
      • Guardium accessmgr password reset
      • Guardium CLI password reset
    • Aggregation
      • Cannot convert Guardium collector to aggregator
      • Data Export configuration change from a Guardium managed system's GUI fails with error
      • Difference between audit process results and report
      • HY000 errors after restoring the configuration in an aggregator
      • UI banner warning: Data not exported or archived
      • Health alerts and UI banner warning: Old partitions found
    • Internal database
      • Why is the Guardium internal database is filling up
      • Managed unit database is filling up
      • Purging off some old audit results from the Guardium appliance
      • Resolving internal database full problems
    • Central management
      • A user is disabled in a Guardium managed unit, but shows as enabled on Central Manager
      • Central Manager does not recognize the new version of upgraded units
      • Scheduled tasks do not fire at the scheduled time
      • Torque exception in Central Management view of GUI
    • S-TAPs and other agents
      • Error opening shared memory area when you configure Guardium COMM_EXIT_LIST for DB2
      • Guardium fails to collect shared memory traffic from Informix
      • High CPU and I/O Use in Guardium S-TAP host
      • UNIX S-TAP cannot start: buffer size too large
      • S-TAP does not start automatically on Linux
      • S-TAP returns not FIPS 140-2 compliant
      • The K-TAP kernel module is still present after the uninstallation of S-TAP
      • Windows S-TAP service crashes on startup with error ID 1000
      • S-TAP is not capturing A-TAP traffic
      • Linux S-TAP is not capturing Db2 exit traffic
      • Insufficient memory when installing UNIX S-TAP
    • Collectors
      • Nanny process is killing sniffer
      • Sniffer cannot connect to UNIX S-TAP
    • Guardium Installation Manager (GIM)
      • Error installing the Guardium Installation Manager (GIM)
      • Guardium Installation Manager (GIM) service does not start in Windows
    • File activity
      • File activity is not logged in investigation dashboard or reports
      • File activity from removable disk is not logged in investigation dashboard
      • File activity appears in reports but not the investigation dashboard
      • Some files missing from classification results
      • Partial file discovery (entitlement) results in reports and investigation dashboard
      • File classification results are missing from reports and investigation dashboard
      • File activity logs
      • FAM bundle fails to install
    • Cloud deployment
      • Assessments not running
      • Certificate hostname mismatch error
      • Helm installation failed - namespace already exists
      • Pods in CrashLoopBackOff when no jobs available
      • Pods not starting
      • Scanner does not connect to Guardium Data Protection
    • Investigation dashboard
      • Troubleshooting the investigation dashboard and enterprise search
    • Guardium installation
      • Checksum error during S-TAP installation
      • Guardium S-TAP returns an illegal cp: option - f error message
      • Installing a new Guardium patch does not complete
      • Missing file or directory after new Guardium S-TAP installation
      • Partition error installing Guardium
      • Patch installation fails: No such file or directory
    • z/OS
      • z/OS S-TAP fails to show active the Guardium system
• Guardium universal connector
  • Overview
  • Creating and managing secrets
  • Creating and managing credentials
  • Enabling universal connector on collectors
  • Configuring policies for Universal Connector
  • Configuring a universal connector by using the legacy workflow
  • Configuring universal connectors by using a central manager
    • Creating data source profiles
    • Creating Kafka clusters
  • Integrating universal connector with HashiCorp Vault
    • Configuring the HashiCorp Vault
    • Creating a new credential definition
  • Managing Kafka connector health
  • Monitoring connector and data flow status
  • Troubleshooting universal connectors
    • OUA over Kafka JDBC connector version 2.0
    • Changing OUA user password in Keystore
    • Error ShutdownWatcherExt:173
    • Logstash StackOverflow error due to large plug-in configuration file
    • Universal connector and Tomcat server does not restart after power on and off
    • Troubleshooting tool
• Windows: S-TAP user's guide
  • Windows: S-TAP authentication guidelines
    • Windows: S-TAP protocol 8
  • Windows: Install, upgrade, and uninstall the S-TAP agent
    • Windows: Install S-TAP agents installation flow
    • Windows: S-TAP monitoring mechanisms support matrix
    • Windows: Auto discovery of database instances during installation and upgrade
    • Windows: Prerequisites: Installing S-TAP
      • Windows: S-TAP disk space requirements
      • Windows: Guardium port requirements for S-TAP
    • Windows: Use GIM to install, upgrade, uninstall the S-TAP
      • Windows: Installing S-TAP agent with GIM Setup by Client
      • Windows: S-TAP GIM installation parameters
      • Windows: Upgrading S-TAP agent with GIM Setup by Client
      • Windows: Uninstalling an S-TAP agent with GIM Set up by Client
    • Windows: Use interactive installer (wizard) to install and upgrade the S-TAP
      • Windows: Installing S-TAP agent by using the interactive installer
      • Windows: Upgrading the S-TAP agent using the interactive installer
    • Windows: Use CLI to install, upgrade, uninstall the S-TAP
      • Windows: Installing S-TAP agent using the command line interface
      • Windows: S-TAP command line installation parameters
      • Windows: Upgrading S-TAP using the command line
      • Windows: Uninstalling S-TAP using the command line
    • Windows: Remove the S-TAP using Add/Remove Programs
    • Windows: S-TAP installation flow on Oracle RAC
    • Windows: Managing S-TAP when upgrading your database
    • Windows: Managing S-TAP when upgrading your database operating system
    • Windows: When to restart or reboot the database server after installing or upgrading S-TAP
    • Windows: Managing S-TAP when upgrading your database
    • Windows: Managing S-TAP when upgrading your database operating system
  • Windows: Configuring S-TAP
    • Windows: Configuring S-TAP in the S-TAP Control page
      • Windows: S-TAP Control: Details
      • Windows: S-TAP Control: Change auditing
      • Windows: S-TAP Control: Application server user identification
      • Windows: S-TAP Control: Guardium Hosts
      • Windows: S-TAP Control: Firewall Details
      • Windows: S-TAP Control: Inspection Engines
    • Windows: Configuring S-TAP with guard_config_update
    • Windows: Discover database instances
    • Windows: Configuring an Inspection Engine
    • Windows: Inspection engine verification
      • Windows: S-TAP verification
      • Windows: Configure standard verification
      • Windows: Configure advanced verification
      • Windows: Configuring the S-TAP verification schedule
    • Windows: S-TAP load balancing models and configuration guidelines
    • Windows: Configuring the Db2 Exit library
    • Windows: Upload dump files from the S-TAP to the collector and central manager
    • Windows: Build and configure FreeTDS for Guardium
    • Windows: Streaming to Edge Gateway
    • Windows: Editing the protocol 7 and protocol 8 S-TAP configuration parameters
      • Windows: Debug Parameters
      • Windows: Discovery Parameters
      • Windows: Driver Parameters
      • Windows: Firewall Parameters
      • Windows: General parameters
      • Windows: Guardium Hosts (SQLGuard) Parameters
      • Windows: Inspection engine Parameters
      • Windows: Query rewrite Parameters
  • Windows: S-TAP configuration per database type
    • Windows: Db2 configuration for SSL
  • Windows: S-TAP operation and performance
    • Windows: Stopping S-TAP using GIM
    • Windows: Starting S-TAP using GIM
    • Windows: Starting S-TAP without GIM
    • Windows: Stopping S-TAP without GIM
    • Windows: Multi-threading S-TAP for increased throughput
    • Windows: Capturing encrypted MSSQL traffic
    • Windows: Alerts on uninstalled S-TAPs
    • Linux-UNIX: Deleting inactive S-TAPs in a centralized environment
    • Windows: Monitoring S-TAP in the GUI
    • Windows: Log and debug files
    • Windows: S-TAP statistics
    • Windows: Monitoring with the Guardium Agent Monitor
    • Windows: Troubleshooting S-TAP problems
  • Windows: Scheduling S-TAP diagnostics
• Linux-UNIX: S-TAP user's guide
  • Linux-UNIX: S-TAP functionality
    • Linux-UNIX: S-TAP monitoring mechanisms support matrix
    • Linux-UNIX: S-TAP monitoring mechanisms
    • Linux-UNIX: S-TAP to collector encryption
    • Linux-UNIX: UID chains
    • Linux-UNIX: Proxy firewall
    • Linux-UNIX: Using automation tools with the S-TAP and sample scripts
  • Linux-UNIX: Installing, upgrading and uninstalling S-TAP agents
    • Linux-UNIX: Install S-TAP agents installation flow
    • Linux-UNIX: S-TAP installation prerequisites
      • Linux-UNIX: Database version and directory requirements
      • Linux-UNIX: Disk space requirements for S-TAP
      • Linux-UNIX: Port requirements for S-TAP
      • Linux-UNIX: System details and checks
    • Linux-UNIX: Before you start installing S-TAP
    • Linux-UNIX: Use GIM to install, upgrade, uninstall the S-TAP
      • Linux-UNIX: Installing the S-TAP client with GIM Setup by Client
      • Linux-UNIX: S-TAP GIM installation parameters
      • Linux-UNIX: Upgrading an S-TAP agent with GIM Setup by Client
      • Linux-UNIX: Uninstalling S-TAP agent with GIM Setup by Client
    • Linux-UNIX: Use RPM to install, upgrade, uninstall the S-TAP
      • Linux-UNIX: Installing the S-TAP agent with RPM
      • Linux-UNIX: S-TAP guard-config-update parameters for RPM installation and update
      • Linux-UNIX: Upgrading S-TAP using RPM
      • Linux-UNIX: Uninstalling S-TAP using RPM
    • Linux-UNIX: Use shell installer to install, upgrade, uninstall the S-TAP
      • Linux-UNIX: Installing the S-TAP client by using the shell installer
      • Linux-UNIX: S-TAP install script parameters
      • Linux-UNIX: Upgrading the S-TAP agent using the shell installer
      • Linux-UNIX: Uninstalling S-TAP agents using the shell installer
      • Linux-UNIX: Converting a shell managed S-TAP to a GIM managed S-TAP
    • Linux-UNIX: S-TAP upgrade workflows per monitoring mechanism
      • Linux-UNIX: Upgrading S-TAP with databases that use A-TAP
      • Linux-UNIX: Upgrading S-TAP with databases that use an exit library
    • Linux-UNIX: Working with K-TAP
      • Linux-UNIX: Preparing to install K-TAP
      • Linux-UNIX: S-TAP compilation of K-TAP
        • Linux-UNIX: Troubleshooting issue with S-TAP compilation of K-TAP
      • Linux-UNIX: Enrolling a K-TAP signing key
      • Linux-UNIX: Signing and enrolling a locally built K-TAP
      • Linux-UNIX: Copying a K-TAP module with GIM
      • Linux-UNIX: Copying a K-TAP module from the command line
      • Linux-UNIX: Enable K-TAP after installation if P-CAP was installed by default
      • Linux-UNIX: Requesting a K-TAP module
      • Linux-UNIX: K-TAP FAQs
    • Linux-UNIX: Special environments configuration
      • Linux-UNIX: Solaris Zones configuration
      • Linux-UNIX: Configuring Oracle RAC S-TAP and A-TAP
      • Linux-UNIX: Configure S-TAP for Db2 WPAR
      • Linux-UNIX: Configuring S-TAP for SELinux
      • Linux-UNIX: Configuring GIM and S-TAP components for SELinux
      • Linux-UNIX: Activating and deactivating A-TAP on all nodes of a Db2 Cluster
      • Linux-UNIX: Configure delayed cluster disk mounting
    • Linux-UNIX: What to restart or reboot on the database server after installing or updating S-TAP
    • Linux-UNIX: Managing a GIM-, RPM-, and shell-installed S-TAP during a database upgrade
    • Linux-UNIX: Managing GIM clients during a major upgrade of the database server operating system
    • Linux-UNIX: Managing an RPM- or shell-installed S-TAP during a major upgrade of the database server operating system
    • Linux-UNIX: Managing a GIM-, RPM-, or shell-installed S-TAP during a minor or kernel upgrade of the database server operating system
  • Linux-UNIX: Configuring S-TAP
    • Linux-UNIX: Configuring S-TAP in the S-TAP Control page
      • Linux-UNIX: S-TAP Control: Details
      • Linux-UNIX: S-TAP Control: Change auditing parameters
      • Linux-UNIX: S-TAP Control: Application server user identification parameters
      • Linux-UNIX: S-TAP Control: Guardium Hosts parameters
      • Linux-UNIX: S-TAP Control: Firewall parameters
      • Linux-UNIX: S-TAP Control: Inspection engine parameters
    • Linux-UNIX: Scheduling S-TAP diagnostics
    • Linux-UNIX: Configure S-TAP with guard-config-update
    • Linux-UNIX: Discover database instances
    • Linux-UNIX: Configuring an Inspection Engine
    • Linux-UNIX: Inspection engine verification
      • Linux-UNIX: S-TAP verification
      • Linux-UNIX: Configure standard verification
      • Linux-UNIX: Configure advanced verification
      • Linux-UNIX: Configuring the S-TAP verification schedule
    • Linux-UNIX: S-TAP load-balancing models and configuration guidelines
    • Linux-UNIX: Kerberos-authenticated database traffic
      • Linux-UNIX: Kerberos authentication supported databases
      • Linux-UNIX: Configuring Kerberos by using the setup_kerberos.sh script
      • Linux-UNIX: Enabling the Kerberos plugin
      • Linux-UNIX: Configuring the Kerberos plugin
      • Linux-UNIX: Finding the Kerberos configuration parameters for Oracle
      • Linux-UNIX: Finding the Kerberos configuration parameters for Sybase
      • Linux-UNIX: Merging keytab files
    • Linux-UNIX: A-TAP management
      • Linux-UNIX: Preparing for A-TAP configuration and maintenance
      • Linux-UNIX: A-TAP configuration and activation
      • Linux-UNIX: A-TAP activate, deactivate and DB stop, restart guidelines
      • Linux-UNIX: guardctl utility commands for A-TAP
      • Linux-UNIX: guardctl return codes
      • Linux-UNIX: Database-specific guardctl parameters
        • Linux-UNIX: Db2-specific guardctl parameters
        • Linux-UNIX: Informix-specific guardctl parameters
        • Linux-UNIX: Greenplum-specific guardctl parameters
        • Linux-UNIX: MongoDB-specific guardctl parameters
        • Linux-UNIX: Oracle-specific guardctl parameters
        • Linux-UNIX: Postgres-specific guardctl parameters
        • Linux-UNIX: Redis-specific guardctl parameters
        • Linux-UNIX: Sybase-specific guardctl parameters
        • Linux-UNIX: Sybase IQ-specific guardctl parameters
        • Linux-UNIX: Teradata-specific guardctl parameters
        • Linux-UNIX: Vertica-specific guardctl parameters
      • Linux-UNIX: Deactivating A-TAP
      • Linux-UNIX: Configuring and Activating A-TAP in Special Environments
        • Linux-UNIX: Activating A-TAP for Oracle on a Veritas Cluster
        • Linux-UNIX: Installing and activating A-TAP in Solaris zones
        • Linux-UNIX: Installing and activating A-TAP in WPARs environment
        • Linux-UNIX: Deactivate and uninstall A-TAP in Zones and WPARs environment
        • Linux-UNIX: Upgrading A-TAP in Zones and WPARs environment
        • Linux-UNIX: Configure and activate A-TAP steps for Teradata database
        • Linux-UNIX: Patching Oracle database with A-TAP
      • Linux-UNIX: Troubleshooting A-TAP configuration issues
    • Linux-UNIX: Configure a public and private address for an S-TAP
    • Linux-UNIX: Configure S-TAP log and dump locations when /root partition size is limited
    • Linux-UNIX: Editing the S-TAP configuration parameters
      • Linux-UNIX: Guardium Hosts (SQLGuard) parameters
      • Linux-UNIX: General parameters
      • Linux-UNIX: Inspection engine parameters
      • Linux-UNIX: Oracle Unified Auditing parameters
      • Linux-UNIX: Firewall parameters
      • Linux-UNIX: Query rewrite parameters
      • Linux-UNIX: Server-side masking (SSM) parameters
      • Linux-UNIX: Discovery parameters
      • Linux-UNIX: Application server parameters
      • Linux-UNIX: Hadoop parameters
      • Linux-UNIX: Configuration Auditing System (CAS) parameters
      • Linux-UNIX: Debug parameters
      • Linux-UNIX: K-TAP parameters
      • Linux-UNIX: Edge Gateway parameters
  • Linux-UNIX: S-TAP configuration per database type
    • Linux-UNIX: Configuring Apache Cassandra and S-TAP for auditing interception
    • Linux-UNIX: Application server S-TAP configuration
    • Linux-UNIX: CockroachDB inspection engine configuration
    • Linux-UNIX: Couchbase auditing configuration
    • Linux-UNIX: Using SAP-HANA with encrypted connections
    • Linux-UNIX: Configuring Datastax Cassandra auditing
    • Linux-UNIX: Configuring DataStax Cassandra IE
    • Linux-UNIX: Db2 IE configuration
    • Linux-UNIX: Elastic Search configuration
    • Linux-UNIX: Configuring Exit libraries
      • Linux-UNIX: Configuring Db2, Informix, and Teradata exit by using the setup_exit.sh script
      • Linux-UNIX: Configuring Db2 Exit
      • Linux-UNIX: Configuring Informix Exit
      • Linux-UNIX: Configuring Teradata exit
        • Linux-UNIX: Disabling Teradata exit
    • Linux-UNIX: Hadoop configuration
      • Linux-UNIX: Hadoop integration with Ranger HDFS for Hortonworks and Cloudera 7
        • Linux-UNIX: Configuring S-TAPs: Ranger HDFS for Hortonworks and Cloudera 7
        • Linux-UNIX: Upgrading and uninstalling S-TAPs: Ranger HDFS for Hortonworks and Cloudera 7
        • Linux-UNIX: Ranger HDFS for Hortonworks and Cloudera 7 FAQs
      • Linux-UNIX: Hadoop integration with Cloudera Navigator
        • Linux-UNIX: Planning the integration with Cloudera Navigator
        • Linux-UNIX: Configuring the preliminary settings
        • Linux-UNIX: Configure publication of Navigator audit events to Kafka
        • Linux-UNIX: Configuring the S-TAP for Cloudera
        • Linux-UNIX: Validate and troubleshoot the Cloudera configuration
      • Linux-UNIX: Hadoop integration using Hortonworks and Apache Ranger
        • Linux-UNIX: Hortonworks Ranger architecture and data flow
        • Linux-UNIX: Planning the integration with Hortonworks and Apache Ranger
        • Linux-UNIX: Hortonworks and Apache Ranger prerequisites
        • Linux-UNIX: FAQs Hortonworks Ranger configuration
        • Linux-UNIX: Configure the solution for monitoring
          • Linux-UNIX: Configure the Ranger plugins using Ambari
          • Linux-UNIX: Configure Guardium and Ranger communication
          • Linux-UNIX: Install and configure S-TAPs
    • Linux-UNIX: MongoDB IE configuration
    • Linux-UNIX: Neo4J auditing configuration
    • Linux-UNIX: Configuring Oracle Connection Manager to monitor encrypted traffic
      • Linux-UNIX: Install and configure the Oracle Connection Manager on the database server
      • Linux-UNIX: Install and configure the Oracle Connection Manager in an Oracle RAC environment
      • Linux-UNIX: Install and configure the Oracle Connection Manager on a remote server
    • Linux-UNIX: Oracle IE configuration
    • Linux-UNIX: Configuring S-TAP interception using Oracle Unified Audit
    • Linux-UNIX: Redis configuration
  • Linux-UNIX: S-TAP operation and performance
    • Linux-UNIX: Stopping S-TAP using GIM
    • Linux-UNIX: Starting S-TAP using GIM
    • Linux-UNIX: Start and stop S-TAP and GIM processes for various OS types/versions
      • Linux-UNIX: Start and stop methods for inittab
      • Linux-UNIX: Start and stop methods for Solaris services
      • Linux-UNIX: Start and stop methods for systemd
      • Linux-UNIX: Start and stop methods for upstart
    • Linux-UNIX: Using guard-config-update to start, restart, and stop S-TAP, and view status
    • Linux-UNIX: Optimizing your configuration for high load
      • Linux-UNIX: Multi-threading S-TAP to increase S-TAP throughput
      • Linux-UNIX: Increasing S-TAP and K-TAP throughput with dynamic ring buffers
    • Linux-UNIX: Alerts on uninstalled S-TAPs
    • Linux-UNIX: Deleting inactive S-TAPs in a centralized environment
    • Linux-UNIX: Monitoring S-TAP in the GUI
    • Linux-UNIX: S-TAP logs
    • Linux-UNIX: Viewing S-TAP debug details on the database
    • Linux-UNIX: Determine the S-TAP version
    • Linux-UNIX: S-TAP statistics
    • Linux-UNIX: S-TAP Monitor (guard_monitor)
    • Linux-UNIX: Troubleshooting S-TAP problems
• Using Db2 for IBM i S-TAP
  • Monitoring strategy
  • Installing the S-TAP for IBM i
  • Upgrading the S-TAP for IBM i
  • Defining the S-TAP for IBM i
• External S-TAP
  • External S-TAP requirements
  • SSL certificates for External S-TAP
    • Configure on-demand certificate generation
    • Manually create a certificate signing request
    • Verify collector certificates (optional)
    • Verifying client and server certificates
    • Importing a custom certificate
    • Configuring mutual authentication
    • Configuring certificate mirroring
    • Preparing SSL certificates for client applications
  • Deploying External S-TAP with an operator
    • Mirroring images to your private container registry
    • Configuring the cluster to pull images
    • Creating catalog sources
    • Creating operator subscriptions
    • Enabling the External S-TAP provisioning UI
    • Provisioning an instance of External S-TAP
  • Deploying External S-TAP with Helm
  • Deploying External S-TAP from the Guardium UI
  • Deploying External S-TAP manually
    • Downloading the Docker container
    • Downloading the Podman container
    • External S-TAP deployment scripts
      • Load balancer scripts
  • The External S-TAP user interface
    • Deploy External S-TAP window
      • Kubernetes tab
      • Volume tab
      • Docker tab
      • Database tab
      • Guardium tab
      • Certificate tab
      • Advanced tab
    • Edit External S-TAP group tab
      • TAP tab
      • Inspection engine tab
      • Collector tab
      • Firewall tab
  • Best practices for using External S-TAPs with on-premises databases
  • Deploying External S-TAP on cloud databases
  • Configuring AWS HA for External S-TAPs
  • Configuring Google BigQuery for External S-TAPs
  • Troubleshooting External S-TAP issues
• Guardium Installation Manager
  • GIM management
    • Creating and managing custom GIM certificates
    • Replacing default GIM certificate with SHA1 or SHA256 certificate
    • GIM server failover
    • Running GIM diagnostics
    • Enable/disable the GIM server log
  • GIM server allocation
  • Install, upgrade, and uninstall GIM clients on Linux-UNIX servers
    • Installing the GIM client on a UNIX server
    • Upgrading the GIM client
    • Uninstalling GIM and its modules on a UNIX database
    • Installing GIM and other packages on Linux servers by using the consolidated installer
    • Linux-UNIX: Managing GIM clients during a major upgrade of the database server operating system
  • Install, upgrade, and uninstall GIM clients on Windows servers
    • Installing the GIM client on a Windows server
    • Installing GIM and other packages on Windows servers by using the consolidated installer
    • Starting and stopping the GIM client on a Windows server
  • Managing GIM clients
    • GIM global parameters
    • Using groups with GIM
    • GIM dynamic updating
  • Managing software with GIM
    • Deploy monitoring agents
    • Set up by Client
    • Uploading and importing GIM modules
    • Centralized module view
    • Managing bundles by using the configurator.sh script
    • GIM CLI commands
    • GIM user interfaces
    • Distributing GIM bundles to managed units
    • Removing unused GIM bundles
  • Starting and restarting GIM services and components
    • Restarting the supervisor for Solaris with SMF support
• Installing your Guardium system
  • Operating modes
  • License keys
  • Hardware Requirements
  • Guardium port requirements
  • Step 1. Assemble the following before you begin
    • SAN storage devices
  • Step 2. Set up the physical or virtual appliance
    • Physical Appliance
    • Identify network ports
    • Default passwords for physical appliances
    • Virtual appliance
  • Step 3. Install the Guardium image
  • Step 4. Set up initial and basic configuration
    • Configuring a virtual appliance with DHCP
    • Set the primary and secondary system IP addresses
    • Set the Default Router IP Address
    • Set DNS Server IP Address
    • SMTP Server
    • Set Host and Domain Names
    • Set the Time Zone, Date and Time
    • Set the Initial Unit Type
    • Resetting the root password
    • Validate All Settings
    • Reboot the System
  • Step 5. What to do next
    • Verify Successful Installation
    • Set Unit Type
    • Install license keys
    • Install maintenance patches (if available)
    • Additional Steps (optional)
  • Creating the Virtual Image
    • VMware Infrastructure Overview
    • VM Installation Overview
    • Creating a Hyper-V Virtual Machine
    • Red Hat Virtualization
    • Red Hat OpenShift Virtualization
    • vMotion Installation
  • Custom Partitioning
  • Partitioning with an encrypted LVM
  • Create an LVM disk with four disks
  • Example of SAN Configuration
• Upgrading your Guardium system
  • Planning an upgrade
    • Identifying the correct upgrade path
    • Mixed-version environments during an upgrade
    • Upgrading with central managers and aggregators
  • Upgrading an environment with a central manager
    • Preparing for upgrade
    • Upgrading the central manager
      • Applying the health check patch
      • Archiving data
      • Purging system data
      • Backing up the system
      • Applying the upgrade patch
      • Installing maintenance patches
    • Upgrading the managed unit
      • Applying the health check patch
      • Archiving data
      • Purging system data
      • Backing up the system
      • Applying the upgrade patch
      • Installing maintenance patches
    • Upgrading S-TAP agents
  • Upgrading a stand-alone system
    • Preparing for upgrade
    • Applying the health check patch
    • Archiving data
    • Purging system data
    • Backing up the system
    • Applying the upgrade patch
    • Installing maintenance patches
    • Upgrading S-TAP agents
• Deploying Guardium on a cloud service
• CLI Commands
  • Using the CLI
  • Aggregator CLI Commands
  • Alerter CLI Commands
  • Certificate CLI Commands
  • Configuration and control CLI commands
  • diag CLI command
  • File handling CLI commands
  • Inspection Engine CLI Commands
  • Investigation Dashboard CLI Commands
  • Network Configuration CLI Commands
  • Support CLI Commands
  • System CLI Commands
  • User account, password, and authentication CLI commands
• GuardAPI and REST API commands
  • Using GuardAPI commands
  • Using Guardium REST APIs
  • Guardium API A- Z Reference
    • add_action_to_fam_rule
    • add_all_to_schedule
    • add_approved_stap_client
    • add_assessment_datasource
    • add_assessment_datasource_group
    • add_assessment_test
    • add_assessment_test_by_dsId
    • add_autodetect_task
    • add_available_test_notes
    • add_classifier_datasource
    • add_classifier_datasource_group
    • add_cluster
    • add_connection_properties
    • add_custom_property_to_datasource_by_id
    • add_custom_property_to_datasource_by_name
    • add_custom_property_to_datasources_in_group
    • add_datasource_to_entitlement_optimization
    • add_datasource_to_group
    • add_dm_to_profile
    • add_domain_to_universal_connector_allowed_domains
    • add_edge_external_registry
    • add_group_to_quick_search
    • add_ip_to_sg
    • add_mfa_exempt_users
    • add_objects_native_audit
    • add_ranger_config
    • add_ranger_hdfs_config
    • add_ranger_service
    • add_receiver_to_rule_action
    • add_stream
    • add_threshold_to_rule
    • add_time_period
    • aggregation
    • apply_rules_on_discoveredinstances
    • assign_analytic_case
    • assign_collectors
    • assign_load_balancer_groups
    • assign_qr_condition_to_action
    • audit_process_run_status
    • auto_execute_suggested_dependencies
    • backup_cm_list_candidates
    • backup_cm_set
    • cancel_distributed_report_target
    • change_cli_password
    • change_monitor_value
    • change_rule_order
    • change_to_microsoft
    • change_to_opensource
    • change_tracker_get_events
    • change_tracker_get_params
    • change_tracker_get_tasks
    • change_tracker_reset
    • change_tracker_set_params
    • cleanup_application
    • clear_cas_template_set
    • clevis_bind
    • clone_assessment
    • clone_cas_template_set
    • clone_extraction_profile
    • clone_policy
    • close_default_events
    • configure_archive
    • configure_auth
    • configure_cold_storage
    • configure_cold_storage_data_streaming
    • configure_cold_storage_query_engine
    • configure_cold_storage_unit
    • configure_complete_cold_storage
    • configure_data_streaming
    • configure_export
    • configure_mfa
    • configure_purge
    • configure_results_archive
    • configure_results_export
    • configure_system_backup
    • copy_key_file
    • copy_rule
    • copy_rules
    • create_ad_hoc_audit_and_run_once
    • create_ad_hoc_audit_and_run_with_name
    • create_ad_hoc_audit_for_security_assessment
    • create_adhoc_policy_analyzer
    • create_alias
    • create_allowed_db
    • create_api_key
    • create_api_parameter_mapping
    • create_assessment
    • create_autodetect_process
    • create_aws_secrets_manager_config
    • create_cas_host_instance
    • create_cas_template
    • create_cas_template_set
    • create_classifier_action
    • create_classifier_document_rule
    • create_classifier_policy
    • create_classifier_process
    • create_classifier_rule
    • create_cloudTitle
    • create_cloud_datasource
    • create_computed_attribute
    • create_constant_attribute
    • create_custom_table_ldap_import
    • create_cyberark_config
    • create_datasource
    • create_datasourceRef_by_id
    • create_datasourceRef_by_name
    • create_datasource_custom_property
    • create_datasource_group
    • create_datasource_groupRef_by_id
    • create_datasource_groupRef_by_name
    • create_db_user_mapping
    • create_ef_mapping
    • create_entry_location
    • create_fam_rule
    • create_group
    • create_hashicorp_config
    • create_hierarchical_member_to_group_by_desc
    • create_kafka_cluster
    • create_member_to_group_DAMX_Standard_Activity
    • create_member_to_group_DAMX_Suspicious_Connections
    • create_member_to_group_by_desc
    • create_member_to_group_by_id
    • create_online_report
    • create_policy
    • create_qr_action
    • create_qr_add_where
    • create_qr_add_where_by_id
    • create_qr_condition
    • create_qr_definition
    • create_qr_replace_element
    • create_qr_replace_element_byId
    • create_quarantine_allowed_until
    • create_quarantine_until
    • create_role
    • create_rule
    • create_rule_action
    • create_sql_configuration
    • create_stap_inspection_engine
    • create_test_detail_exception
    • create_test_exception
    • create_uc_credential
    • create_user
    • create_user_hierarchy
    • datamart_copy_file_bundle
    • datamart_include_file_header
    • datamart_refresh_metadata
    • datamart_run_once_now
    • datamart_set_active
    • datamart_set_date_format
    • datamart_set_inactive
    • datamart_state_set_extraction_start
    • datamart_update_copy_file_info
    • datamart_validate_copy_file_info
    • delete_adhoc_policy_analyzer
    • delete_alerter_snmp_settings
    • delete_alias
    • delete_allowed_db_by_entry_id
    • delete_allowed_db_by_user
    • delete_analytic_user_feedback
    • delete_api_parameter_mapping
    • delete_approved_stap_client
    • delete_archive_configuration
    • delete_assessment
    • delete_assessment_datasource
    • delete_assessment_datasource_group
    • delete_assessment_test
    • delete_audit_process
    • delete_audit_process_result
    • delete_autodetect_process
    • delete_autodetect_scans_for_process
    • delete_available_test_notes
    • delete_aws_secrets_manager_config
    • delete_cas_host
    • delete_cas_host_instance
    • delete_cas_template
    • delete_cas_template_set
    • delete_classifier_action
    • delete_classifier_document_rule
    • delete_classifier_policy
    • delete_classifier_process
    • delete_classifier_rule
    • delete_cluster
    • delete_computed_attribute
    • delete_constant_attribute
    • delete_cust_table_distribution_schedule
    • delete_custom_table_ldap_import
    • delete_cyberark_config
    • delete_datasourceRef_by_id
    • delete_datasourceRef_by_name
    • delete_datasource_by_id
    • delete_datasource_by_name
    • delete_datasource_configuration
    • delete_datasource_custom_property
    • delete_datasource_group
    • delete_datasource_groupRef_by_id
    • delete_datasource_groupRef_by_name
    • delete_db_user_mapping
    • delete_distributed_report_result_for_period
    • delete_edge_external_registry
    • delete_ef_mapping
    • delete_entry_location
    • delete_export_configuration
    • delete_group_by_desc
    • delete_group_by_id
    • delete_group_from_quick_search
    • delete_hashicorp_config
    • delete_hierarchical_member_from_group_by_desc
    • delete_imscheckpoint_record
    • delete_inactive_stap
    • delete_invalid_stap
    • delete_kafka_cluster
    • delete_member_from_group_by_desc
    • delete_member_from_group_by_id
    • delete_oauth_clients
    • delete_policy
    • delete_quarantine
    • delete_ranger_hdfs_config
    • delete_results_archive_configuration
    • delete_results_export_configuration
    • delete_rule
    • delete_schedule
    • delete_sql_configuration
    • delete_stap_inspection_engine
    • delete_stream
    • delete_system_backup_configuration
    • delete_test_detail_exception
    • delete_test_detail_exception_by_id
    • delete_test_exception
    • delete_test_exception_by_id
    • delete_uc_credential
    • delete_user
    • delete_user_hierarchy_by_entry_id
    • delete_user_hierarchy_by_user
    • disable_advanced_threat_scanning
    • disable_auto_execute_suggested_dependencies
    • disable_big_data_interface
    • disable_datastream
    • disable_embed_eastern_font
    • disable_entitlement_optimization
    • disable_fam_crawler
    • disable_health_analyzer
    • disable_ip_to_host_aliases
    • disable_monitoring_ranger_service
    • disable_native_audit
    • disable_outliers_detection
    • disable_outliers_detection_agg
    • disable_outliers_detection_cross_cm_agg
    • disable_outliers_detection_cross_cm_collector
    • disable_persistent_queue_universal_connector
    • disable_policy_analyzer
    • disable_purge
    • disable_quick_search
    • disable_riskspotter
    • disable_special_attributes
    • disable_test_result_detail_string_setting
    • disable_threat_detection_use_case
    • disable_threat_finder
    • discover_streams
    • display_external_stap_config
    • display_stap_config
    • edgeStapConfig
    • edgeStapDelete
    • edgeStapPing
    • edit_kafka_cluster
    • enable_advanced_threat_scanning
    • enable_all_tls
    • enable_big_data_interface
    • enable_datastream
    • enable_disable_feature_flag
    • enable_disable_ip_restriction
    • enable_disable_monitoring_streams
    • enable_embed_eastern_font
    • enable_entitlement_optimization
    • enable_fam_crawler
    • enable_fips_tls
    • enable_health_analyzer
    • enable_health_traffic_job
    • enable_ip_to_host_aliases
    • enable_latest_tls
    • enable_monitoring_ranger_service
    • enable_native_audit
    • enable_outliers_detection
    • enable_outliers_detection_agg
    • enable_outliers_detection_cross_cm_agg
    • enable_outliers_detection_cross_cm_collector
    • enable_persistent_queue_universal_connector
    • enable_policy_analyzer
    • enable_quick_search
    • enable_riskspotter
    • enable_special_attributes
    • enable_strong_cli_password
    • enable_threat_detection_use_case
    • enable_threat_finder
    • encrypt_value
    • execute_appUserTranslation
    • execute_assessment
    • execute_auditProcess
    • execute_autodetect_process
    • execute_cls_process
    • execute_flatLogProcess
    • execute_incidentGenProcess
    • execute_incidentGenProcess_byDetails
    • execute_ldap_user_import
    • execute_populateGroupFromQuery
    • export_certificate
    • export_config
    • export_definition
    • export_log_files
    • export_transfer_key
    • f5_add_apps_config
    • f5_add_data_params
    • f5_delete_apps_config
    • f5_delete_data_params
    • f5_list_apps_config
    • f5_list_data_params
    • f5_update_data_params
    • fipsmode
    • fipsmode_connectivity
    • flatten_hierarchical_groups
    • generate_ssl_key_universal_connector
    • generate_transfer_key
    • getBundle
    • getEdgeImages
    • getFieldsTitles
    • getInstalledPolicy
    • getOAuthTokenExpirationTime
    • get_all_modifiable_guard_params
    • get_assessment_result
    • get_app_node_unit_type
    • get_ata_case_info
    • get_certificates
    • get_cls_process_run_status
    • get_cluster_members
    • get_clusters
    • get_cold_storage_maintenance_params
    • get_cold_storage_params
    • get_cold_storage_streaming_status
    • get_datamart_info
    • get_datasource_custom_properties
    • get_debug_level
    • get_definitions_data_sets
    • get_definitions_items
    • get_distributed_report_target_info
    • get_entitlement_optimization_info
    • get_expiration_date_for_restored_day
    • get_extraction_profile_info
    • get_fam_crawler_info
    • get_flatLogProcessType
    • get_guard_param
    • get_hadoop_cluster_status
    • get_health_traffic_status
    • get_inapplicable_test_result_status
    • get_insights_agent_config
    • get_ip_restriction_config
    • get_ip_to_alias_overwrites
    • get_ip_to_alias_selected
    • get_istap_config
    • get_istap_status
    • get_job_process_concurrency_limit
    • get_kafka_clusters
    • get_load_balancer_load_map
    • get_load_balancer_params
    • get_mfa_configuration
    • get_native_audit_collectors
    • get_native_audit_configurations
    • get_native_audit_objects
    • get_outliers_detection_info
    • get_params
    • get_policy_analyzer_status
    • get_purge_batch_size
    • get_quick_search_info
    • get_ranger_config
    • get_ranger_hdfs_config
    • get_ranger_services_status
    • get_registered_units
    • get_secured_protocols_info
    • get_solr_cluster_info
    • get_solr_errors
    • get_solr_status
    • get_solr_status_extended
    • get_streams
    • get_test_result_detail_string_setting
    • get_threat_detection_use_case_info
    • get_uc_credential_names
    • get_unit_data
    • get_unit_pinger
    • get_universal_connector_allowed_domains
    • get_universal_connector_status
    • get_va_summary_key
    • get_ztap_logging_config
    • gim_assign_bundle_or_module_to_client_by_version
    • gim_assign_latest_bundle_or_module_to_client
    • gim_cancel_install
    • gim_cancel_uninstall
    • gim_get_available_modules
    • gim_get_client_last_event
    • gim_get_global_param
    • gim_get_modules_running_status
    • gim_list_bundles
    • gim_list_client_modules
    • gim_list_client_params
    • gim_list_mandatory_params
    • gim_list_registered_clients
    • gim_list_unused_bundles
    • gim_load_package
    • gim_remote_activation
    • gim_remove_bundle
    • gim_reset_client
    • gim_schedule_install
    • gim_schedule_uninstall
    • gim_set_diagnostics
    • gim_set_global_param
    • gim_unassign_client_module
    • gim_uninstall_module
    • gim_update_client_params
    • grant_role_to_object_by_Name
    • grant_role_to_object_by_id
    • health_info
    • import_definitions
    • insights_registration
    • insights_unregistration
    • is_edge_manager
    • kill_running_process
    • list_adhoc_policy_analyzer
    • list_aliases
    • list_all_reports
    • list_allowed_db_by_user
    • list_api_key
    • list_applications
    • list_approved_stap_client
    • list_assessment_tests
    • list_assessments
    • list_associated_stap_mu_groups
    • list_audit_processes
    • list_ata_case_severity
    • list_ata_threat_category
    • list_autodetect_processes
    • list_autodetect_tasks_for_process
    • list_available_test_notes
    • list_available_tests
    • list_aws_secrets_manager_config
    • list_cas_host_instances
    • list_cas_hosts
    • list_cas_template_sets
    • list_cas_templates
    • list_classifier_policy
    • list_classifier_process
    • list_cloud_datasource_by_name
    • list_cold_storage_maintenance_config
    • list_cold_storages
    • list_compatibility_modes
    • list_computed_attribute
    • list_custom_table_ldap_imports
    • list_cyberark_config
    • list_datasourceRef_by_id
    • list_datasourceRef_by_name
    • list_datasource_by_id
    • list_datasource_by_name
    • list_datasource_groupRef_by_id
    • list_datasource_groupRef_by_name
    • list_datasource_group_hierarchy
    • list_datasource_group_members
    • list_datasource_groups
    • list_db_drivers
    • list_db_drivers_by_details
    • list_db_user_mapping
    • list_ef_mapping
    • list_ef_report
    • list_engine_config
    • list_entry_location
    • list_existing_job_dependencies
    • list_expiration_dates_for_restored_days
    • list_feature_flags
    • list_group_by_desc
    • list_group_by_id
    • list_group_members_by_desc
    • list_group_members_by_id
    • list_groups
    • list_hashicorp_config
    • list_health_node
    • list_imscheckpoint_records
    • list_inspection_engines
    • list_installed_policies
    • list_managed_units
    • list_members_of_groups_by_desc
    • list_members_of_groups_by_id
    • list_oauth_clients
    • list_param_mapping_for_function
    • list_parameter_names_by_report_name
    • list_policy
    • list_policy_fam_rule
    • list_policy_rules
    • list_qr_action
    • list_qr_add_where
    • list_qr_add_where_by_id
    • list_qr_condition
    • list_qr_condition_to_action
    • list_qr_definitions
    • list_qr_replace_element
    • list_qr_replace_element_byId
    • list_quick_search_groups
    • list_ranger_configs
    • list_ranger_hdfs_config
    • list_ranger_staps
    • list_ready_files
    • list_roles
    • list_roles_granted_to_object_by_Name
    • list_roles_granted_to_object_by_id
    • list_rules_with_threshold
    • list_running_processes
    • list_scheduler_jobs
    • list_schedules
    • list_stap_verification_results
    • list_staps
    • list_test_detail_exception
    • list_test_exception
    • list_test_exception_by_id
    • list_user_hierarchy_by_parent_user
    • list_user_roles
    • list_users
    • list_utilization_thresholds
    • load_all_packages
    • load_mongodb
    • load_mongodb_by_datasource
    • local_disable_big_data_intelligence
    • local_enable_big_data_interface
    • make_bundle_with_uploaded_kernel_module
    • make_primary_cm
    • migrate_stap_config
    • modify_autodetect_process
    • modify_edge_external_registry
    • modify_ef_mapping
    • modify_ef_sql_mode
    • modify_guard_param
    • modify_oauth_validity
    • modify_schedule
    • modify_va_summary_key
    • must_gather
    • non_credential_scan
    • nscd
    • patch_cleanup
    • patch_install
    • pause_or_resume_job
    • pause_or_resume_scenarios
    • policy_fam_rule_delete
    • policy_install
    • policy_uninstall
    • populateMembersForGroup
    • populate_from_dependencies
    • populate_group_from_query
    • proxy
    • pull_external_stap_keystore
    • push_insights_trust
    • push_parameter_to_mu
    • quick_search
    • reboot_image_universal_connector
    • refresh_quick_search_groups
    • refresh_stap_info
    • registerEdge
    • register_application
    • register_oauth_client
    • register_oauth_internal_client
    • register_unit
    • reinstall_policy
    • reinstall_policy_rule
    • remove_all_from_schedule
    • remove_all_qr_replace_elements
    • remove_all_qr_replace_elements_byId
    • remove_classifier_datasource
    • remove_classifier_datasource_group
    • remove_connection_properties
    • remove_custom_property_from_datasource_by_id
    • remove_custom_property_from_datasource_by_name
    • remove_custom_property_from_datasources_in_group
    • remove_datasource_configuration_from_collector
    • remove_datasource_from_entitlement_optimization
    • remove_datasource_from_group
    • remove_dm_from_profile
    • remove_domain_from_universal_connector_allowed_domains
    • remove_extraction_profile
    • remove_members_of_groups_by_desc
    • remove_members_of_groups_by_id
    • remove_mfa_exempt_users
    • remove_objects_native_audit
    • remove_populate_group_from_query
    • remove_qr_action
    • remove_qr_add_where_by_id
    • remove_qr_condition
    • remove_qr_definition
    • remove_qr_replace_element_byId
    • remove_ranger_config
    • remove_ranger_service
    • remove_threshold_from_rule
    • replace_active_profile
    • reregister_agg_collector
    • rerun_datamart
    • rerun_distributed_report
    • reset_unit_utilization_data
    • reset_kafka_cluster
    • reset_va_summary_by_id
    • reset_va_summary_by_key
    • rest_export_definition
    • restart_all_managed_units
    • restart_cloud_instance
    • restart_data_compliance
    • restart_job_queue_listener
    • restart_solr
    • restart_stap
    • restart_unit_pinger
    • restore_units_after_bad_shift
    • retreiveUpdatedUsers
    • retrieveAPIs
    • retrieveApiParameters
    • revokeOAuthClient
    • revokeOAuthToken
    • revoke_api_key
    • revoke_ignore_stap
    • revoke_role_from_object_by_Name
    • revoke_role_from_object_by_id
    • riskspotter_set_config
    • rule_info_from_policy
    • run_custom_table_ldap_import
    • run_database_instance_discovery
    • run_diagnostics
    • run_populate_group_from_query
    • run_universal_connector
    • sched_cust_table_distribution
    • schedule_generate_mongo_filter_job
    • schedule_job
    • search
    • secure_settings
    • sendSNMPSettings
    • session_inference_control
    • session_inference_setup
    • setOAuthTokenExpirationTime
    • set_alerter_settings
    • set_alerter_smtp_settings
    • set_alerter_snmp_settings
    • set_certificate_host_validation
    • set_cold_storage_data_retention_period
    • set_cold_storage_maintenance
    • set_cold_storage_orphan_retention_period
    • set_cold_storage_snapshot_retention_period
    • set_debug_level
    • set_distributed_report_target
    • set_enterprise_search_options
    • set_entitlement_datasource_parameter
    • set_expiration_date_for_restored_day
    • set_flatLogProcessType
    • set_health_traffic_job_interval
    • set_import
    • set_inapplicable_test_result_status
    • set_ip_to_alias_overwrites
    • set_ip_to_alias_selected
    • set_job_process_concurrency_limit
    • set_ktap_debug
    • set_load_balancer_param
    • set_outliers_detection_demo_mode
    • set_outliers_detection_parameter
    • set_outliers_detection_to_factory_settings
    • set_outliers_user_detection_mode
    • set_populate_group_from_query_schedule
    • set_purge_batch_size
    • set_stap_debug
    • set_uc_rolling_strategy_size
    • set_universal_connector_data_timeout
    • set_universal_connector_log_level
    • set_user_roles
    • set_ztap_logging_config
    • show_alerter_settings
    • show_alerter_smtp_settings
    • show_alerter_snmp_settings
    • show_alerter_status
    • show_autodetect_process_status
    • show_backup_cm_ip
    • show_data_compliance_status
    • show_expiring_certificates
    • show_maximum_query_duration
    • show_universal_connector_plugins
    • solr_repair_analysis
    • start_istap_monitor
    • start_data_compliance
    • start_stop_application
    • stop_audit_process
    • stop_autodetect_process
    • stop_data_compliance
    • stop_istap_monitor
    • stop_restart_alerter
    • stop_solr
    • stop_universal_connector
    • store_maximum_query_duration
    • store_sql_credentials
    • store_stap_approval
    • switch_outliers_user_mode
    • test_datasource_connection
    • test_hashicorp_connection
    • test_solr
    • test_solr_cluster_status
    • test_solr_connectivity
    • test_solr_hardware_requirements
    • toggle_fault_tolerant_execution
    • unassign_load_balancer_groups
    • unassign_qr_condition_from_action
    • uninstall_policy_rule
    • universal_connector_bulk_delete
    • universal_connector_bulk_install
    • universal_connector_bulk_uninstall
    • universal_connector_cleanup
    • universal_connector_disable_metrics
    • universal_connector_enable_metrics
    • universal_connector_export_profiles
    • universal_connector_get_profile_template
    • universal_connector_import_profiles
    • universal_connector_keystore_add
    • universal_connector_keystore_list
    • universal_connector_keystore_remove
    • universal_connector_prepare_reinstall_kafka_uc
    • universal_connector_reinstall_profiles
    • universal_connector_troubleshooting
    • universal_connector_update_proxy
    • unlock_feature_flags
    • unregister_application
    • unregister_unit
    • unschedule_datamart
    • updateEdge
    • update_alias
    • update_assessment
    • update_assessment_test
    • update_aws_secrets_manager_config
    • update_ata_case_status
    • update_ata_case_status_reopen
    • update_cas_host_instance
    • update_cas_template
    • update_classifier_action
    • update_classifier_document_rule
    • update_classifier_log_level
    • update_classifier_policy
    • update_classifier_process
    • update_classifier_rule
    • update_cloud_datasource
    • update_computed_attribute
    • update_constant_attribute
    • update_custom_table_ldap_import
    • update_cyberark_config
    • update_datamart
    • update_datamart_copy_file_info_from_cold_storage
    • update_datamart_copy_file_threadpool_params
    • update_datasource_by_id
    • update_datasource_by_name
    • update_datasource_credentials_in_group
    • update_datasource_custom_property
    • update_datasource_group
    • update_engine_config
    • update_entry_location
    • update_external_stap_config
    • update_group_by_desc
    • update_group_by_id
    • update_hashicorp_config
    • update_insights_agent_config
    • update_insights_registration_config
    • update_ip_restriction_allowlist
    • update_istap_config
    • update_managed_units_ping_time
    • upload_oracle_wallet_zip_file
    • update_param
    • update_policy
    • update_policy_analyzer_interval
    • update_qr_action
    • update_qr_add_where_by_id
    • update_qr_condition
    • update_qr_definition
    • update_qr_replace_element_byId
    • update_quarantine_allowed_until
    • update_quarantine_until
    • update_ranger_config
    • update_ranger_hdfs_config
    • update_ranger_service
    • update_rule
    • update_shared_secret
    • update_stap_config
    • update_test_detail_exception
    • update_test_exception
    • update_threshold_in_rule
    • update_uc_credential
    • update_user
    • update_user_db
    • update_utilization_thresholds
    • update_vault_secret_id
    • uploadEdgeData
    • upload_custom_data
    • venafi_import
    • verify_cyberark_access
    • verify_stap_inspection_engine_with_sequence
  • Access management APIs
  • Active threat analytics and risk spotter APIs
  • Alerter APIs
  • Archive, export, import, purge, and restore APIs
  • Assessment APIs
  • Auto-discovery APIs
  • Big Data Intelligence APIs
  • Catalog entry APIs
  • Central management APIs
  • Classification APIs
  • Cloud datasource APIs
  • Configuration Auditing System APIs
  • Data compliance APIs
  • Data mart APIs
  • Database user APIs
  • Datasource APIs
  • Datasource credential management APIs
  • Entitlement optimization APIs
  • External feed APIs
  • File Activity Monitor APIs
  • Guardium Insights APIs
  • Guardium Installation Manager (GIM) APIs
  • Guardium universal connector APIs
  • Group APIs
  • Health analyzer APIs
  • Hadoop monitoring APIs
  • Investigation Dashboard APIs
  • Miscellaneous APIs
  • Native audit APIs
  • Outliers detection APIs
  • Policy and rule APIs
  • Process Control APIs
  • Query rewrite APIs
  • Reports and report generation APIs
  • Schedule and job dependencies APIs
  • Solr APIs
  • S-TAP and inspection engine APIs
  • S-TAP for IBM i APIs
  • Threat detection analytics APIs
• Unified Discovery and Classification
  • What's new in this release
  • Release notes
    • Release notes - Unified Discovery and Classification version 1.1
    • Release notes - Unified Discovery and Classification version 1.2
    • Release notes - Unified Discovery and Classification version 1.3
  • Installing Unified Discovery and Classification
    • Upgrading Unified Discovery and Classification
    • System requirements and data source support
    • Adding the analyzer role to the primary analyzer
    • Installing the secondary analyzer
  • Discovering on-premises assets
    • Discovering on-premises assets automatically
    • Manually adding on-premises assets
      • Microsoft SQL server Active Directory authentication prerequisites
  • Connecting to SaaS applications and cloud accounts
    • Enabling SaaS and cloud connections
    • Connecting to Amazon cloud accounts
    • Connecting to Google Cloud project accounts
    • Connecting to Microsoft Azure cloud accounts
    • Connecting to SaaS applications
    • Permissions for accessing SaaS applications and cloud providers
  • Integrating with Guardium Data Protection
    • Creating a custom user and role for integration
    • Integrating with Unified Discovery and Classification
  • Asset inventory
  • Sensitivities
    • Predefined sensitivities
    • Custom sensitivities
  • Troubleshooting problems
    • Running the log collector for troubleshooting assistance
    • Troubleshooting product upgrade
    • Troubleshooting Active Directory (AD) authentication
• Guardium 12.1 for Db2 trial onboarding guide
  • Downloading, installing, and configuring the Guardium trial ISO
    • Downloading the trial and trial license
    • Installing the Guardium collector virtual appliance
    • Installing the Guardium license
    • Downloading the Guardium Installation Manager (GIM) and S-TAP agent packages
      • Installing the GIM client and S-TAP agent
      • Configuring the inspection engine for Db2
      • Configuring Db2 Exit
      • Testing the agents
    • Connecting Guardium to Db2 sample data
  • Trial use case walkthroughs
    • Monitor data activity and enforce least privilege
      • DAM Activity Report charts
      • 01A DMLs and DDLs charts
      • 01B Policy Violations/Exceptions charts
    • Centralize compliance monitoring
      • 02A Classification report charts
      • 02B Compliance and vulnerabilities charts
      • 02C Administrative activities charts
    • Proactive vulnerability assessments
      • 03A Vulnerability assessment report charts
      • 03B Db2 Entitlement/Privileges report charts
• S-TAP for z/OS User's Guide