Enabling query rewrite

Learn how to configure an S-TAP for query rewrite functionality.

Before you begin

The query rewrite feature is available only when you enable query rewrite in the guard_tap.ini file and query rewrite policy rules exist and are triggered by session traffic.

About this task

Query rewrite is controlled by a query rewrite parameter in the [TAP] section of the S-TAP guard_tap.ini file.

Procedure

  1. Log on to the database server system using the root account.
  2. Stop the S-TAP.
  3. Make a backup copy of the guard_tap.iniconfiguration file.
    • For Windows - \Program Files\IBM\Windows S-TAP\Bin\
    • For UNIX - /usr/local/guardium/guard_stap/guard_tap.ini
  4. Open guard_tap.ini in a text editor.
  5. Locate the query rewrite parameter and edit it as required. Set the parameter to 1 to enable it or to 0 to disable it.
    • For Windows - QUERY_REWRITE_INSTALLED
    • For UNIX - qrw_installed
  6. Save your changes to guard_tap.ini.
  7. Restart the inspection engines either by navigating to Manage > Activity Monitoring > Inspection Engines and clicking on Restart Inspection Engines; or by logging in to the CLI as user, and restarting the inspection engines using the restart_inspection_engines CLI command.

Results

When you are done, query rewrite functionality is enabled and responds to policy rules that contain query rewrite actions. For more information about query rewrite parameters, see Query rewrite parameters for UNIX or Query rewrite parameters for Windows.