Defining the S-TAP for IBM i

After you install the S-TAP, ensure that it can communicate with the Guardium® system.

Before you begin

You must know the log-in credentials for the IBM i system.

About this task

The high-level steps to configure the S-TAP are:
  1. Define Db2 for i as a recognized data source to IBM® Guardium and test the connection.
  2. Populate the Guardium system with information from the configuration file on IBM i that was created when you installed the Db2 for i S-TAP, using the Custom Table Builder process.
  3. Create a Db2 for i configuration report. It is from this report interface that you can invoke the Guardium APIs that enable you to start and stop the monitoring process, get status information, and update configuration parameters, including filtering values.

Procedure

  1. Click Setup > Tools and Views > Datasource Definitions to open the Datasource Builder.
  2. In the Datasources Definitions page, click New icon.
    The Create Datasource dialog opens.
  3. Fill in values:
    • Application Type: Custom Domain.
    • Database Type: Db2 FOR i.
    • all other fields: as relevant for your system.
  4. Click Save.
  5. Click Test Connection to ensure that the configuration succeeded.
  6. Click Comply > Custom Reporting > Custom Table Builder.
  7. Select Db2 for i S-TAP Configuration, and then click Upload Data.
  8. Click Add Datasource.
    The Select datasource window displays a list of Db2 for i S-TAPs
  9. Select your Db2 for i data source from the list and click Save.
  10. On the Import Data page, ensure the Db2 for i data source appears. Click Apply and then click Run Once Now.
    A message appears that the operation ended successfully with one row inserted.
  11. Click Comply > Custom Reporting > Custom Query-Report Builder.
  12. From the Queries-Reports list, click Db2 for i S-TAP configuration, then click Open original.
  13. Click Add to My Custom Reports.
  14. Click Reports > My Custom Reports, and open the Db2 for i S-TAP configuration report, which now displays the IBM i report row. Right-click a row in the report and select Invoke. A list of APIs appears.
  15. Select update_istap_config.
    The parameters for that API are displayed. You can change any values.
  16. Change the value of the start_monitor parameter to 1.
  17. Click Invoke Now.

Results

Using the data that you have entered, the update_istap_config API performs these tasks:
  • Creates the message queue that is used to send entries from the S-TAP to the Guardium system and starts a global database monitor using a view with an INSTEAD OF trigger, which sends the entries to the message queue.
  • Starts PASE and the S-TAP.
  • Receives journal entries from QAUDJRN and adds them to the message queue.