Connect to Guardium Data Protection with the legacy communication protocol

Stream data from Guardium Data Protection collectors by connecting a Guardium Data Protection central manager to Guardium Insights.

Before you begin

You might need to adjust your Guardium central manager settings to minimize delays in the data streaming to Guardium Insights. For more information, see Adjusting Guardium central manager and OpenShift Container Platform settings for data mart streaming.

When prompted to choose the GDP communication protocol, ensure that you have selected Legacy GI to GDP API communication protocol.

Procedure

  1. The About section provides an overview for connecting to a Guardium Data Protection system. Click Next to begin.
  2. Type in the connection details.
    • Name: Enter a unique name for the connection (with a minimum of 4 characters). This name distinguishes this connection from all other Guardium Insights connections.
    • Full hostname: Enter the full hostname of the Guardium central manager.
      Note: IP addresses are not supported for Full hostname.
    • Port: Enter the Guardium central manager port.
  3. Click Save.
  4. After the connection is added, the Guardium central managers page opens showing all of the configured Guardium central managers.
    Note: A Guardium central manager can manage collectors that are running different versions of Guardium. Guardium Insights supports managed collectors from Version 3.4.x and laterthese data sources or Version 3.3.xthese data sources. If your central manager supports the data marts that are supported by Guardium Insights (Version 3.4.x and laterdata mart support / Version 3.3.xdata mart support), these data marts will be enabled on the collector with the Guardium Data Protection that does not support these data marts.

What to do next

After completing the integration, it is displayed in the Guardium central managers page, where you can complete these actions:

  • You can set up streaming for Guardium Data Protection aggregators and collectors. For more information, see Export data from Guardium Data Protection systems.
  • You can access the managed units for the central manager by clicking the Central manager name link in the table. After you access the managed units, you can enable them if they are disabled.
  • To delete a central manager, click its check box and then click Delete in the banner that opens. You can select multiple central managers to delete.
  • To edit a central manager, select Edit in its right hand table menu.
  • To disable all managed units of a central manager without deleting it completely, select Disable from its right hand table menu. To enable the managed units, click the Central manager name link in the table and then enable its managed units as desired.
  • To refresh the list of central managers, click Refresh.
  • You can filter the list of central managers by entering match criteria in the Filter table field.
Note: Guardium Insights only pulls SQL that has been audited using the Log full details rule action. In order to gain traffic visibility, you should change your policy to include this action (see https://www.ibm.com/docs/en/guardium/latest?topic=actions-log-full-details). This also allows you to import historic data using Full SQL from Guardium Data Protection to Guardium Insights.