Linux and UNIX systems: Query rewrite parameters

The query rewrite parameters affect the behavior of the S-TAP with respect to discovery.

These parameters are stored in the [TAP] section of the S-TAP properties file.

CAUTION:
These are advanced parameters and are usually modified by IBM Technical Support only.
GIM guard_tap.ini Default Value Description
STAP_QRW_INSTALLED qrw_installed 0 Enable / disable the Dynamic Data Masking for Databases feature. When set to 0, all other parameters in this group are ignored.
  • 0=No
  • 1=Yes
STAP_QRW_DEFAULT_STATE qrw_default_state 0 Sets the query rewrite activation trigger. Must be 0 if firewall_default_state=1.
  • 0=QRW activated per session when triggered by a rule in the installed policy
  • 1=QRW activated for every session regardless of the installed policy
STAP_QRW_FORCE_WATCH qrw_force_watch NULL Comma separated list of client IP/MASKs (for example, 1.1.1.1/1.1.1.1,2.2.2.2/2.2.2.2) to watch automatically. Valid when qrw_default_state is 0. Cannot be configured to the same range as firewall_force_watch.
STAP_QRW_FORCE_UNWATCH qrw_force_unwatch NULL Comma separated list of client IP/MASKs (for example, 1.1.1.1/1.1.1.1,2.2.2.2/2.2.2.2) to exclude from watching. Valid when firewall_default_state is 1. Cannot be configured to the same range as firewall_force_unwatch.
Parent topic: Linux and UNIX systems: Editing the S-TAP configuration parameters