Windows: Installing S-TAP agent by using the interactive installer

The interactive installer is useful for smaller deployments or whenever a guided, step-by-step installation experience is required.

Before you begin

Verify the following before you begin:

About this task

When you install an S-TAP on a database server, you must provide the IP address or host name of the Guardium system that will receive data from the S-TAP. After the S-TAP has connected to the Guardium system, go to the Manage > Activity Monitoring > S-TAP Control page and complete the S-TAP configuration.

If you want to disable auto-discovery, clear the Start S-Tap Service checkbox. For more information, see Windows: Auto discovery of database instances during installation and upgrade.

  • You can change some Windows S-TAP parameters from the interactive installer (but not all). Use the GUI after you install the S-TAP to change S-TAP parameters that you can't change from the installer.
Note: You cannot install or run Windows S-TAP on a domain controller.

When you install an S-TAP from the wizard, you can uninstall it from the wizard, the command line, or Windows Add/Remove Programs.


  1. Log on to the database server with a system administrator account.
  2. Copy the S-TAP module to your database and start the Guardium Windows S-TAP Install Wizard.
    Attention: To install an S-TAP on Windows 2012 or later, you must use administrative privileges. Right-click the installer and choose Run as Administrator.
  3. Read the license agreement on the Guardium License screen. To continue installation, select I accept the terms of the license agreement and click Next.
  4. Provide the requested content on the Customer Information screen, then click Next to continue. The default values are appropriate for most installations.
  5. Select one of the following installation types, and then click Next to continue:
    • Typical: a typical installation is appropriate for most users.
    • Compact: a compact installation assumes that other features such as Enterprise Load Balancing are not required.
    • Custom: use a custom installation allows to modify more S-TAP installation options such as the software choices, installation directory, and the user account that runs the Windows S-TAP process.
  6. Optional: Enable Enterprise Load Balancing by selecting the Enable Load Balancing checkbox on the Load Balancing Options screen. Click Next to continue.
    1. If you enable Enterprise Load Balancing, provide the load balancer IP address in the Load Balancer Host Address field.
    2. Click Advanced Options to specify any additional Enterprise Load Balancing options.
      For more information, see Enterprise Load Balancing.
  7. Verify the Software Tap Host Address and provide Appliance Address(es) on the Network Addresses screen, then click Next to continue.
    • The Software Tap Host Address specifies the address of the database where the S-TAP is being installed.
    • One or more Appliance Addresses specify the Guardium system addresses that control the S-TAP. Provide multiple addresses (typically not more than three) on separate lines to establish failover systems for the S-TAP or when configuring S-TAP load balancing with the participate_in_load_balancing parameter.
    Attention: If you do not want the S-TAP service to be enabled after installation, clear the Start S-Tap Service checkbox. If the S-TAP Service is not started, auto discovery of databases and creation of inspection engines is also disabled.
    The Install Wizard Completed page appears after a successful installation.
  8. Click Finish to close the installer.

What to do next

Verify that the S-TAP is communicating with the Guardium system by going to Manage > Activity Monitoring > S-TAP Control and reviewing the S-TAPs status and configuration.