Help Center/ Database Security Service/ FAQs/ Agent/ How Do I Determine Where to Install an Agent?
Updated on 2022-09-22 GMT+08:00

How Do I Determine Where to Install an Agent?

The database audit agent can be installed on the database, application, or proxy node (ranked in descending order of preference).

For details about the nodes, see Table 1. For details about how to install the Agent, see Installing the Agent.

Table 1 Nodes to install agents

Node

Scenario

Audit Scope

Configuration

Database

Self-built database on ECS/BMS

All access records of applications that have accessed the database

Set Installing Node Type to Database, as shown in Figure 1.

Application

You cannot log in to the node where your database (for example, RDS database) is deployed.

Access records of all the databases connected to the application
  • Set Installing Node Type to Application, as shown in Figure 2.
  • If an agent has been installed on a database connected to the same application as the desired database, select Select an existing agent.

Proxy

You cannot log in to the node where your database (for example, RDS database) is deployed, and cannot install an agent on your application (for example, an off-cloud application).

Only the access records between the proxy and database. Those between the application and database cannot be audited.

Set Installing Node Type to Application, and set Installing Node IP Address to the IP address of the proxy.

Adding an Agent

  • Database
    Figure 1 Adding an agent to a database
  • Application
    Figure 2 Adding an agent to an application
    Figure 3 Selecting an existing agent

    If an agent has been installed on a database connected to the same application as the desired database, select Select an existing agent. For details, see When Should I Select an Existing Agent?

  • Proxy
    Figure 4 Adding an agent to an application

    Installing Node IP Address must be set to the IP address of the proxy.

Parent topic: Agent