Viewing the Database Audit Overview

Scenario

After connecting a database to the audit instance, you can enable scheduled updates on the overview page. This allows you to check status information for individual instances, as well as aggregated statement, risk, and session metrics across all instances.

Prerequisites

• This function is supported by database instance of 23.05.23.193055 and later versions.
• The database audit instance is in the Running state.
• For details about how to enable database audit, see Enable Database Audit.

Viewing the Database Audit Overview

1. Log in to the DBSS console.
2. Click in the upper left corner on the displayed page and select a region.
3. View audit information, single instance information, and data analysis charts.
   • My audit information
     Displays the audit duration, total number of statements, total number of risks, and the statements, risks, and sessions today of all database audit instances.

     Figure 1 Viewing audit summary
     

     Click in the upper right corner to enable regular information summary refreshing. Refresh the dashboard every hour. Click Refresh to refresh the audit information immediately.

   • Single instance information

     Click to view the audit duration, total number of statements, total number of risks, and the statements, risks, and sessions today of all database audit instances.

     Figure 2 Viewing single instance information
     
   • Data analysis charts

     Click or to display audit information about all instances by total number of statements, total number of risks, today's statements, today's risks, and today's sessions in pie charts or bar charts. In addition, top 5 data records are displayed.

     Figure 3 Viewing the data analysis chart
     

4. Click Total Risks. The Total Risks page is displayed. Click and select a time range to view the risk analysis of all database audit instances in the specified time range.
   • Overall risk analysis

     Click or . You can view the statistics of High Risk Hits, Medium Risk Hits, and Low Risk Hits among all databases in a pie chart or bar chart. In addition, the top 3 risk hits of databases are displayed.

     Figure 4 Overall risk analysis
     
   • Overall risk rule analysis

     Displays the number of risk rule hits of all databases and top 5 risk rule hits.

     Figure 5 Overall risk rule analysis
     
   • Risk analysis by level
     • Risk level: displays the high-risk hit analysis, medium-risk hit analysis, and low-risk hit analysis of each database.
       Figure 6 Risk level analysis
       
     • Risk rule: displays the analysis when a database is hit by a risk rule.
       Figure 7 Risk rule analysis
       
     • Database statistics: displays the analysis of each database that is hit by a risk rule.
       Figure 8 Database statistics analysis
       

References

• If you use an agent to audit a user-built database or a cloud database, disable SSL for the database. Otherwise, the audit will fail. For details, see How Do I Disable SSL for a Database?

• If the audit function is unavailable, see Database Audit Is Unavailable.
• You can configure database audit rules. For details, see Configuring Audit Rules.