Updated on 2023-01-10 GMT+08:00

Viewing Audit Reports

By default, database audit complies with a full audit rule, which is used to audit all databases that are successfully connected to the database audit instance. After connecting the database to the database audit instance, generate an audit report and preview online or download it.

Prerequisites

  • You have applied for a database audit instance and the Status is Running.
  • Database audit has been enabled.
  • A security group rule has been configured for the database audit instance.

Report Types

Database audit provides eight types of report templates. Table 1 lists the report names. You can generate reports and set report tasks as needed.

Table 1 Description

Template Name

Report Types

Description

Database Security General Report

Overview report

Provides the overall audit status of the database, including risks, sessions, and login status to better manage databases.

Database Security Compliance Report

Compliance report

This report helps database administrators and auditors detect abnormal behaviors, locate problems, and manage information.

SOX Report

Compliance report

Complies with the Sarbanes-Oxley Act (SOX) to provide statics on and evaluate database operations. This report helps database administrators and auditors detect abnormal behaviors, locate problems, and manage information.

Database Server Analysis Report

Database report

Provides statistics and analysis on active users, user IP addresses, database logins and requests, database usage duration, and database performance.

Client IP Address Analysis Report

Client report

Provides statistics on client applications, database users, and SQL statements collected from user IP addresses.

DML Command Report

Database operation report

Analyzes user and privileged operations based on DML commands.

DDL Command Report

Database operation report

Analyzes user and privileged operations based on DDL commands.

DCL Command Report

Database operation report

Analyzes user and privileged operations based on DCL commands.

Generating an Audit Report Immediately

  1. Log in to the management console.
  2. Select a region, click , and choose Security > Database Security Service. The Dashboard page is displayed.
  3. In the navigation tree on the left, choose Reports.
  4. In the Instance drop-down list, select the instance whose instance report you want to generate.
  5. Click the Report Management tab.
  6. Locate the target template, and click Generate Report in the Operation column.
  7. In the displayed dialog box, click to set the start time and end time of the report, and select the database for which you want to generate a report.
  8. Click OK.

    The Reports page is displayed. You can view the report status on this page. After a report is generated, preview or download the report.

Previewing or Downloading an Audit Report

Before previewing or downloading an audit report, ensure that its Status is 100%.

To preview a report online, use Google Chrome or Mozilla FireFox.

  1. Log in to the management console.
  2. Select a region, click , and choose Security > Database Security Service. The Dashboard page is displayed.
  3. In the navigation tree on the left, choose Reports.
  4. In the Instance drop-down list, select the instance whose report you want to preview or download.
  5. Locate the target template, and click Preview or Download in the Operation column to preview or download the report..

Setting a Report Task

  1. Log in to the management console.
  2. Select a region, click , and choose Security > Database Security Service. The Dashboard page is displayed.
  3. In the navigation tree on the left, choose Reports.
  4. In the Instance drop-down list, select the instance for which you want to set a report task.
  5. Click the Report Management tab.
  6. Locate the target template and click Schedule Task in the Operation column.
  7. In the displayed dialog box, set the parameters of the scheduled task.

    Table 2 Parameters for setting a task

    Parameter

    Description

    Example Value

    Enable Task

    Status of a scheduled task

    • : enabled
    • : disabled

    Message Notifications

    Enables or disables notifications.

    • : enabled
    • : disabled

    SMN Topic

    Select an existing topic from the drop-down list or click View Topic and create an SMN topic on the displayed page for configuring the terminals for receiving alarm notifications.

    For details about topics and subscriptions, see Simple Message Notification User Guide.

    -

    Report Type

    Type of a report. The options are as follows:

    • Daily
    • Weekly
    • Monthly

    Weekly

    Execution Mode

    Execution mode of the report. The options are as follows:

    • Once
    • Periodically

    Periodically

    Time

    Time when the report is executed

    10:00

    Format

    Only the PDF format is supported.

    PDF

    Database

    Database for which you want to execute the report task

    -

  8. Click OK.