Help Center/ Database Security Service/ User Guide (Paris and Amsterdam Regions)/ FAQs/ Agent/ How Do I Determine Where to Install an Agent?
Updated on 2024-01-12 GMT+08:00
View PDF
Share

How Do I Determine Where to Install an Agent?

The database audit agent can be installed on the database, application, or proxy node (ranked in descending order of preference).

For details about the nodes, see Table 1.

Table 1 Nodes to install agents

Node

Scenario

Audit Scope

Configuration

Database

Self-built database on ECS/BMS

All access records of applications that have accessed the database

Set Installing Node Type to Database.

Application

You cannot log in to the node where your database (for example, RDS database) is deployed.

Access records of all the databases connected to the application
  • Set Installing Node Type to Application, as shown in Figure 1.
  • If an agent has been installed on a database connected to the same application as the desired database, select Select an existing agent.

Proxy

You cannot log in to the node where your database (for example, RDS database) is deployed, and cannot install an agent on your application (for example, an off-cloud application).

Only the access records between the proxy and database. Those between the application and database cannot be audited.

Set Installing Node Type to Application, and set Installing Node IP Address to the IP address of the proxy.

Adding an Agent

  • Application
    Figure 1 Adding an agent to an application
    Figure 2 Selecting an existing agent

    If an agent has been installed on a database connected to the same application as the desired database, select Select an existing agent. For details, see When Should I Select an Existing Agent?

  • Proxy
    Figure 3 Adding an agent to an application

    Installing Node IP Address must be set to the IP address of the proxy.

Parent topic: Agent