Updated on 2024-04-17 GMT+08:00

Viewing Audit Reports

By default, database audit complies with a full audit rule, which is used to audit all databases that are connected to the database audit instance. After connecting the database to the database audit instance, generate an audit report and preview online or download it.

Prerequisites

  • You have purchased a database audit instance and the Status is Running.
  • Database audit has been enabled.
  • A security group rule has been configured for the database audit instance.

Report Types

Database audit provides eight types of report templates. Table 1 lists the report names. You can generate reports and set report tasks as needed.

Table 1 Description

Template Name

Report Type

Description

Database Security General Report

Overview report

Provides the overall audit status of the database, including risks, sessions, and login status to better manage databases.

Database Security Compliance Report

Compliance report

This report helps database administrators and auditors detect abnormal behaviors, locate problems, and manage information.

SOX Report

Compliance report

Complies with the Sarbanes-Oxley Act (SOX) to provide statics on and evaluate database operations. This report helps database administrators and auditors detect abnormal behaviors, locate problems, and manage information.

Database Server Analysis Report

Database report

Provides statistics and analysis on active users, user IP addresses, database logins and requests, database usage duration, and database performance.

Client IP Address Analysis Report

Client report

Provides statistics on client applications, database users, and SQL statements collected from user IP addresses.

DML Command Report

Database operation report

Analyzes user and privileged operations based on DML commands.

DDL Command Report

Database operation report

Analyzes user and privileged operations based on DDL commands.

DCL Command Report

Database operation report

Analyzes user and privileged operations based on DCL commands.

Step 1: Generating a Report

You can generate reports immediately or periodically. You can also customize the generation time, frequency, and format of reports.

  • Method 1: Generating a Report Immediately
  1. Log in to the management console.
  2. Select a region, click , and choose Security & Compliance > Database Security Service. The Dashboard page is displayed.
  3. Select a region, click , and choose Security > Database Security Service. The Dashboard page is displayed.
  4. In the navigation tree on the left, choose Reports.
  5. In the Instance drop-down list, select the instance whose instance report you want to generate.
  6. Click the Report Management tab.
  7. In the Operation column of a report template, click Generate Report.
  8. In the displayed dialog box, click to set the start time and end time of the report, and select the database for which you want to generate a report.
  9. Click OK.
  • Method 2: Setting Periodic Report Release
  1. Log in to the management console.
  2. Select a region, click , and choose Security & Compliance > Database Security Service. The Dashboard page is displayed.
  3. In the navigation tree on the left, choose Reports.
  4. In the Instance drop-down list, select the instance for which you want to set a report task.
  5. Click the Report Management tab.
  6. Locate the target template and click Schedule Task in the Operation column, as shown in Figure 1.

    Figure 1 Setting a task

  7. In the displayed dialog box, set the parameters of the scheduled task, as shown in Figure 2. For details about related parameters, see Table 2.

    Figure 2 Setting a scheduled task
    Table 2 Parameters for setting a task

    Parameter

    Description

    Example Value

    Enable Task

    Status of a scheduled task.

    • : enabled
    • : disabled

    Message Notifications

    Enables or disables notifications.

    Notifications are sent by Simple SMN and will probably incur a small fee. See SMN Pricing Details.

    • : enabled
    • : disabled

    Report Type

    Type of a report. The options are as follows:

    • Daily
    • Weekly
    • Monthly

    Weekly

    Execution Mode

    Execution mode of the report. The options are as follows:

    • Once
    • Periodically

    Periodically

    Time

    Time when the report is executed

    10:00

    Database

    Database for which you want to execute the report task

    -

  8. Click OK.

Step 2: Previewing and Downloading Audit Reports

Before previewing or downloading an audit report, ensure that its Status is 100%.

To preview a report online, use Google Chrome or Mozilla FireFox.

  1. Log in to the management console.
  2. Select a region, click , and choose Security & Compliance > Database Security Service. The Dashboard page is displayed.
  3. In the navigation tree on the left, choose Reports.
  4. In the Instance drop-down list, select the instance whose report you want to preview or download.
  5. Locate the target template, and click Preview or Download in the Operation column to preview or download the report. See Figure 3..

    Figure 3 Previewing or downloading an audit report