Policy Matching for Audit Query

Querying Policy Matching Audit Records

1. Logging in to the Database Operations and Maintenance Management System using the audadmin Security Administrator account specified.
2. Select Behavioral Auditing> Policy Matching Audit from the left navigation pane.
3. Filter logs by any of the following criteria:
   • Enter the Access Time to search the log.
   • Enter the platform User to search the logs.
   • Enter the Statement Type to search the log.
   • Enter the Access Tool name to search the log.
   • Enter the Visitor IP address to search the logs.
   • Select a Matching Policy to search the logs.
   • Select a Response Action to search the log.
   • Enter the Asset Control Name to search the log.
   • Enter the Database Instance name to search the log.
   • Enter the Table Name involved in the SQL query to search the log.
   • Enter the Field Name involved in the SQL query to search the log.
     Figure 1 olicy matching audit
     

     Table 1 Strategy atching audit list filter condition parameter description

     Parameter	Description
     Access Time	Platform user operation time.
     User	Operating platform username.
     Statement Type	The type of SQL statement executed by operations personnel when accessing the database, such as SELECT.
     Access Tool	The name of the client tool used by operations personnel to execute SQL statements in the database, such as WebSQL.
     Visitor IP	The IP address of the server hosting the client tool used by operations personnel to execute SQL statements in the database.
     Matching Policy	The name of the policy under Ops Asset Control> Security Control> Policy Management.
     Response Action	The corresponding actions performed by operations personnel when accessing the database with SQL statements (All, Block, Allow, SQL Replace, Table Replace, Field Desensitization, Fuzzy Desensitization, Audit, Row Access Control, and Suspend).
     Asset Control Name	Asset control name information.