Viewing Trend Analysis
After connecting a database to the database audit instance, view the database related analysis.
- The statement trend analysis includes the following:
- Statement quantity
- Session statistics
- SQL distribution
- The risk trend analysis includes the following:
- Risk distribution
- SQL injections
- Risky operations
Prerequisites
- The database audit instance is in the Running state.
- For details about how to enable database audit, see Enable Database Audit.
Constraints and Limitations
This function is supported only when the instance version is 23.05.23.193055 or later.
Viewing Trend Analysis
- Log in to the DBSS console.
- Click
in the upper left corner on the displayed page and select a region. - In the navigation tree on the left, choose Data Reports. The Data Reports page is displayed.
- In the Instance drop-down list, select the instance whose SQL statement information you want to view.
- Click the Trends tab.
- View Statements and Risks of the database.
- Click Re-analyze on the right of the console. Figure 1 Re-analyze
- Select All databases or a specified database from the Database drop-down list to view the statement and risk trend analysis of all databases or a specified database in the instance.
- Select Last 30 minutes, 1 hour, Today, 7 days, or 30 days, or click
to customize the start time and end time to view the statement and risk trend analysis in a specified period.
- Click Re-analyze on the right of the console.
Statement Trend Analysis
- Statement Quantity: collects the number of SQL statements in a specified period. Figure 2 Statement quantity
- Session Statistics: collects the numbers of new sessions, failed sessions, and active sessions in a specified period. Figure 3 Session statistics
- SQL Distribution: collects the distribution of SQL statement types in a specified period. Figure 4 SQL distribution
Risk Trend Analysis
- Risk Distribution: collects the distribution of risky operations by risk level in a specified period. Figure 5 Risk distribution
- SQL Injection: collects the number of SQL injections in a specified period. Figure 6 SQL injections
- Risky Operations: collects the number of risky operations in a specified period. Figure 7 Risky operations
References
In the report center, you can preview, download, or delete audit reports online, and view report templates and results. For details, see Report Center.
Database audit provides five types of audit rules: audit scope, SQL injection, risky operations, privacy data masking, and SQL whitelists. You can manage and prioritize these rules to detect risks, defend against attacks, enhance compliance, and minimize false positives. For details, see Managing Audit Rules.
What is your overall rating for this page?
Thank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbot