Policy Matching for Audit Query

Querying Policy Matching Audit Records

1. Logging in to the Database Operations and Maintenance Management System using the secadmin Security Administrator account specified.
2. Select Behavioral Auditing> Policy Matching Audit from the left navigation pane.
3. Filter logs by the following items:
   1. Enter the Access Time to search the log.
   2. Enter the platform User to search the logs.
   3. Enter the Statement Type to search the log.
   4. Enter the Access Tool name to search the log.
   5. Enter the Visitor IP address to search the logs.
   6. Select a Matching Strategy to search the logs.
   7. Select a Response Action to search the log.
   8. Enter the Asset Control Name to search the log.
   9. Enter the Database Instance name to search the log.
   10. Enter the Table Name involved in the SQL query to search the log.
   11. Enter the Field Name involved in the SQL query to search the log.
       Figure 1 Pattern atching audit
       

       Table 1 Strategy atching audit list filter condition parameter description

       Parameter	Description
       Access time	Platform user operation time.
       User	Operating platform username.
       Statement Type	The type of SQL statement executed by operations personnel when accessing the database, such as SELECT.
       Access Tool	The name of the client tool used by operations personnel to execute SQL statements in the database, such as WebSQL.
       Visitor IP	The IP address of the server hosting the client tool used by operations personnel to execute SQL statements in the database.
       Matching Policy	The name of the policy under Operation and Maintenance Asset Control> Security Management> Policy Management.
       Response Action	The corresponding actions performed by operations personnel when accessing the database with SQL statements (All,Block,Allow,SQL Replace,Table Replace,Field Desensitization,Fuzzy Desensitization,Audit,Row Access Control,and Suspend).
       Asset Control Name	Asset control name information.
       Database Instance	The database instance name or SCHEMA name involved in the SQL queries executed by platform users during operation and by maintenance personnel when accessing the database to retrieve data.
       Table Name	The table names involved in the SQL queries executed by operations personnel when accessing the database.
       Field Name	The field names involved in the SQL queries executed by operations personnel when accessing the database.