Sybase Recorder Reference Guide

More documents

Recommendations

Info

eTrust Audit Field Mappingsyslisteners.Category Derived from NID Event category. See Sybase event table above.Status‘S’ or ‘F’ depends oneventmod‘S’uccess when eventmod = 0 or 1‘F’ailed when eventmod = 2eTrust Audit Normalized FieldsNormalized Fields are eTrust Audit field names that are mapped or translatedfrom the native event field names according to the classification of the Recorder.Normalized fields are common across all products in the same classification. ForSAPI recorder, the classification is defined by the Log Name (see eTrust AuditMandatory Fields).Normalized Fields for Sybase RecordereTrust Audit Field Sybase sysaudit fields DescriptionOperation Derived from Event ID Name of the operation thattriggers the event. See Sybaseevent table above.ObjClass Derived from Event ID The class of objects as reported inthe event. See Sybase event tableabove.ObjName Derived from Event ID Object name corresponding toSybase_OID (see Product Specificfields below)Event ID Event Event type. See Sybase eventtable above.PID Spid Server process Id of the databaseprocess that caused the eventEventCount Sequence Sequence number within a singleevent. Some events require morethan one audit record12 eTrust Audit
eTrust Audit Field MappingUID Suid Server login id of the user whoperformed the audited eventUser Loginname Login name corresponding toUIDTerm extrainfo if event = 45 or 46 Terminal from which the userlogs inSurrogateUser extrainfo if event = 84 Name of the user being setInfo Extrainfo Text description of event.Sequence of up to 7 itemsseparated by ‘;’. The 7 items are:roles, keywords or options,previous value, current value,other information, proxyinformation, principal nameSybase Recorder Product Specific FieldsProduct Specific fields are native event fields that are not mapped or translatedby the Recorder. These fields are sent to eTrust Audit with minor name change:all characters in the field name that are not letters, digits, or underscore areconverted to underscores.Product Specific Fields for Sybase RecordereTrust Audit Field Sybase sysaudit fields DescriptionSybase_DBID Dbid Database ID in which the auditedevent occurred or the object /trigger resides, depending on theevent type.Sybase_OID Objid ID of the accessed object orstored procedure / triggerSybase_XACTID Xactid ID of the transaction containingthe audited event.Sybase_DBName Bbname Database name corresponding toSybase_DBID13
Page 1 and 2: eTrust AuditSybase Recorder Refere
Page 3 and 4: Sybase Recorder Reference GuideSyst
Page 5 and 6: Installation Validation• Sybase u
Page 7 and 8: Reconnection to the Sybase ServerIt
Page 9 and 10: Sybase Policy• Network• Policy
Page 11 and 12: eTrust Audit Field Mapping>goNumber
Page 13: eTrust Audit Field Mapping55 Accoun

Sybase Recorder Reference Guide

Create successful ePaper yourself

Delete template?

Save as template?