Database Log Messages

https://docs.trellix.com/bundle/database-security-4.8.x-product-guide/page/GUID-AB0748F3-CFA0-4688-9496-29DF34BA0428.html

Database Log Messages

Base Rule

Database Information

Information

N/A

N/A

N/A

Appliance vendor

N/A

<vendorinfo>

Text/String

Appliance product

N/A

<version>

Text/String

Appliance version

N/A

 N/A

N/A

Appliance Event Class ID

N/A

<objecttype>

Text/String

Name

N/A

<severity>

Number

Severity

externalId

N/A

N/A

$id$ Session ID

rt

N/A

N/A

$executionTime.time$ Execution time in millis format

cs1

<objectname>

Text/String

$database.name:20$ Database name

cs1Label

N/A

N/A

DBMS

dst

<dip>

IP Address

$agent.ip$ IP address of the monitoring agent

src

<sip>

IP Address

$sourceIP$ Source IP address

duser

<account>

Text/String

$execUser:20$ Database user

suser

<login>

Text/String

$osUser:20$ OS user

shost

<sname>

Text/String

$sourceHost:30$ Source host

dproc

<process>

Text/String

$execProgram:20$ Executing program

act

<action>

Text/String

$cmdType:15$ SQL command type

cs2

<command>

Text/String

$operation:225$ Statement executed

cs2Label

N/A

N/A

SqlStatement

cs3

<object>

Text/String

$accessedObjects.name:200$ Delimited list of accessed objects pipe

cs3Label

N/A

N/A

AccessedObjects