Connecting to Guardium collectors
To stream data to IBM Security Guardium® Insights, you must first connect to your data sources. Learn how to connect to a Guardium central manager to stream data from its collectors.
Before you begin
Ensure that Guardium Insights supports the data source environment that you will connect to.
You might need to adjust your Guardium central manager settings to minimize delays in the data streaming to Guardium Insights. For more information, see Adjusting Guardium central manager and OpenShift Container Platform settings for data mart streaming.
ActivityInsightsPolicy
policy on the Guardium central
manager, and all of its
collectors. You must install the policy (it cannot be cloned or installed by template). For more
information about installing policies on the Guardium central
manager, see https://www.ibm.com/docs/en/guardium/latest?topic=policies-using-policy-installation-tool).Procedure
What to do next
After adding the connection, you can see and work with your data in Guardium Insights reports.
After you add a data source, it is scanned almost immediately. You can use these actions to work with connections:
- To delete a connection, select its checkbox, and click Remove in the banner that opens. You can select multiple connections and remove them with this button.
- To edit a connection, select its Connection name link in the table. This opens a panel that allows you to Enable or Disable the connection. In addition, you can see the status of the connection and edit its configurations.
- To export a CSV list of the connections in the table, click Export CSV. This will export a list of only the connections that are currently in the table - it will not include any that have been filtered out.
- To refresh the list of connections, click Refresh.
When you enable a connection, you can specify the start date for data mart extraction from all collectors.
When you enable or disable the connection, you are enabling or disabling all of its collectors. If you want to enable or disable individual collectors, click the connection to open it. The system displays a list of the collectors. You can enable and disable them in the same manner as they were enabled and disabled when creating the connection.
After completing the connection, you can set up streaming for aggregators by following these instructions.