Linux-Unix: Db2 Exit integration with S-TAP
The Db2 exit module enables S-TAP to monitor any Db2 database activities, whether encrypted or not and whether local or remote. It does not require A-TAP or K-TAP.
About this task
Db2 exit embeds a Guardium library into the Db2 database and communicates with the S-TAP via a Guardium shared library.
- libguard_db2_exit_32.so
- libguard_db2_exit_64.so
- It copies libraries in the standard library paths:
- Shell Installation: <guardium_installation_directory>/guard_stap
- GIM Installation: < guardium_installation_directory>/modules/STAP/current/files
- It creates links, for example:
- /usr/lib/libguard_db2_exit_32.so -> libguard_teradata_db2_32.so.<release number>
- /usr/lib64/libguard_db2_exit_64.so -> libguard_teradata_db2_64.so.<release number>
.so.
reflect the release number. These digits were introduced
in V10.6. (In previous releases, Lib files do not include release numbers.)Linux-Unix: S-TAP monitoring mechanisms support matrix details exactly what can be monitored by Db2 Exit.
If there is no other database to monitor then K-TAP is not required. Set ktap_installed=0 in guard_tap.ini, or with GIM: set ktap_enabled to no. You can upgrade the Linux OS and the S-TAP without being concerned about K-TAP module compatibility. However, if there is another database that needs monitoring by S-TAP, then K-TAP is required. You must ensure that a compatible K-TAP module is available when you upgrade your Linux version.
When upgrading S-TAP from v10.6.0.0 and higher, database restart is not required. You can upgrade S-TAP while the database is running. The EXIT library from the previous version is used until you restart the database, When you restart the database, it starts using the updated exit library on the S-TAP. If, however, there are any issues addressed in the new library that you are waiting for, you must restart the database.
Use the Db2 exit health check script to gather information from the Db2 server, for use when configuring the Db2 IEs. The script is located in the guard_stap bin directory. (If you are running an S-TAP version prior to v10.6, obtain the script from Technical Support.) You can run it from anywhere with the full path. The script name is ./db2_exit_health_check.sh [ check | fix ]. By default it outputs some of the IE parameters for each DB2_EXIT IE, and runs checks on the IE configuration. Use the fix option to fix the IE parameters.