Troubleshooting
Problem
IBM Guardium Alert per session sends more than one alert per session for MSSQL
Symptom
Every command on MSSQL sends an alert for same session_id
Cause
Multiple email alerts is sent for same session id for MSSQL
Diagnosing The Problem
Create an session list report and add session id in the report from session entity
For MSSQL create an access rule and set action as Alert once per session and try connecting to SQL Server using SQL Server Management studio
If you find two alerts for same session id like below
Resolving The Problem
Use Trigger once per session in the rule which have action as Alert once per session.
[{"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Guardium Appliances","Platform":[{"code":"PF033","label":"Windows"}],"Version":"10.0;10.0.1;10.1;10.1.2;10.1.3","Edition":"All Editions","Line of Business":{"code":"LOB24","label":"Security Software"}}]
Was this topic helpful?
Document Information
Modified date:
04 September 2019
UID
swg22010594