IBM Support

IBM Security Guardium - Audit Process CSV File Name

Question & Answer


Question

Is it possible to shorten the name of an audit process report as delivered in email?

Cause

The file name consists of the following elements:
<Audit report label>_<run number>_<timestamp>_<process ID>_<task ID>.csv
EXP_Expin_Test_1_2016_11_30-041500_ap1000003_n5_a_v8_t1000003.csv

The length of the file may prevent a user from opening it directly in email.

Answer

There is no way to customize the name aside from changing the label. The appendages are part of the Guardium design and important from a system/appliance standpoint.

The Knowledge Center discusses Audit Process File names: https://www.ibm.com/support/knowledgecenter/SSWL9Z_10.0.0/com.ibm.guardium.appmask.doc/monitor/building_audit_processes.html

Exported CSV and CEF files are stored on the Guardium system and are named in the format:
<process>_<task>_<YYYY_MMM_DD-HHMMSS>.<csv | cef>.

This is broken down as follows:

<process> is a label you define on the audit process definition.
<task> is a second-level label that you can define for each task within the process.
<YYYY_MMM_DD-HHMMSS> is a date-time stamp created when the task runs.

[{"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Guardium Database Activity Monitor","Platform":[{"code":"PF016","label":"Linux"}],"Version":"10.0;10.0.1;10.1;10.1.2","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg21996469