Question & Answer
Question
Why does my Guardium Enterprise Search result page sometimes show inaccurate "Database" information? For example, when reviewing search results for DB2 traffic, the Enterprise Search result page shows the DB2 instance name in the 'Database' column. If I use my own report with SESSION entity's 'Database Name' column to view the same session information, I see the correct 'Database Name' for related DB2 traffic.
Answer
Most database engine's DATABASE NAME is logged in 'Client/Server' Entity's 'SERVICE NAME' field. However, there are some exceptions, e.g. for DB2 traffic, the 'SERVICE NAME' field logs the DB2 instance name information. The exact database name is logged in Session's 'Database Name' field.
When designing the Enterprise Search, to comply with most database engines, decision was made to use 'Client/Server' Entity's 'SERVICE NAME' field as the source of Enterprise Search result page's 'Database' information. Therefore, in case of DB2, the Database information in Enterprise Search is showing DB2's instance name, not database name.
This is working as designed. You can create your own report to see the exact DB2 database Name in Session entity's 'Database Name' column.
Was this topic helpful?
Document Information
Modified date:
16 June 2018
UID
swg21996994