IBM Support

Does Guardium capture/audit the logs of code inside the stored procedure.

Question & Answer


Question

Does Guardium capture/audit the logs of code inside the stored procedure.
Example: If a stored procedure code is executing a delete operation, will that (delete operation) be captured? Or will it just log that the stored procedure was executed?

Answer

Currently this functionality does not exist in Guardium.
IBM Securty Guardium functions called in stored procedures not captured by Guardium
https://www.ibm.com/support/pages/ibm-securty-guardium-functions-called-stored-procedures-not-captured-guardium
Please note this limitation isn't just for MSSQL, it's for all DB types.
There is an existing Request for Feature Enhancement (RFE) escalation (OMB-205) against Guardium 10.5 but currently there are no plans to implement this functionality.
If you would like to see this enhancement implemented within Guardium, please post another enhancement request and mention the prior request (OMB-205) to increase awareness.
IBM Security Guardium Ideas Portal
https://ibm-guardium.ideas.ibm.com/ideas

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"ARM Category":[{"code":"a8m0z0000000AqmAAE","label":"AUDIT"}],"ARM Case Number":"TS011414032","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
11 January 2023

UID

ibm16854645