Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 

JDBC Log Source Parameters for Samhain

 

If JSA does not automatically detect the log source, add a Samhain log source on the JSA Console by using the JDBC protocol.

When using the JDBC protocol, there are specific parameters that you must use.

The following table describes the parameters that require specific values to collect JDBC events from Samhain:

Table 1: JDBC Log Source Parameters for the Samhain DSM

Parameter

Value

Log Source Type

Samhain HIDS

Protocol Configuration

JDBC

Log Source Identifier

Type a name for the log source. The name can't contain spaces and must be unique among all log sources of the log source type that is configured to use the JDBC protocol.

If the log source collects events from a single appliance that has a static IP address or host name, use the IP address or host name of the appliance as all or part of the Log Source Identifier value; for example, 192.168.1.1 or JDBC192.168.1.1. If the log source doesn't collect events from a single appliance that has a static IP address or host name, you can use any unique name for the Log Source Identifier value; for example, JDBC1, JDBC2.

Database Type

Select Oracle, PostgresSQL, or MySQL

Database Name

<Samhain SetDBName>

IP or Hostname

<Samhain SetDBHost>

Username

<Samhain SetDBUser>

Password

<Samhain SetDBPassword>

Table Name

<Samhain SetDBTable>