Define the alert level and the action to be taken when the conditions of a specific vPatch rule are met.
Note
You cannot change additional properties of a vPatch rule.
On the Rules page, click the vPatch Rules tab.
In the rules list, click the Properties icon
.png)
in the required row.In the Action area of the rule properties, set the action as follows:
To configure email notification in addition to the alert in the log, select Send alert to email, then select the priority to assign to the email message (Low, Medium, or High). You can also define the email addresses. By default, the administrator's email address is selected. The email settings must be configured on the System page to route email alerts correctly.
To send an alert as an SNMP trap if the rule is matched, select SNMP Trap.
Note
If SNMP is not enabled on the System page in the SNMP tab, this option is disabled.
To terminate a session if the rule is matched, select Terminate user session.
Note
This option should be used sparingly because terminating sessions can disrupt legitimate business transactions. Depending on environmental variables (such as command type and table size), session termination might not stop the current SQL command. Stronger termination capability is provided for DCL and DDL commands that use a before trigger (see DDL triggers).
If you select Terminate user session, the Quarantine user for option is displayed. To quarantine a user, select Quarantine, then enter the number of minutes the user is prevented from reconnecting. For the purposes of quarantine, user represents the database user, OS user, host name, IP address and more, or a combination of these parameters. The user definition for quarantine purposes is defined in the System → Quarantine → Settings.
To run an action script if the rule is matched, expand the Advanced actions, then set the script to run on the host DBMS. You can use all parameters that Database Security monitors within the script, by using $ as a prefix. For example, if you want to use the user parameter in a script, enter
$user.For example,
revoke dba from $useras part of a script revokes the DBA permissions of the database user who executed the SQL command.Note
This option is intended for advanced users only.
To enable this rule, select Enable Rule.
Click Save.