You can add these event properties to the Events table or display them as widgets on the Events page.
Option | Definition |
|---|---|
Accessed Object Full Name | The full name of the DBMS object accessed as a result of the operation. |
Accessed Object Name | The short name of the DBMS object accessed as a result of the operation. |
Accessed Object Owner | The owner of the DBMS object accessed as a result of the operation. |
Accessed Object Type | The type of the DBMS object accessed as a result of the operation. |
Action | The application action. |
Application | The application that created the SQL statement. |
Application ID | The ID of the application that created the SQL statement that triggered the event. |
Batch CMD Types | The batch SQL command types. |
Bind Variables | Content of the input parameter of a SQL query. |
Client Accounting | Client accounting details. |
Client App Name | The client application name. |
Client Host Name | The client host name. |
Client ID | The ID of the application user that triggered the event. |
Client Info | Client information. |
Client IP | The IP address of the client that triggered the event. |
Client Name | The name of the client that triggered the event. |
Client Workstation Name | The name of the client workstation that triggered the event. |
CMD Type | The SQL command type. |
Connection Type | The type of connection used to connect to the host operating system (DCOM for Windows; SSH for Linux or UNIX). |
Context Info | (MSSQL only) The user information. This field is used instead of the Application, Module, and Client ID fields that are used in Oracle. |
Counter | Amount of times the event occurred. |
Database Name | The name of the database for which the event was generated. |
Database Type | The database type. |
Database Version | The database version. |
DB Container | The database container. |
End User Action | The action performed by the end user. |
End User IP Address | The IP address of the end user. |
End User Module | The end user module. |
End User Name | The name of the end user. |
Error Code | The error code returned for the event. |
Execution Time | The date and time of the scan that detected the event. |
Inflow Object Full Name | The full name of the original PL/SQL program unit within the DBMS that originated the SQL command. |
Inflow Object Name | The full name of the original PL/SQL program unit within the DBMS that originated the SQL command. |
Inflow Object Owner | The owner of the original PL/SQL program unit within the DBMS that originated the SQL command. |
Inflow Object Type | The type of PL/SQL program unit within the DBMS that originated the SQL command. |
Inflow SQL Statement | The type of SQL statement. |
Log-On Time | (MSSQL only). The time when the user logged on to the application. This field, when taken together with the Session ID, provides a unique session identifier. |
Module | The module that generated the alert (if available). |
Monitoring Source | Network monitoring, Memory monitoring, In process monitoring. |
Net Host | The network resolved host name. |
Net IP Address | The network resolved IP address. |
OS User | The operating system user. |
Real Exec User | The real user behind the execution request. |
Row Number | The row number of the data requested from within a table. |
Rule ID | The ID of the rule that generated the event. |
Rule Name | The name of the rule that generated the event. |
Rule Type | The type of rule that generated the event. |
Rules | All rules that triggered for this particular event. |
Schema | The database schema. |
Sensor | The sensor that generated the event. |
Sensor Host | The host server of the sensor that generated the event. |
Sensor IP | The IP address of the sensor that generated the event. |
Sensor Name | The name of the sensor that generated the event. |
Serial | (Oracle only) The serial number generated by Oracle for this instance of the Session. This ID, when taken together with the Session ID, provides a unique session identifier. |
Session Actions | The actions triggered during the session. |
Session ID | The session ID provided by the DBMS. |
Severity | The level of severity assigned to the event. |
Source Host | The host server of the source. |
Source IP Address | The IP address of the source. |
SQL Statement | The SQL statement that triggered the event. |
Statement Duration | The duration of the statement. |
Statement Hash | The statement hash tag. |
Statement Num | The number of the statement. |
Terminal | The user terminal (if available). |
Transaction Token | Returns a unique identifier for the transaction. |
User | The user whose action triggered the event. |
Workflow History | History of the workflow for a particular event (assigned to User A or User B within Insights). |
Note
Some of the mentioned properties are not available as widgets.