Identifiers

String-based

Types that are matched against strings.

Number-based

Types that can be translated into a number representation. Numbers can be in a specific range. Number-based types can be enforced to equal only a fixed set of constants.

Enumerated

Types that represent a fixed set of constants that can't be translated into a number representation.

action

string

The application action.

Memory and Network

application

string

The application used to connect to the DBMS.

Memory and Network

bindvar

string

The bind variable value to match, for example, bindvar='123' will detect statements that contain a bind variable where the resolved bind variable value is '123'.

Network

client_acctstr

string

DB2 client account string (DB2 only).

Memory and Network

client_appl_name

string

Sybase client application name (Sybase only).

Memory and Network

client_host_name

string

The Sybase client host name (Sybase only).

Memory and Network

client_info

string

Supplies any additional information about the client application

Memory and Network

client_ip

number

The IP address of the database client application. IP addresses must be in the form of - XXX.XXX.XXX.XXX (single IP address) or XXX.XXX.XXX.XXX/YYY.YYY.YYY.YYY (IP address with subnet). Each IP address is validated by the Database Security system to prevent errors.

Memory and Network

client_name

string

The Sybase client name (Sybase only).

Memory and Network

client_wrkstnname

string

The hostname of the client system that is trying to connect with the database.

Memory and Network

clientid

string

The application set client id accessing the DBMS (Oracle only).

Memory and Network

cmdtype

string

An action the statement is trying to perform.

Memory and Network

connection_type

string

The connection type of a detected statement; "Encrypted" or "Not Encrypted".

Memory and Network

context_info

string

Microsoft SQL context information (Microsoft SQL only).

Memory and Network

date

number

The date the statement is executed. The date must be in the form MM/DD/YY (US date format), for example 1/25/07.

Memory and Network

day

number

The day of the month when the statement is executed. An integer in the range of 1–31.

Memory and Network

db_container

string

The database container. This provides specific database context information when using the Pluggable Database functionality (Oracle 12c only).

Memory

dbms_host

string

The host name of the system where the DBMS is monitored.

Memory and Network

dbms_name

string

The name of the DBMS instance as it appears in the DBMSs tab of the Server web console.

Memory and Network

duration

number

Duration of statement execution.

Memory and Network

enduser_action

string

End user action.

Memory and Network

enduser_ip

number

The IP address of the enduser who can access the database from. IP addresses must be in the form of - XXX.XXX.XXX.XXX (single IP address) or XXX.XXX.XXX.XXX/YYY.YYY.YYY.YYY (IP address with subnet). Each IP address is validated by the Database Security system to prevent errors.

Memory and Network

enduser_module

string

End user module.

Memory and Network

enduser_name

string

End user name.

Memory and Network

error code

number

The error code returned by the DBMS (for example, when the user tries to access a table that does not exist).

Network

exec_user

string

If a user logs into an application and then changes to another user, the exec_user is the new user.

Memory and Network

host

string

The domain name of the connecting application.

Memory and Network

hour

number

The hour in which the statement is executed. The hour must be in the form HH[— MM] where HH is in the range of 0–23 and MM in the range of 0–59. The minutes setting is optional.

Memory and Network

inflow

string

The inflow PL/SQL object that originated the current executing statement. Same format as object.

Memory

inflowsql

string

The SQL statement part that originated the current executing command.

Memory

instance

string

The instance where the execution takes place. In Oracle, this value is the SID of the database instance. In Sybase, this value is the instance name. In MS SQL, it is the full instance name including the host (for example, MYHOST\SQLSERVER).

Memory and Network

ip

number

The IP address the statement is executed from. IP addresses must be in the form of - XXX.XXX.XXX.XXX (single IP address) or XXX.XXX.XXX.XXX/YYY.YYY.YYY.YYY (IP address with subnet). Each IP address is validated by the Database Security system to prevent errors.

Memory and Network

module

string

The application set module. Applicable to Oracle and SAP HANA only.

Memory and Network

month

number

The month in which the statement is executed: JANUARY, FEBRUARY, MARCH, APRIL, MAY, JUNE, JULY, AUGUST, SEPTEMBER, OCTOBER, NOVEMBER, DECEMBER. Also, the short form of month name is also supported, for example, JAN.

Memory and Network

nethost

string

The host name of the network (this might differ from the host name reported for an application). Applicable only when network monitoring is enabled.

Network

netip

number

The IP address of the network (this might differ from the IP address reported for an application). Applicable only when network monitoring is enabled.

Network

object

string

The DBMS object being accessed. Supports syntax of the form [owner.]objectname. DBMS objects include such as, tables, triggers, or stored procedures. In Oracle, the format is owner.objectname; in MS SQL and Sybase it is database.owner.objectname.

Memory and Network

osuser

string

The operating system user.

Memory and Network

schema

string

The schema of the DBMS.

Memory

session_state

string

Memory

postgres_sqlstate

string

The alphanumeric code returned by the PostgreSQL DBMS for an executed query.

Memory and Network

statement

string

The raw statement sent to the server.

Memory and Network

terminal

string

The computer where the user is logged on.

Memory and Network

user

string

The DBMS user that is accessing the DBMS.

Memory and Network

version_dbtwo

number

The DB2 version including minor version and patch, for example: DB2 11.5.6.

Memory and Network

version_mssql

number

The Microsoft SQL version, for example, version_mssql =9.0.4053 for the relevant version of MS SQL 2005 (rarely used).

Memory and Network

version_oracle

number

The full 5-digit Oracle version, for example, 10.1.0.3.0 (rarely used).

Memory and Network

version_sybase

number

The Sybase particular version, for example, version_sybase = 12.5 or later (rarely used).

Memory and Network

weekday

value

The day of the week when the statement is executed: SUNDAY, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY. Also, the short form is also supported, for example, TUE.

Memory and Network