How to monitor database activity?

unread,

Jun 29, 2022, 11:24:23 PM6/29/22

to Wazuh mailing list

Hello Everyone

Can wazuh monitor activity on databases, such as when a user is doing a query?

Thanks & Regards

Randy

unread,

Jul 1, 2022, 4:18:21 AM7/1/22

to Wazuh mailing list

Hello Everyone

can anyone help me?

Thanks & Regards

Randy

unread,

Jul 4, 2022, 5:05:55 AM7/4/22

to Wazuh mailing list

Hello Juan

Yes, you can monitor database activity. You will need to enable the logging of your database software. Most of them have an option that enables the activity to log into a file. This file can be read by Wazuh using logcollector: https://documentation.wazuh.com/current/user-manual/capabilities/log-data-collection/index.html. If Wazuh has no rules by default for your database software, you can easily create new custom rules https://documentation.wazuh.com/current/user-manual/ruleset/custom.html for detecting your database activity.

Hope it helps.

Regards,

Alberto

Reply all

Reply to author

Forward