Lab guide

Create Guardium reports with drill-down

capabilities
Course code LDL0192X
February 2022 edition
NOTICES
This information was developed for products and services offered in the USA.
IBM may not offer the products, services, or features discussed in this document in other countries. Consult your local IBM
representative for information on the products and services currently available in your area. Any reference to an IBM product, program,
or service is not intended to state or imply that only that IBM product, program, or service may be used. Any functionally equivalent
product, program, or service that does not infringe any IBM intellectual property right may be used instead. However, it is the user's
responsibility to evaluate and verify the operation of any non-IBM product, program, or service.
IBM may have patents or pending patent applications covering subject matter described in this document. The furnishing of this
document does not grant you any license to these patents. You can send license inquiries, in writing, to:
IBM Director of Licensing
IBM Corporation
North Castle Drive, MD-NC119
Armonk, NY 10504-1785
United States of America
The following paragraph does not apply to the United Kingdom or any other country where such provisions are inconsistent with local
law: INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS PUBLICATION "AS IS" WITHOUT WARRANTY OF ANY
KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT,
MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some states do not allow disclaimer of express or implied warranties
in certain transactions, therefore, this statement may not apply to you.
This information could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein;
these changes will be incorporated in new editions of the publication. IBM may make improvements and/or changes in the product(s)
and/or the program(s) described in this publication at any time without notice.
Any references in this information to non-IBM websites are provided for convenience only and do not in any manner serve as an
endorsement of those websites. The materials at those websites are not part of the materials for this IBM product and use of those
websites is at your own risk.
IBM may use or distribute any of the information you supply in any way it believes appropriate without incurring any obligation to you.
Information concerning non-IBM products was obtained from the suppliers of those products, their published announcements or other
publicly available sources. IBM has not tested those products and cannot confirm the accuracy of performance, compatibility or any
other claims related to non-IBM products. Questions on the capabilities of non-IBM products should be addressed to the suppliers of
those products.
This information contains examples of data and reports used in daily business operations. To illustrate them as completely as possible,
the examples include the names of individuals, companies, brands, and products. All names and references for organizations and other
business institutions used in this deliverable’s scenarios are fictional. Any match with real organizations or institutions is coincidental.
All names and associated information for people in this deliverable’s scenarios are fictional. Any match with a real person is
coincidental.

TRADEMARKS
IBM, the IBM logo, and ibm.com are trademarks or registered trademarks of International Business Machines Corp., registered in many
jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM
trademarks is available on the web at “Copyright and trademark information” at www.ibm.com/legal/copytrade.shtml.
Adobe, the Adobe logo, PostScript, and the PostScript logo are either registered trademarks or trademarks of Adobe Systems
Incorporated in the United States, and/or other countries.
Mozilla, Firefox and the Firefox logo are trademarks of the Mozilla Foundation in the U.S. and other countries.
Java and all Java-based trademarks and logos are trademarks or registered trademarks of Oracle and/or its affiliates.
The registered trademark Linux® is used pursuant to a sublicense from the Linux Foundation, the exclusive licensee of Linus Torvalds,
owner of the mark on a world­wide basis.
Microsoft, Windows, Windows NT, and the Windows logo are trademarks of Microsoft Corporation in the United States, other countries,
or both.
UNIX is a registered trademark of The Open Group in the United States and other countries.
VMware, the VMware logo, VMware Cloud Foundation, VMware Cloud Foundation Service, VMware vCenter Server, and VMware
vSphere are registered trademarks or trademarks of VMware, Inc. or its subsidiaries in the United States and/or other jurisdictions.
Red Hat®, JBoss®, OpenShift®, Fedora®, Hibernate®, Ansible®, CloudForms®, RHCA®, RHCE®, RHCSA®, Ceph®, and Gluster® are
trademarks or registered trademarks of Red Hat, Inc. or its subsidiaries in the United States and other countries.

© Copyright International Business Machines Corporation 2022.

This document may not be reproduced in whole or in part without the prior written permission of IBM.
US Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.
Contents
Exercises . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
Exercise 1 Create a report with drill-down capabilities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
Exercise 2 Test the report . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

© Copyright IBM Corp. 2022 iii

Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
Exercises
You can add custom and prebuilt reports to a dashboard. Each report depends on a query to
gather the information for the report. Each query defines what information is gathered.

Effective data security requires that you monitor data and file activity. You use reports to learn the
details of your data security environment.

You show more granular data in reports when you create a custom drill-down report. This type of
report links to other reports by common runtime parameters. If any drill-down actions are
available on a tabular report, the user can see them by right-clicking on a row of the grid. The
pop-up menu includes all of the available drill-down actions.

To be available as a drill-down report, the following conditions must be true:

• All of the runtime parameters for the drill-down report must be available from the report that
you are viewing.
• If security roles are assigned, the user must have access to the drill-down report.

In this lab, you create and test a drill-down report.

Important: These exercises are presented in a virtual lab format. A virtual lab is an interactive
simulation of the original virtual machines. A virtual lab is not an actual virtual machine.
Therefore, your interaction opportunities are restricted to the exercise steps with some minor
variance. You use this lab guide, which walks you through usage and responses for the
components that are taught.

You can run the virtual lab multiple times without restriction.

Exercise 1 Create a report with drill-down

capabilities
In this exercise, you create a report with runtime parameters. Reports that have this structure are
available as drill-down reports from other reports where those parameters are also available.

© Copyright IBM Corp. 2022 1

Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
V7.0
Exercises
Exercise 1 Create a report with drill-down capabilities

Uempty
The report returns details of all database objects that are accessed by a specified database user
or client IP address combination. The database user and client IP are set up in parameter form so
that you can define them at run time, either explicitly, or by using wildcards.

1. To access the Guardium GUI, log in as user labadmin with password P@ssword.
The Welcome window opens.

2. From the left navigation menu, click Reports > Report Configuration Tools > Query-Report
Builder

2
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
V7.0
Exercises
Exercise 1 Create a report with drill-down capabilities

Uempty
The Query-Report Builder window opens.

3. For Domain, select Access.

An icon to add a query and a list of access reports becomes available.

4. Click the Add icon .

3
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
V7.0
Exercises
Exercise 1 Create a report with drill-down capabilities

Uempty
A New Query window opens.

Note: The New Query wizard has several sections, each of which can be expanded or collapsed.
The wizard leads you through the process of building a query and generating a report. You can
also click Query-Report Builder in the lower left part of the wizard to return to the query-report
builder pane.

5. For Query name, type -Accessed Object Details.

6. For Main entity, select Object.

7. Click Next.

The New Query window displays tools to build the query.

4
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
V7.0
Exercises
Exercise 1 Create a report with drill-down capabilities

Uempty
8. To ensure that subsequent reports display counts of the sessions rather than details of each
individual session, select Count.

9. In the Entities and Attributes drop-down window, select Entity: Client/Server. Next, select
Attribute: Client IP and then click the Copy icon .
You choose entities from the Entities and Attributes list to add to the Selected Columns fields,
which determines how the information is displayed. You add entities to the Query Conditions,
which determine what information is displayed.
In the Entities and Attributes table, select Entity: Client/Server, Attribute: Client IP.

5
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
V7.0
Exercises
Exercise 1 Create a report with drill-down capabilities

Uempty
The Client IP attribute is added to the Selected Columns section on the right side of the
window.

10. Select the following attributes and move them to the Selected Columns section:
– Entity: Client/Server, Attribute: DB User Name
– Entity: Client/Server, Attribute: Server IP
– Entity: Client/Server, Attribute: Service Name
– Entity: Client/Server, Attribute: Source Program

6
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
V7.0
Exercises
Exercise 1 Create a report with drill-down capabilities

Uempty
11. In the Entities and Attributes drop-down window, select Entity: Command. Next, select
Attribute: SQL Verb and move the column to the Selected Columns section.
.

12. In the Entities and Attributes drop-down window, select Entity: Object. Next, select Attribute:
Object Name and move the column to the Selected Columns section.

When you are finished, the query builder includes seven entities in the Selected Columns
section.

7
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
V7.0
Exercises
Exercise 1 Create a report with drill-down capabilities

Uempty
13. To save the selected columns, scroll down and click Save.

The success dialog opens.

Note: When you build or modify a Guardium query, save your query early and often to avoid loss
of work and frustration.

14. To configure conditions for your report, click the Expand icon .

15. To configure a condition, click the Add condition icon.

16. Click the Search icon .

8
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
V7.0
Exercises
Exercise 1 Create a report with drill-down capabilities

Uempty
The Select a condition field window opens.

17. To locate the condition, expand Client/Server.

9
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
V7.0
Exercises
Exercise 1 Create a report with drill-down capabilities

Uempty
18. Scroll down and click DB User Name.

19. To save the condition, click Select.

The entity Client/Server:DB User Name is added to the Condition section and the other fields
are enabled.

20. To complete the configuration of the condition, select the LIKE operator and the Parameter
runtime parameter, and type DBUser for value.

21. To add a second condition, click Add condition again.

10
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
V7.0
Exercises
Exercise 1 Create a report with drill-down capabilities

Uempty
You see that another condition is added, with the AND Boolean operator selected.

22. Configure the new condition.

a. Click the Search icon.

The Select a condition field window opens.

b. Expand Client/Server.

c. Click Client IP.

d. Click Select.
The Conditions section is updated to show that Client/Server: Client IP and the other fields
are enabled.

e. To complete the configuration of the condition, select the LIKE operator and the
Parameter runtime parameter. Type ClientIP in the value field.

23. Click Save.

11
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
V7.0
Exercises
Exercise 1 Create a report with drill-down capabilities

Uempty
The GUI pauses for a few seconds, then the Success dialog opens.

24. To return to the Query-Report Builder pane, click OK.

The report configuration is shown.

25. At the lower-right pane, click Query Summary.

A window that summarizes the query opens. This window is useful to view all of the query
details in one place.

You set up a drill-down report. In the next exercise, you test the report.

26. To exit the Query Summary window, click Close.

12
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
V7.0
Exercises
Exercise 2 Test the report

Uempty
Exercise 2 Test the report
In this exercise, you test your drill-down report. First, you create a dashboard and add an existing
report to the new dashboard. Then, you access your drill-down report from the report you added
to your dashboard.
1. In the left navigation menu, go to My Dashboards > Create New Dashboard.
A new dashboard is created.

2. To rename the dashboard, click the Edit icon , type Lab Dashboard, and click Save.

13
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
V7.0
Exercises
Exercise 2 Test the report

Uempty
3. To add a report to your new dashboard, click Add Report.

4. To locate the report, type sessions in the filter, press Enter, and select Detailed Sessions
List.

5. To close the Add a Report window, click Close.

14
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
V7.0
Exercises
Exercise 2 Test the report

Uempty
The dashboard contains your new report.

6. To expand your view of the report, set the Number of columns to 1.

7. Right-click the first entry in the Detailed Sessions List report. For example, right-click any
column on the first row.
A menu lists valid drill-down reports. Because you set up the name of your drill-down report
with a dash, it is at the beginning of the list.

8. Select your drill-down report -Access Object Details.

15
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
V7.0
Exercises
Exercise 2 Test the report

Uempty
A new window opens with your drill-down report.
I

The drill-down report shows the users accessed object details.

9. Close the report.

This concludes this lab.

16
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
© Copyright IBM Corp. 2022