Alerts show no values for Application Name or OS User in PostgreSQL, MySQL, or MariaDB
Last Modified: 2022-09-26 07:10:03 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
Alerts show no values for Application Name or OS User in PostgreSQL, MySQL, or MariaDB
Technical Articles ID:
KB94080
Last Modified: 2022-09-26 07:10:03 Etc/GMT Environment
Database Activity Monitoring (DAM) 4.x
Problem
You receive alerts that don't contain values for application name or operating system ( Cause
DAM sensor versions up to 4.8.0 don't support reporting the Application Name and DAM sensor versions up to 4.8.1 don't support reporting the Application Name and SolutionFor PostgreSQL, upgrade the DAM sensor and PostgreSQL plug-in to the versions released in Database Security 4.8.1.
For MySQL, upgrade the MySQL plug-in to the latest version released in Database Security 4.8.1.
For MariaDB, upgrade the MariaDB plug-in to the latest version released in Database Security 4.8.2. MySQL extra details:
The MySQL client must send the
Currently, the
If you connect to MySQL using MySQL Connector, the
MySQL
MySQL Application Name
PostgreSQL extra details:
Postgres
Postgres Application Name
MariaDB extra details:
Connecting to MariaDB using the MySQL client:
The MySQL client must send the
Currently, the
It's also needed to enable the Performance Schema feature for the monitored MariaDB instance for the MySQL client to report Application Name and
For the exact steps, see the MariaDB documentation. If you connect to MariaDB using MySQL Connector, the
Connecting to MariaDB using the MariaDB client:
Currently, Application Name is only available when using the MariaDB client (the MariaDb command-line client) in the following versions:
IMPORTANT: None of the MariaDB client versions from 10.0.5 and later report the
MariaDB
MariaDB Application Name
Affected ProductsLanguages:This article is available in the following languages: |
|