Sybase target database pre-configurations
FortiDB database activity monitoring (DAM) features require you to pre-configure a Sybase target database but not a Sybase IQ database.
For Sybase IQ databases. FortiDB supports vulnerability assessment only, and not DAM. Therefore, Sybase IQ targets do not require pre-configuration.
Configuring the Sybase audit system and FortiDB database user
To create the sybsecurity database
Execute the following command. The physname parameter specifies the sybase path (in this example, C:\sybase\data\
):
disk init name = "auditdev", physname = "C:\sybase\data\sybaud.dat", size = 5120
go
disk init name = "auditlog", physname = "C:\sybase\data\sybaudlog.dat", size = 1024
go
create database sybsecurity on auditdev log on auditlog
go
To install the installsecurity script
The installsecurity
SQL script contains all required stored procedures and audit tables.
- Go to the scripts directory. For example,
$SYBASE/ASE-15_0/scripts
. - Execute the following command:
- Restart the database.
isql -Usa -P<password> < instsecu
To grant the mon_role role to the database user
To grant the mon_role
role to the FortiDB database user, use the following script:
grant role mon_role to <username>
The mon_role role is applied the next time the user logs in. If you are currently logged in with that account, log out and log in again to allow the new privileges to take effect. |