Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

MariaDB plug-in always shows "mariadb" as source program #156

Closed
Tal-Daniel opened this issue Aug 17, 2022 · 1 comment
Closed

MariaDB plug-in always shows "mariadb" as source program #156

Tal-Daniel opened this issue Aug 17, 2022 · 1 comment
Labels
good first issue Good for newcomers

Comments

@Tal-Daniel
Copy link
Member

Describe the bug
When using MariaDB plug-in within Guardium, the reports show the source program as "MARIADB", no matter what, instead of defaulting to empty field, when no info exists in the MariaDB audit logs.

To Reproduce
Steps to reproduce the behavior on developer machine:

  1. Download the plug-in zip and Install it in Logstash (follow README > setup dev environment, first)
  2. Run Logstash with this plugin and the test configuration that resides within the plug-in's folder (see README > Run on local Logstash). This will generate an event you can test. Alternatively, run the Java code and add a unit test.
  3. Check the source program field within the POJO of the Logstash dummy output plugin
  4. sourceProgram contains "mariadb", instead of being empty.

Expected behavior
Correct source program, or if not available in audit log, empty field, as source program is not a mandatory field within the Guardium Record object.

Environment (please complete the following information):

  • Product: Guardium Data Protection
  • Version 11.4

Additional context
Looks like a minor fix could solve this by not filling the source program parameter here, instead of putting a constant

@Tal-Daniel Tal-Daniel added the good first issue Good for newcomers label Aug 17, 2022
@ofer-haim
Copy link
Collaborator

MariaDB bug was adjusted to be consistent with the rest of the plugins behavior. Hence, closing this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
good first issue Good for newcomers
Projects
None yet
Development

No branches or pull requests

2 participants