IBM Netezza Audit Trail

Tracking access and changes to sensitive data is crucial for maintaining security and compliance in a digital-first era. IBM Netezza provides robust audit trail features to monitor and log database activities. This guide delves into the native IBM Netezza Audit Trail, showcases SQL-based auditing, and explains how DataSunrise enhances the process with centralized management capabilities.

What is the IBM Netezza Audit Trail?

The IBM Netezza Audit Trail provides a mechanism to monitor database activity, ensuring that sensitive data remains secure and compliant with regulations. Native auditing features allow users to track queries, data modifications, login attempts, and more. These features use system views and configurations to collect detailed activity logs.

Setting Up a Native IBM Netezza Audit Trail

To implement a native audit trail in IBM Netezza, follow these steps:

1. Create an Audit User

The audit data needs a dedicated user account to manage and store logs.

CREATE USER audituser WITH PASSWORD 'password';
GRANT CREATE DATABASE TO audituser;

2. Create a History Database

Use the nzhistcreatedb command to set up a history database for storing audit logs. Run this command from the terminal:

nzhistcreatedb -d auditDB -t query -v 1 -u audituser -o audituser -p password

3. Verify Database Creation

Log in to the database system to check if the history database was created:

nzsql -host localhost -port 5480 -u admin -pw password -d system

Use \l to list databases and confirm the presence of auditDB.

4. Set Up History Configuration

Define a configuration to specify what activities to audit:

CREATE HISTORY CONFIGURATION all_hist
HISTTYPE QUERY
DATABASE auditDB
USER audituser PASSWORD 'password'
COLLECT QUERY,COLUMN
LOADINTERVAL 5
LOADMINTHRESHOLD 4
LOADMAXTHRESHOLD 20
STORAGELIMIT 40
LOADRETRY 0
VERSION 1;
SET HISTORY CONFIGURATION all_hist_on;

5. Restart the Netezza System

Restart the database system for the history configuration to take effect:

su - nz
nzstop
nzstart

Viewing Audit Results

Check History Tables

Log in to the history database and list available tables:

\c auditDB
dt

Example: Query Access Logs

To view table access logs:

SELECT SESSIONID, DBNAME, TABLENAME
FROM AUDITDB.AUDITUSER."$hist_table_access_1";

Example: Login Failures

To view failed login attempts:

SELECT NPSID, NPSINSTANCEID, LOGENTRYID, CLIENTIP, SESSIONUSERNAME, "TIME", FAILURETYPE, FAILURE
FROM AUDITDB.AUDITUSER."$hist_failed_authentication_1";

Excluding Users or Databases from Auditing

To exclude specific users or databases from the audit trail, use the following SQL commands:

CREATE USER user WITH PASSWORD 'password' COLLECT HISTORY OFF;

You can also modify existing users to exclude them from auditing:

ALTER USER user COLLECT HISTORY OFF;

Enhancing Auditing with DataSunrise

DataSunrise takes IBM Netezza’s native audit trail capabilities to the next level by integrating advanced tools for centralized control and seamless management.

Setting Up DataSunrise for Netezza

1. Create an Instance: Launch the DataSunrise dashboard and add a new instance specifically for IBM Netezza. 

2. Configure Audit Rules: Define detailed audit policies to monitor activities, including specific users, executed queries, and data changes. 

3. Test Auditing: Utilize DataSunrise’s dynamic reporting interface to visualize, analyze, and export audit logs for further insights.

Key Features of DataSunrise

• Centralized Management: Oversee audit configurations and policies across all Netezza systems from a unified platform.
• Advanced Filtering: Apply custom filters to isolate critical data activities and reduce noise in logs.
• Real-Time Alerts: Get instant notifications on potentially harmful actions, such as unauthorized database access or policy violations.
• Comprehensive Compliance Support: Simplifies adherence to regulatory standards, includingGDPR, SOX, PCI DSS and HIPAA, with ready-to-use compliance templates and extensive documentation.

DataSunrise amplifies IBM Netezza auditing by integrating powerful tools that not only enhance security but also improve operational efficiency, making it an indispensable addition to any data management strategy.

Benefits of Using DataSunrise for IBM Netezza Audit Trail

DataSunrise extends the functionality of native IBM Netezza Audit Trail with features that include:

• Enhanced Security: Protect sensitive data with advanced monitoring tools.
• Ease of Use: Intuitive dashboards simplify setup and management.
• Scalability: Efficiently handle audit trails for large and complex database environments.

Conclusion

IBM Netezza’s native audit trail features provide powerful tools to monitor sensitive data and ensure compliance. By setting up history databases and configurations, users can track database activities effectively. For organizations seeking centralized control and enhanced functionality, DataSunrise offers an excellent solution, combining comprehensive auditing, real-time alerts, and advanced compliance tools.

Read the complete DataSunrise database security ruleset and request an online demonstration on the official website to learn how we will accelerate audit trail management and secure IBM Netezza environments.