Rule Chaining | Fortinet FortiDB instruction


Rule Chaining	Chaining with Parameterized User-Defined Rules

In this case, the alert will be generated only for first object in the SELECT list; namely: vje.test.

FortiDB Version 3.2 Utilities	User Guide
15-32000-81369-20081219	19

Image 21

Fortinet FortiDB manual Rule Chaining

Contents

Utilities User Guide Trademarks FortiDB Utilities User Guide Table of Contents Index FortiDB MA Utilities Selecting Addresses for Auto-Discovery Auto Discovery Results from Auto-Discovery Selecting Non-Standard Ports for Auto-Discovery Discovered Database Information Populating Connection Form MS-SQL MS-SQL Connection Summary Button Connection Summary Output Connection Summary Rule Chaining Rule Chaining Setting Screen Rule Chaining Chaining with Parameterized User-Defined Rules General Pudr Steps Parameterized User-Defined Rule Flow Diagram Validating the Pudr before Saving Disabled Parameter Checkboxes Example of Chaining to a PL/SQL-based Pudr Item Setting for Session Policy Policy Settings for Suspicious Login Time Immediate Table Columns That Could Appear in Alerts Chained-Rule Alerts UBM Session Policy and PudrResulting Killed Session DB Example Multiple Source-Rule-Violation Behavior Rule Chaining Setting a Report Schedule Setting a Timer-based ScheduleAlert Report Manager Setting a Calendar-based Schedule Deleting a Previously Set Timer ScheduleSetting a Timer-Based Schedule Deleting a Timer Schedule Setting a Randomized Interval Setting a Combined ScheduleSetting a Calendar-Based Schedule Setting a Randomized Interval Enabling Email Recipients Reporting by TimeSpecifying Report Parameters ARM Reporting by Time ARM Reporting by Time Calendar Pop-up New Reports Menu New Report Setting Screen top New Report Setting Screen bottom Using the Select Checkbox to Affect Multiple Reports Saved and Enabled Report Running and Analyzing Reports Activating ARMStatus Menu Status Dialog View Reports Dropdown List on Current Reports Screen Report Summary Action Current Report ConfigurationChoosing Summary Report Action Summary-Action Output Types Report Detailed Action LimitationReport Size Archiving Reports Custom Reports Using This FeatureScheduling Custom Reports Time-only Schedule Settings Daily Schedule Settings Weekly Schedule Settings Monthly Schedule SettingsCustomer and Company Information Report and Template Generation and Management Company Information DialogCustom Reports Main Adding Reports Modifying ReportsAdding a Report Deleting Reports Modifying a ReportDeleting a Report Modifying Report Templates Generating Reports Report ResultTemplates Manager Modifying a Template Generated Html Report Example Report History Report History User Administration for Custom Reports and SOX Reports Licensing and AdministrationReports radio button on the User Administration screen Property Purpose Possible Values Default Limitations Property Purpose Possible Values Default1 SOX Reports within Custom Reports Manager SOX Compliance Reports Reports and Acronyms General Setup InstructionsCommon Report Header Fields Report Name Acronym History of Privilege Changes Report HPC Cobit Objectives and Setup RequirementsReport Body Columns HPC Report Sample AUC Report Sample Abnormal or Unauthorized Changes to Data Report AUC AUS Report Sample Abnormal Use of Service Accounts Report AUS ATD Report Sample Abnormal Termination of Database Activity Report ATD End of Period Adjustments Report EPA Settings Dialog for the EPA ReportEPA Report Sample Assumptions Case VAS Report Sample Verification of Audit Settings Report VAS Licensing and Administration Archiving ReportsReport Size Verification of Audit Settings Report VAS Index