Detailed Logs
Data can be filtered by:
- User name (sqlproxy, admin, as, etc.)
- Access Protocol (MSSQL, MYSQL, SSHv2, etc.)
- Host Name (10.20.40.41 etc.)
It shows the queries created in SQLProx in the log column of the chart.
sc_userlog | |
|---|---|
log in | Queries shown in the chart |
type | SQLPROXY |
log_time | Looks here while applying a filter. |
sc_sessions: | This is related to the sc_userlog table. It is combined to identify who created the query. |
|---|---|
user_name | Client log in username |
host | Host ip |
host_name | Server host name |
SSH / TELNET Commands: Shows SSH / TELNET command logs. The columns are the same as the PROXY SQL Queries, with the only difference being that the type column of the COMMAND is sanitized.
HTTPS/S Messages: Pulls the request_content column from the sc_http_proxy_log table. Can only be filtered by time.
TACACS+ Messages: It is a chart that shows the command column from the tac_accounting table. Only the filter can be discarded over time.
Environment: t_instance table, using instance_name, UserName, ip_adress to run group by queries.
RADIUS Messages: Returns commands from the radius schema raddact table (cmd column). It can only be filtered by time.