Creating and Managing SQL Cluster Sets

Learn how to create and manage SQL cluster sets in Database Firewall policy.

A SQL cluster set is a group of SQL clusters. SQL cluster is a group of SQL statements created automatically by Database Firewall which are similar to each other, from the network traffic.

You can create a new SQL cluster set as well as delete it. This deletes the definition only and does not remove the network data captured by the Database Firewall.

To create a SQL cluster set:

Log in to the Oracle Database Security Central console as auditor.
Select Policies.
Select the Database Firewall Policies in the left navigation menu.
Select the name of the specific policy. The details of the policy are displayed in the main page.
Select Sets/Profiles in the top right corner. This page lists the existing sets that are already defined for the specific policy.
Select SQL Custer Sets sub
To add a new SQL cluster set, select Add. The Add SQL Cluster Set dialog is displayed.
To get the list of SQL clusters, choose the filter options in the following fields:
1. Target
2. Show cluster for
Select Go. It displays all the SQL clusters depending on the selection.
Select the specific SQL clusters. To know the SQL statements associated with the cluster refer to the sample SQL from cluster column values.
Enter the Name and optionally Description.
Select Save. A new SQL cluster set is added and is listed in the Sets/Profiles page. More such sets can be added by following the above steps.

To add or delete the SQL cluster from a given set:

Select SQL Cluster Sets sub
From the report choose the specific SQL cluster set, the details of the cluster set are displayed.
Choose Add and follow the procedure to add new clusters to an existing set.
From the same dialog, choose Delete option to delete one or more clusters from the set.
Select Save.