Need to create a report that would record when Data Center Security (DCS) agents change Security Group

Products

• Data Center Security Server Advanced

Issue/Introduction

The customer has a requirement to create a custom report that would contain all DCS agents that moved from one Security Group to another.

Resolution

You can create a custom query in DCS Java Console with the condition below to retrieve auditing events when DCS agents were moved from one Security Group to another. 

#####################################################################################

SELECT EVENT_DT as DATE,
TARGET_INFO as HOSTNAME,
VALUE1 as AGENT_VERSION,
VALUE3 as SECURITY_GROUP_BEFORE_MOVE,
DESCRIPTION as SECURITY_GROUP_AFTER_MOVE
  FROM [SCSPDB].[dbo].[AUDIT_VW] WITH (NOLOCK) where PROCESS_NAME like 'MoveAsset'

#####################################################################################