Configure the Data Vault

ssa.ini

file. The audit log parameters turn the audit log on and off, and control how the audit log files grow. To limit the size of the audit log files, configure either the AUDITLOGLIMIT_FILESIZE or AUDITLOGLIMIT_TIME property. To set the maximum number of audit log files that Data Vault retains, configure the AUDITLOGLIMIT_MAXFILES property.

Configure the Data Vault connection in the Management Console. First, add the Dynamic Data Masking service for Data Vault. Then enter the Data Vault connection details to create a connection to the Data Vault.

To process incoming connection requests from the application or client that issues SQL requests to the Data Vault, create connection rules. The first connection rule that you create identifies incoming connections and routes them to the Data Vault. The second connection rule that you create sends requests to the security rule set.

After you create the connection rules, create a security rule set and security rules. The first security rule that you create logs whenever a connection rule sends an incoming SQL request to the security rule set. The second security rule that you create identifies the columns that you want to trigger the audit. If an incoming SQL request queries any of the columns that you configured to trigger the audit, the rule rewrites the SQL request statement to append an audit tag.