The audit log records information about user access to the Data Vault, so it can help you comply with organizational policies. For example, if you are a compliance officer, you might need to know when an application user queries Data Vault columns that contain sensitive information.

To create a Data Vault audit log, configure Informatica Dynamic Data Masking to connect to the Data Vault. Dynamic Data Masking is a data security product that operates as a proxy between the Data Vault and the applications or client tools that query the Data Vault. You configure connection rules and security rules in the Dynamic Data Masking Management Console to identify which incoming Data Vault SQL requests trigger the audit.

When an SQL request meets the criteria of the rules that you created, the Dynamic Data Masking Rule Engine rewrites the request to append an audit tag. Then the Dynamic Data Masking Server sends the rewritten request to the Data Vault. The Data Vault server recognizes the appended audit tag and writes the audit information to the audit log.

To extract the audit information and write it to a formatted CSV file, run the

EXTRACT FROM AUDIT

command.