Audit access and troubleshoot gateways
Gateway audit covers connections, authentication, SQL, and results. DDS platform operation logs are separate.
Review a request
- Record account, client, gateway, target, and query time.
- Filter logs by time, gateway, user, and result.
- Check JDBC routing, matched policy, and status.
- Compare raw/masked client values and target columns.
- Mask accounts, addresses, and data in exported evidence.
Diagnose failures
| Symptom | First checks | Follow-up |
|---|---|---|
| Connection failure | State, port, firewall, URL | Minimal network/authentication query |
| Authentication failure | Mode, DAM/virtual account | Disabled/expired account |
| Raw values | Objects, mapping, precedence, timing | Single-field test |
| Query fails, gateway healthy | Backend credentials, parameters, dialect | Validate backend connection |
| No audit | Actual route, time, proxy identity | Correlate client logs |
Use dedicated test data and least-privilege accounts instead of repeatedly querying sensitive data.
Retain evidence
Record goal, identity, gateway/backend, policy, time, client result, server log ID, and conclusion. Performance tests do not replace policy validation.