Using the Discoverer

Discoverer Architecture and Components

The Discoverer component generates the Oracle Database Sensitive Data Assessment Report. It executes SQL queries and collects data based on configuration and pattern files. The architecture includes components like the Discoverer, configuration files, pattern files, and the ability to customize and configure settings for sensitive data assessment.

Read More: Discoverer Architecture and Components

Configuring Dbsat.Config

To configure the Discoverer, edit the dbsat.config file. This file determines the Discoverer's behavior. Settings include database connection details, discovery parameters, and sensitive categories. The configuration file can be customized to specify patterns, exclusion lists, and SSL settings for secure connections.

Read More: Configuring Dbsat.Config

Configuration Settings

Configuration settings are organized into sections like [Database], [Discovery Parameters], and [Sensitive Categories]. Each section has keys and values to configure various aspects of the Discoverer. These settings control database connections, sensitive data patterns, and exclusion lists.

Read More: Configuration Settings

Pattern File Configuration

Pattern files define sensitive data types and patterns to search for. They are grouped into sections with sensitive type names. Each sensitive type has parameters like COL_NAME_PATTERN, COL_COMMENT_PATTERN, and SENSITIVE_CATEGORY. Pattern files can be customized to add or modify sensitive types.

Read More: Pattern File Configuration

Customizing The Pattern File

To customize the pattern file, create a copy of the sensitive.ini file and rename it. The Discover/conf directory contains language-specific files for discovering sensitive data in different languages. The customized pattern file can be included in the Discoverer scan by adding a reference to it in the dbsat.config file.

Read More: Customizing The Pattern File

About Regular Expressions

Regular expressions are used in search parameters and consist of strings based on common characteristics. They can include character classes, capturing groups, quantifiers, boundary matchers, and logical operators. Regular expressions allow for complex pattern matching and can be customized to suit specific needs.

Read More: About Regular Expressions

Configuring The Exclusion List File

The Exclusion List file specifies schemas, tables, or columns to exclude from the Discoverer scan. This file can be created and saved in the Discover/conf directory. Exclusion entries are specified in a specific format, and the Discoverer CSV report can be used to create the exclusion list file contents.

Read More: Configuring The Exclusion List File

Configuring Certificates And Wallets

The Discoverer supports Secure External Password Store for retrieving login credentials from a wallet. It also supports SSL encryption for secure connections. Configuration parameters for SSL can be found in the dbsat.config file. Configuring certificates and wallets is optional and required only when using SSL.

Read More: Configuring Certificates And Wallets

Running The Discoverer

To run the Discoverer, specify arguments like the configuration file and output file. The Discoverer can be run with encryption or without. After running, an encrypted .dbsat file is created, and the contents can be extracted using the dbsat extract command.

Read More: Running The Discoverer

Oracle Database Sensitive Data Assessment Report

The Discoverer generates the Oracle Database Sensitive Data Assessment Report in HTML, CSV, and JSON formats. The report provides a high-level summary, a summary of sensitive data, and detailed information about sensitive data, schemas, tables, columns, and rows. It includes sections for sensitive data assessment, schema view, and sensitive column details.
Read More: Oracle Database Sensitive Data Assessment Report