Reports

The current Reports feature is provided as a Beta version in version 10.2.0.

Overview

QueryPie Reports provide the functionality to output data in a report format necessary for audit responses.

It allows the generation of reports on the status and history of users and administrators, security configuration details, user-specific permissions for databases/servers and their history, as well as records of database/server access and query/command usage.

As of version 10.2.0, reports can only be generated in English.

Report Output Items and Supported Filters

As of version 10.2.2, please refer to the table below for the report items and filters currently supported.

Viewing Report List

In the Audit menu, navigate to the Reports > Reports to view the list of report generation tasks.

To access the Reports menu, your account must be granted Report Audit Full Access administrator permissions.

1. Search: You can search using the Task Name.

2. Create Task: Navigate to the report creation page.

3. Refresh: Reload the task list.

4. Report Section: Displays the report area specified during task creation. The three sections include:

   1. QueryPie System

   2. QueryPie DAC

   3. QueryPie SAC

5. Task Name: The name of the task entered during report creation.

6. Scheduling: The recurrence frequency specified during task creation, with the following options:

   1. None: No recurrence (one-time generation).

   2. Daily: Repeats daily.

   3. Weekly: Repeats weekly.

   4. Monthly: Repeats monthly.

   5. Quarterly: Repeats quarterly.

7. Created By: The user who created the report task.

8. Created At: The timestamp of when the report task was created.

9. Last Task At: The timestamp of the most recent report generation (empty if no reports have been generated).

10. Last Task Status: The status of the most recent report generation task, which can be:

    1. Succeeded: Successful

    2. In Progress: Ongoing

    3. Failed: Failed

11. Last Report File: A button to download the most recently generated report file.

    1. If no file exists or the file has expired, the button will be disabled.

    2. Password settings for file downloads can be configured in Security Settings.

    3. When password protection is enabled, you must set a password during download. This password is required to extract the downloaded file.

Viewing Report Details

Click on the desired report from the list to open a drawer displaying detailed information.

1. Unschedule Task: For recurring reports, you can unschedule the task to stop further automatic generation.

2. Report Section: Display the report area (e.g., QueryPie General, DAC, SAC)

   1. Click the magnifying glass icon to view detailed information for the selected section.

3. Scheduling: Show the recurrence frequency (e.g., None, Daily, Weekly, Quarterly)

4. Date Range: For one-time reports, displays the date range of the report.

5. Start Date: Indicate the start date for recurring reports.

6. Next Task At: Show the scheduled time for the next task (left empty for one-time reports)

7. User Scope: Display the scope of users included in the report

8. Resource Scope: Display the scope of resources included in the report.

9. Report List Tab: Display a list of generated reports

   1. Report No.: A serial number assigned to each report within the task.

   2. Created At: The timestamp indicating when the report was generated.

   3. Expired At: The date and time when the report file will expire (or is set to expire).

   4. Status: The current status of the report task (either Succeeded or Failed)

   5. Report File: A link to download the report file.

      • If the generated file is unavailable or has already expired, the link will be disabled.

      • You can specify whether a password is required for the file download in the Security settings.

      • When password protection is enabled, a password will be set during the file download. The password will then be required to unzip the file later.

10. Action History Tab: Display the user's action history for the report.

    • Action At: Date and time the action was performed.

    • Action Type: Type of action (either Report Download or Report Unschedule).

    • Target Report No.: The target report serial number (left blank if unavailable).

    • Action By: The person who performed the action.

Creating Report

Click the + Create Task button on the report list screen to enter the report creation page.

Enter the task name, report type, and scheduling details, and specify the report output items and filters to be applied by section. You can add a section by clicking the + Add Section button.

1. Task Name: Provide a name to identify the report creation task.

2. Type: Select the report type (QueryPie General, DAC, SAC).

3. Scheduling: Set the recurrence frequency for the report creation task.

   1. None: Select this option for a one-time task without repetition.

   2. Daily: Select this option for the task to repeat daily.

   3. Weekly: Select this option for the task to repeat weekly.

   4. Monthly: Select this option for the task to repeat monthly.

   5. Quarterly: Select this option for the task to repeat quarterly.

4. Date Range: Specifies the period range for historical data.

   1. If Scheduling is set to None, specify the output range for historical data.

   2. Current data will be output based on the task execution time, regardless of the Date Range input.

5. Start Date: Start date for recurring tasks.

   1. If Scheduling is set to Daily, Weekly, Monthly, or Quarterly, specify the start date for the task.

6. Data: Report output items

   1. When selecting items, the data period range information can be checked at the bottom, and the details that will be applied to the first report generated when scheduling are shown.

   2. Reference Time: Reference point for the current status data.

   3. Date Range: Period range applied to historical data.

7. Filter: Enter the filters to be applied to the section.

   1. Applicable filters will be displayed based on the selected report output items.

   2. See the filter items at the bottom.

After entering all the desired information, you can preview the report by clicking the Preview button.

Click the Save button to save the report task and return to the list.

Duplicating Report 10.2.2

To duplicate a report, select the report you want to copy from the list and click the :copy: Duplicate Task button. This will create a new report task by duplicating the previously created report.

The following information will be duplicated when copying the task:

• Task Name: "Copy" will be added to the original task name.

• Type: The report type selected in the original task will be retained.

• Scheduling: The repetition cycle selected in the original task will be retained.

  • Date Range and Start Date will be reset, requiring re-entry.

• Data: The output fields selected in the original task will be retained.

• Filter: Filters applied per Data will be retained.

  • However, if the Role, User, or Group selected in the original task no longer exists, they will be removed from the filter values.

Filters

This section outlines the detailed specifications for filters supported in reports.

1. User/Group: Filters the report data based on users or groups.

   • Example: If you want to generate a report on DB access permissions for the PM team, select as follows:

     • Type: QueryPie DAC

     • Data: DB Access Control - Assigned Status

     • Filter > User/Group: PM (Group)

2. Resource: Filters the report data based on the tags assigned to the resources.

   1. Example: If you want to generate a report on DB access permissions for a DB tagged with Service:Homepage, select as follows:

      • Type: QueryPie DAC

      • Data: DB Access Control - Assigned Status

      • Filter > Resource: Service:Homepage

   2. Tag operation logic is the same as in other QueryPie features:

      • If multiple tags with the same key are entered, they are combined using OR logic.

      • If multiple tags with different keys are entered, they are combined using AND logic.

   3. For workflows, it is possible to request multiple resources at once. If one or more resources meet the conditions, they will be included in the search results.

3. User Status: Filters by the status of the user account when displaying the user account status.

   1. Filter values: Active, Locked, Expired, Locked Manually

4. Time Range: Filters by time range when selecting DB Access History or Server Access History.

   1. Enter start and end times.

   2. Choose whether to exclude results within the entered time range. If selected, only logs outside the time range will be shown.

5. Result: Filters by result when selecting Server Access History.

   1. Filter values: Success, Failure

6. Action Type: Filters by action type when selecting Server Access History.

   1. Filter values: Connect, Disconnect

7. Role: Filters by the server role used when selecting Server Access History.

   1. If multiple roles are entered, they are combined using OR logic.

8. Keyword: Filters by command when selecting Command History or Restricted Commands.

   1. Enter keywords and press Enter to apply the search condition.

   2. Only command history containing the entered keywords will be extracted (like search).

   3. The search is case-insensitive.

   4. If multiple keywords are entered, they are combined using OR logic.