cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Data security concern

antonio_vaz
Inactive

A client
wants to be sure Dynatrace doesn't query for any critical information not
supposed to be accessed in his applications user database.

Does Dynatrace have any
official answer or statement for this particular question?

Thank you

4 REPLIES 4

pahofmann
Champion

In a setup without database agents dynatrace does not querry the application databases at all.

The insights into database transactions are gained from the code that is executing the statements, e.g. JDBC or ADO.NET. So Dynatrace is able to see the statements executed by the applicatoin but does not execute statements agains application databases itself.

pahofmann
Champion

The question is about Dynatrace SaaS not appmon, so no sensor config here 😉

antonio_vaz
Inactive

Thanks Patrick, however the issue here is when we use database agents, what are the actions executed against the database?

Hello Antonio,

Database Agent executes three types of queries:

1. Monitoring for metrics - they access internal database structures allowing us to track its performance.

2. Live View queries - similar to the above, but executed on demand, when user requests more detailed information.

3. Execution plan queries - when user requests an execution plan for a query seen in Live View or captured in PurePath, Database Agent will retrieve it on demand.

At any point, the Database Agent doesn't access any tables with user data. We only query internal structures provided by the database engine. Please review the documentation to see the list of required permissions, retrieved measures and behaviors of the Live View and Execution Plan features: https://www.dynatrace.com/support/doc/appmon/database-monitoring/

Best regards,

Wiktor