I have a inventory report, but I need check all DB because the number doesn't match with we expect.
How can I check all the database in my network?
I have all the database: Oracle, SQL server, DB2 and mysql.
The simplest way to do this is to use the Asset Search portion of QualysGuard. Select an asset group or block of IPs and in the "running services" box you can select all the database services you are looking for (IBM-db2, MSSQL, Oracle and mysql). Then select search at the bottom of the window.
You can then select all the IPs found and add them to an asset group, which you can use in any report.
Also if you use this search to create a "tag" any new device(s) found will automaticaly get tagged with this label you create.
I tried searching in your ways but din't get the complete list.I just got few of the server. Is there any QID like database instance detected ? Or any method to list out only DB ? I tried creating an asset tag by putting the regular exp ( .*sql.*) & got bunch of servers. But how do I export them to excel ?
are you doing authenticated scans or non-auth scans? ie do you care about DBs installed on non-standard ports?
It's a authentictaed scan and all DB's are running on standarad ports ...
easiest way is to do a scan for the nodes listening on those ports if they are all on the standard ports.
dont know for oracle or other DBs, but MSSQL has the following QIDs as well.
90087 Microsoft SQL Server Version Information Gathered
105034 Microsoft SQL Server Service Account Name
19145 Microsoft SQL Server Instances Enumerated.
Retrieving data ...