DataSunrise Secures IBM DataStax Enterprise
DataSunrise 12.0 adds full support for IBM DataStax Enterprise (DSE) 6.8+ as its own database type, separate from Apache Cassandra.
Why DSE and Cassandra are Treated Separately
DSE is built on Cassandra, but it adds enough on top that treating it as "just Cassandra" would mean getting things wrong. DSE has its own audit logging system (SLF4JAuditWriter in dse.yaml rather than Cassandra's cassandra.yaml), its own CQL extensions for Search Index operations and Row-Level Security, and a different log format. DataSunrise handles all of this out-of-the-box when you select IBM DataStax Enterprise as the database type.
What You Get
DataSunrise supports the full feature set for DSE: real-time audit, database security rules, data discovery, risk scoring, dynamic masking, and static masking.
A few things worth calling out specifically:
Dynamic masking uses DSE User-Defined Functions, so you will need enable_user_defined_functions: true in your cassandra.yaml for that to work.
Native audit log trailing lets you collect DSE's own audit logs via the SLF4JAuditWriter logger. This is useful for catching activity without proxy. Configure it in dse.yaml, point DataSunrise at the log directory, and it will start collecting the event logs infromation.
One limitation to know about: DSE audit logs do not include client port numbers, so connections from the same IP address get merged into a single session in DataSunrise.
Setup
- In Configuration > Databases, add a new database and select IBM DataStax Enterprise
- Enter the DSE server hostname and CQL native transport port (default: 9042)
- Enter credentials and test the connection
- Set up proxy settings and audit rules
Clients connect through the DataSunrise proxy using cqlsh, DataGrip, DBeaver, or any CQL-compatible drive/application in a same way as they would with regular Cassandra.
DSE-specific CQL syntax is supported, including Search Index operations, Row-Level Security statements, and DSE ROLE and GRANT syntax. See the Configuring an IBM DataStax Enterprise Connection section of the User Guide for more details.
