How ibm/universal-connectors works
The repository provides Guardium Universal Connectors: configurable input and filter plug-ins that collect native activity logs, transform them into Guardium records, and deliver them to Guardium Data Protection or Guardium Insights. Its supported-source catalog spans databases and cloud services; the tree also includes Kafka/Pub/Sub-oriented connector code and shared record/parsing types. The sampled filters confirm event-to-record conversion, while the README documents the broader input/filter workflow. Individual plugin wiring and most implementations were not sampled, so edges show only the documented high-level flow or sampled calls.
Main entry points: structures Guardium record types · input-plugin Input plugins · filter-plugin Database and cloud filters · BigQueryGuardiumFilter.java BigQuery filter
Components 15
Log collection
- Input plugins
input-plugin - Capella API input
input-plugin/logstash-input-couchbase-capella/src/main/java/com/ibm/guardium/couchbase/capella/CapellaAuditLogApiManager.java - Kafka-based connectors
filter-plugin/logstash-filter-pubsub-spanner-guardium
Event filters
- Database and cloud filters
filter-plugin - MongoDB filter
filter-plugin/logstash-filter-mongodb-guardium/src/main/java/com/ibm/guardium/mongodb/MongodbGuardiumFilter.java - BigQuery filter
filter-plugin/logstash-filter-pubsub-bigquery-guardium/src/main/java/com/ibm/guardium/bigquery/BigQueryGuardiumFilter.java - Cassandra filter
filter-plugin/logstash-filter-cassandra-guardium/src/main/java/com/ibm/guardium/cassandra/CassandraGuardiumPluginFilter.java - BigQuery record parser
filter-plugin/logstash-filter-pubsub-bigquery-guardium/src/main/java/com/ibm/guardium/bigquery/Parser.java - Cassandra record parser
filter-plugin/logstash-filter-cassandra-guardium/src/main/java/com/ibm/guardium/cassandra/Parser.java - SQL parsing
filter-plugin/logstash-filter-databricks-guardium/src/main/java/com/ibm/guardium/databricks/sql_parsing
Shared record model
- Configurable parsers
common/src/main/java/com/ibm/guardium/universalconnector/commons/custom_parsing - Guardium record types
common/src/main/java/com/ibm/guardium/universalconnector/commons/structures
Guardium platforms
- Guardium Data Protection / Insights
Other components
- Native activity logs
- Logstash events
Connections 15
- Native activity logs → Input plugins: provide logs
- Native activity logs → Database and cloud filters: supply events
- Input plugins → Logstash events: emit events
- Capella API input → Native activity logs: fetch audit logs
- Logstash events → MongoDB filter: dispatch events
- Logstash events → BigQuery filter: dispatch events
- Logstash events → Cassandra filter: dispatch events
- Database and cloud filters → Guardium Data Protection / Insights: deliver records
- BigQuery filter → BigQuery record parser: parse event
- Cassandra filter → Cassandra record parser: parse event
- BigQuery record parser → Guardium record types: build record
- Cassandra record parser → Guardium record types: build record
- SQL parsing → Guardium record types: extract SQL details
- Configurable parsers → Guardium record types: support parsing
- Kafka-based connectors → Logstash events: integrate events