Guardium policy rule sending 3 events to syslog/splunk for 1 executed sql statement. SYSPROC.ADMIN_TASK_* DB2 stored procedures send multiple events to splunk for one call of the SP.
Per IBM case TS004063739 guardium is capturing:
* the CALL statement with the actual values
* the raw statement
* the bind statement with the values
This RFE has been open requesting enhancement of the guardium policy rule to configure a rule criteria to match the type of statement.
Do not place IBM confidential, company confidential, or personal information into any field.