SAP HANA Connector
Overview
Used for OneTrust Data Discovery, the SAP HANA (High-performance Analytic Appliance) connector enables customers to scan and retrieve data stored in memory across the multi-modal database.
- Pod Residency
-
rdbms-scanner - Connection Method
-
JDBC URL
Supported Scan Actions
|
Scan Type |
Description |
|---|---|
|
Catalog |
This scan type will fetch only the metadata in the database like details of table, or column are scanned. |
|
Catalog & Scan |
This scan type will scan both metadata and data under the tables and returns the appropriate terms. |
Credential and System Permissions
OneTrust recommends to adhere to your organization's security and infrastructure policy and include system engineer resources or other qualified subject matter experts to set up credentials on data sources. For specific instructions for how to enable these credentials, refer to your data source's implementation documentation, knowledge base and/or support resources.
This connector relies on a JDBC URL connection.
# Sample Vault JSON
{
"connectionUrl": "jdbc:sap://1.1.1.1:39015/?autocommit=false",
"user": "your_user",
"password": "your_password"
}
You must create a user in SAP HANA Studio and assign read-only access for all resources you need access to in Data Discovery. That may include the following permission:
-
SELECT
-
SELECT CDS METADATA
-
SELECT METADATA
-
EXECUTE*
*Required for advanced use cases, such as data subject access request (DSAR) for data deletion, as a non-read action.
Special Views
OneTrust Data Discovery can support the four view types offered with SAP HANA:
|
View Types |
Notes |
|---|---|
|
Analytic Views |
Must include this type in the include path for them to be scanned properly while setting the scan type to VIEW. |
|
Attribute Views |
Must include this type in the include path for them to be scanned properly while setting the scan type to VIEW. |
|
Calculation Views |
Must include this type in the include path for them to be scanned properly while setting the scan type to VIEW. |
|
Standard RDBMS Views |
N/A |
Scan Profile Support
For additional details on scan profile configuration and management, see Setting Up Scan Profiles.
Limits
-
Limit Number of Objects to Scan
-
Max Number of Schemas per Catalog
-
Max Number of Tables per Schema
-
Select Limitation Method for Scanning Rows per Table, choose one:
-
First with Limit: populates setting for Maximum Number of Rows per Table
-
Random Percentage: populates setting for Percentage Scanned of Total Objects
-
Random Percentage with Limit: populates settings for Percentage Scanned of Total Objects and Maximum Limit of Scanned Objects
-
Wildcard
Wildcards are not supported for column inclusion or exclusion.
-
Example:
*Name*will not work to include/exclude bothfirstNameandlastNamecolumns -
Instead, you must specify the exact column names separated by commas (e.g.
firstName,lastName).
Columns Excluded in the Data Dictionary
When a column is excluded, it is still cataloged by the Data Dictionary. This means:
-
Basic metadata for the column is retrieved.
-
During extraction, the actual column content is skipped based on the configuration.
Include/Exclude Path Configuration Fields
-
Schema
-
Table
-
Column
Collected Objects & Fields
|
Objects |
Fields |
|---|---|
|
|
Denylist
This connector has databases and/or schemas that included in our denylist. For more information, see RDBMS Database and Schema Denylist.
Troubleshooting
RDBMS-Scanner Pods with Multiple Restarts
If the pod logs show an OOM (Out of Memory) error, the possible root cause when scanning SAP HANA, is that certain tables are causing this issue. Without more information about the table contents, it can be difficult to determine the exact cause of the error.
Error Example:
Caused by: java.lang.OutOfMemoryError: Java heap space
Resolution
Limiting the amount of data extracted from SAP HANA can reduce the likelihood of OOM errors. However, this may impact performance. The SAPHANA_FETCH_SIZE value can be adjusted to balance preventing OOM errors and maintaining acceptable performance.
Command to update the fetch size:
kubectl --namespace <NS> set env deployments/rdbms-scanner SAPHANA_FETCH_SIZE=1000