Optimized regex rules to filter out SQL Server infrastructure noise (Hangfire, JDBC, Temp Tables) for Database Activity Monitoring (DAM) tools.
A highly optimized and meticulously curated list of Regex rules designed to filter out infrastructure and tooling noise from SQL Server Database Activity Monitoring (DAM) systems like Imperva, IBM Guardium, and others.
Database audit logs get heavily bloated by non-business infrastructure traffic (JDBC pings, SSMS intellisense, background jobs). This bloat costs storage, reduces DAM appliance performance, and hides real security threats.
These 47 robust regex rules catch and drop safe, routine machine-to-machine chatter without risking your actual business logic (Stored Procedures, sensitive queries).
Filters Included:
- Driver & Connection Handshakes (JDBC, .NET SqlClient)
- Background Job Heartbeats (Hangfire, FileNet)
- Temporary Table Operations (
#temp,##global) - Environment Setups (
SET NOCOUNT ON,SET FMTONLY) - Tooling Metadata Queries (SSMS Intellisense, AlwaysOn Pings)
Simply copy the raw contents of dam_regex_rules.txt and import them into your DAM appliance's global drop/ignore policy. Be careful about hangfire and login/logout logs, please don't write them if not necessary.
Pull requests are welcome! If your company uses a specific APM tool or background service that generates safe noise, please open an issue or submit a PR with the tested regex.