SQLWATCH Features.
All features.
Assessment (X-Ray).
Reports and recommendations, like your own SQL Server expert.
Alongside the visual real-time dashboard, receive an automated weekly or monthly PDF report that tells you what to fix, how, and what will happen if not fixed.
Your recommendations are based on the actual workload and environment variables – rather than a generic “best practice.”
This makes SQLWATCH a powerful auditing tool that tells you how the environment changes over time and if new issues appear. This is also handy l for environments with multiple vendors that may make changes behind your back.
Managed Monitoring
Out-of-the box hosted SQL Server monitoring, with 30-day retention to give plenty of time to investigate issues.
Time-series data stores optimised for large-volume monitoring gives a significant advantage over traditional monitoring with SQL Server as the back end.
Monitor using customised Granfana dashboards. Monitoring dashboards are very personal, so Granfana allows us to build customised dashboards with tight security, excellent performance, and great desktop and mobile interfaces.
Monitoring with SQLWATCH is priced per GB of data, rather than the number of instances – giving you complete flexibility.
Security – Data collection and ingestion
SQLWATCH’s PowerShell-based data collector gives 100% transparency, with no hidden code, and a reduced risk of spreading malware and viruses. There is no need to install any additional software or databases.
API Keys and SQL Authentication credentials are stored in Windows Credential Manager, offering the highest security. No credentials are stored anywhere within the PowerShell modules or configuration files (either plain text or encrypted).
API dedicated to data collection ensures 100% credential isolation and that no data can ever be read if services credentials are compromised. This ensures that service accounts provisioned to send data can never read it back.
We don’t collect any user data or data that may contain Personally Identifiable Information (PII). We only store the query hash and the first 128 characters of the query. This avoids storing WHERE and CASE statements that could contain PII data.
Security – Data storage
- With SQLWATCH you have your own data stores to ensure data is never mixed with any other organisation’s.
- If you decide to cancel your subscription with SQLWATCH, you entire data store is deleted.
- Your data is stored in your geographical location – ie. UK customers will have their data stored in the UK data centres, and US customers in US data centres.
- Reading data from the store is only possible programmatically through service principals, currently Granfana only, with no public API access.
- Data is encrypted at rest.
- Data stored have auto-generated names, and it’s not obvious to whom the data store belongs.
- Built-in throttling limits how much data can be accessed and downloaded in bulk. This limits possible data dumps should your account be compromised or service breached.
Security – Data presentation
- Grafana provide great flexibility with proven security. We run the closed-source Enterprise Edition of Grafana and only customise the look and plugins, not the core service.
- We use a third-party authentication provider to ensure we don’t store passwords anywhere within the SQLWATCH environment. We believe it’s best to leave security to experts.
- Access to dashboards is only allowed within the same country to minimise cross-country access and attacks from high-risk countries. i.e when accessing https://dash.sqlwatch.cloud, UK customers will be taken to https://dash-gb.sqlwatch.cloud, which is restricted to UK IPs only.
- For the highest security, we also offer private, company IP-restricted endpoints and instances at: https://yourcompany.my-sqlwatch.cloud
- We utilise third-party, managed firewalls to protect against Bots and DDoS attacks.
- Dashboards are stored within the same geographical location as data stores.