IBM Security Z Security

Security for Z

Join this online user group to communicate across Z Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Looking for a way to create a custom report in zSecure on All Configurations and Selected zAlerts currently configured on the system.

    Posted 19 days ago

    I am Looking for a way to create a custom report in zSecure on All Configurations and Selected zAlerts currently configured on the system.



    ------------------------------
    Floyd Womble
    Senior Identity and Access Management Engineer | Enterprise Information Protection (EIP) | Access Management - Mainframe

    Humana
    T 951.813.1822
    fwomble@humana.com
    ------------------------------


  • 2.  RE: Looking for a way to create a custom report in zSecure on All Configurations and Selected zAlerts currently configured on the system.

    Posted 19 days ago
    Edited by Rob van Hoboken 19 days ago

    Hi Floyd

    There is this older thread: https://community.ibm.com/community/user/question/all-active-alerts

    Currently, the documented method to work with contents of C2PCUST is the C2PCUTIL proc, see here https://www.ibm.com/docs/en/szs/3.2.0?topic=alert-maintenance-reporting

    You could run a job to export the whole alert configuration data set (C2PCUST) like so

    // SET  C2PCUST=C2POLICE.C2PCUST                           
    //*                                                                     
    // EXEC C2PCUTIL,CONFIG=C2R$VOID
    //SYSTSIN DD *                                                  
    ISPSTART CMD(%C2PESETP EXPORT set(*) alert(*) +                       
    dd(sysut2) +
    )                                       
    //SYSUT2 DD SYSOUT=* 

    The output in SYSUT2 shows all alert sets, for each alert set you can find a field C2PESELR with the selected (normal) alert IDs.

    ------------------------------
    Rob van Hoboken
    ------------------------------



  • 3.  RE: Looking for a way to create a custom report in zSecure on All Configurations and Selected zAlerts currently configured on the system.

    Posted 18 days ago

    I too was interested in this.  I'm trying to configure a new zSecure for RACF v320 for the Alert component.  This client has a configuration for zSecure for ACF2 v250 for the Alert component on a different business LPAR and I tried the suggestion above.  I'm not getting any info though out of the jclscript: 

    ACF0C038 ACF2 LOGONID ATTRIBUTES HAVE REPLACED DEFAULT USER ATTRIBUTES
    READY                                                                 
    END                                                                   

    Is all it writes out.  Sorry that this client will not let uses write files from it's location to TechXchange.  Any suggestions?  In the jclscript is there a particular DDNAME I should look for to see if it allocates the correct file for the listing?  I mean to say, where the 'alerts' are stored in the zSecure Alert file structures - what file are they kept in after a customer defines them in their SE.A.A  dialog session?   

    Thanks for your help!  Floyd says howdy!  



    ------------------------------
    Lynn Gilson
    ------------------------------



  • 4.  RE: Looking for a way to create a custom report in zSecure on All Configurations and Selected zAlerts currently configured on the system.

    Posted 14 days ago

    Yes, I see the doc Export an Alert configuration - IBM Documentation - on the last part of the page, figure 1, there it provides a sample for listing.  However, where is the doc for executing that 'EXPORT' command function seen at the top of the page?   

    Thanks! 



    ------------------------------
    Lynn Gilson
    ------------------------------



  • 5.  RE: Looking for a way to create a custom report in zSecure on All Configurations and Selected zAlerts currently configured on the system.

    Posted 14 days ago

    ACF0C038 ACF2 LOGONID ATTRIBUTES HAVE REPLACED DEFAULT USER ATTRIBUTES                

    READY                                                                                 

    ISPSTART CMD(%C2PESETP EXPORT SET(*) ALERT(*) DD(SYSUT3) PCI SENS EXIT LIST EMPTY )   

    zSecure Alert batch interface, release 2.5.0                                          

    Input parms EXPORT SET(*) ALERT(*) DD(SYSUT3) PCI SENS EXIT LIST EMPTY                

    Export alert configuration from MY.ZSECURE.CKACUST to SYSUT3.                    

    No matching alert configuration found for pattern *                                   

    Batch utility complete, return code 12                                                

    ISPD117                                                                               

    The initially invoked CLIST ended with a return code = 12                             

     CZLYGI1.CZLYGIAJ.JOB22583.D0000102.? was preallocated (no free was done).  

    I am certain there are alerts configured to this instance of zSecure.     



    ------------------------------
    Lynn Gilson
    ------------------------------



  • 6.  RE: Looking for a way to create a custom report in zSecure on All Configurations and Selected zAlerts currently configured on the system.

    Posted 14 days ago

    Please disregard previous posts.  Once I discovered the correct filename datasetname in the myriad of files for the C2POLICE C2PCUST file with the alerts, it worked great.  

    Thanks again for your patience! 



    ------------------------------
    Lynn Gilson
    ------------------------------