IBM Security Z Security

Security for Z

Join this online user group to communicate across Z Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  zAlert - Verify/Refresh new Alert

    Posted Tue December 17, 2024 10:22 AM

    Hello - is there a better way ?

    I add a new alert, refresh and verify for systemA. But in order for all the other systems to have the new alert activated, I must go into each system configuration, select the new alert to turn it on and refresh / verify through the panels for each system. 

    Is there a better way for all my systems to verify / refresh the new alert at once with a batch job or some other method ? 

    thanks, Joe 



    ------------------------------
    Joseph Sumi
    ------------------------------


  • 2.  RE: zAlert - Verify/Refresh new Alert

    Posted Tue December 17, 2024 11:24 AM
    Edited by Rob van Hoboken Tue December 17, 2024 11:25 AM

    Hi Joe

    You can share a C2PCUST data set between LPARs, you can even run the same alert set on more than one LPAR.  Using the same alert set makes sense if the LPARs have the same naming conventions and the same security/risk profile.  You would maintain the set from one of the LPARs, activating alerts, verify and refresh.  When the set works on one LPAR, you would use SDSF to send a command to the other LPARs /F C2POLICE,REFRESH.  This instructs the other C2POLICE instances to read the set (that was just prepared on the management LPAR.  I have seen customers use /RO *ALL,F C2POLICE,REFRESH

    Alternatively, you could use batch jobs described here to copy alert definitions from one C2PCUST to another, or between alert sets, and select or unselect individual alerts in a set.

    If you would like to talk about these options, send me a personal email (not to the Forum).

    ------------------------------
    Rob van Hoboken
    ------------------------------



  • 3.  RE: zAlert - Verify/Refresh new Alert

    Posted Mon March 24, 2025 09:16 AM

    Hi Joe,

    Were you able to get this working?



    ------------------------------
    Kenneth Whitfield
    ------------------------------