IBM Security Z Security

 View Only

  • 1.  zAlert - new alert not showing

    IBM Champion
    Posted Tue July 20, 2021 07:16 AM
    Hi,
    After creating a new alert, it can be seen in the CUST file but is not showing on the alert panel. If we try to create another alert with the same id, it says it already exists.
    In the past when creating alerts we have had no problems. Is there a specific profile that may be causing this problem?

    Thanks.

    ------------------------------
    Anji Stephens
    ------------------------------


  • 2.  RE: zAlert - new alert not showing

    Posted Tue July 20, 2021 11:02 AM
    Edited by MARIUS OTTO Wed July 21, 2021 02:28 AM

    Hi Anji

    May I ask from 'what' to 'what' you're copying, if you're copying, or creating from scratch what the new alert name is.

    The reason I am asking is that we just want to confirm that your new alert is created in the group you're expecting it to be in.

    The alert numbers have some meaning ...

    1st char => ESM

      1 = RACF

      2 = ACF2

      3 = TSS (although not used)

      4 = User/Special alert

    2nd char = Group into which it should go

    1 = User

    2 = Dataset

    .... etc ..

    So if you copied 1101 to 4101 .. you should still expect to see the alert under 'User Alerts' but if you copied 1101 to 1001 you will see it under 'Other Alerts' taking the 2nd char into account.



    ------------------------------
    MARIUS OTTO
    MARIUSOTTO
    ------------------------------

    Original Message


  • 3.  RE: zAlert - new alert not showing

    IBM Champion
    Posted Wed July 21, 2021 03:30 AM
    Edited by Rob van Hoboken Wed July 21, 2021 03:32 AM
    You are right Marius, this is an important functionality in the zSecure Alert management application.  Alerts are shown in the alert group or category defined by the 2nd digit of the alert number, so when you create a new alert (or copy from an existing alert), make sure the 2nd digit matches the category you expect for the alert.

    Regarding the first digit of the alert number, value 4 refers to installation defined alerts for z/OS systems running with RACF.  Value 5 is set aside for installation defined alerts running on an ACF2 system.

    ------------------------------
    Rob van Hoboken
    ------------------------------


  • 4.  RE: zAlert - new alert not showing

    IBM Champion
    Posted Wed July 21, 2021 03:24 AM
    Edited by Rob van Hoboken Wed July 21, 2021 03:31 AM
    Hi Anji
    If this problem occurs in zSecure Alert 2.4.0, after you applied some PTFs from 2020, I have to admit to several deficiencies in the code that shipped in 2020.  One of them caused new alerts to become invisible, i.e., the alert is in the site alert table, but not displayed.  This bug, and several more, is described in APAR OA60687.  The fix is PTF UJ04987 for zSecure 2.4, that also adds several usability enhancements.
    Please check https://community.ibm.com/community/user/security/blogs/rob-van-hoboken1/2021/04/13/admin-maint-enhanced-zsecure-alert
    If your problems are not described by this APAR, I suggest you open a Case https://www.ibm.com/mysupport/s/ as you should do with (all) defects.

    ------------------------------
    Rob van Hoboken
    ------------------------------


  • 5.  RE: zAlert - new alert not showing

    Posted Wed July 21, 2021 03:24 AM
    Hi Anji,
    I would recommend you check that APAR(PTF) OA60687(UJ04987) is applied. That PTF fixes an issue where inserted alerts do not show up in SE.A.A.
    If after applying that you still have issues with "Alert not added. Alert id already defined" - please open a case with zSecure support.
    Regards, Mike

    ------------------------------
    Mike Riches
    ------------------------------

    Original Message


  • 6.  RE: zAlert - new alert not showing

    IBM Champion
    Posted Wed July 21, 2021 04:26 AM
    Hi Mike,
    Hope you are well. I will check if we have the fix and get back to you.
    Thanks!
    Regards, Anji

    ------------------------------
    Anji Stephens
    ------------------------------

    Original Message


  • 7.  RE: zAlert - new alert not showing

    IBM Champion
    Posted Wed July 21, 2021 11:41 AM
    Hi All,

    I have just received confirmation that we have received the PTF but it won't be applied until August. Meanwhile, I will use copy instead of insert.

    Many thanks for your help.

    Regards,

    Anji



    ------------------------------
    Anji Stephens
    ------------------------------

    Original Message