Notifications

You can configure notification settings so that users receive an alert when a specific event occurs in IBM Guardium Key Lifecycle Manager. For example, notifications are sent when a certificate is expired. You can configure the notification channels by using the graphical user interface or the REST interface.

IBM Guardium Key Lifecycle Manager sends two types of notifications, system notifications and email notifications. Email notifications are sent to the specified recipients with the event details. System notifications can be accessed by using the notifications (bell) icon on the upper right of the user interface.

The notifications are sent to users when the following events occur.
  • Certificate expiration.
  • Maximum number of failed login attempts exceeded.
  • A user account is locked out after the defined number of failed login attempts is exceeded.

Configuring notification in a Multi-Master environment

The notifications are sent to users when the following events occur in a Multi-Master setup.
  • HADR takeover scenario occurs.
  • HADR nodes are not reachable due to connectivity issues.
  • Database is not reachable on the master node of the Multi-Master cluster.
  • Multi-Master cluster that is operating in a read-only mode.
Consider the following information to configure an email notification channel in a Multi-Master environment.
  • To receive email notifications, ensure that the email notification channel is configured before you set up a Multi-Master environment. After the Multi-Master setup is done, add the following properties in the SKLMConfig.properties configuration file of all the node servers.
    notification.enable=true
    sendEmailForAgent=true
  • In an existing Multi-Master setup, to receive email notifications, configure an email notification channel in the primary server and add the following property in the SKLMConfig.properties configuration file of all the nodes. Then, restart the IBM Guardium Key Lifecycle Manager server in all the nodes.
    notification.enable=true
    sendEmailForAgent=true