A fix is available
APAR status
Closed as program error.
Error description
Alerts 1501 and 1503 are producing syntactically incorrect LEEF data due to a missing close brace, "]".
Local fix
N/A
Problem summary
**************************************************************** * USERS AFFECTED: Users of zSecure Alert using alerts 1501 * * and/or 1503 with destination QRadar Unix * * syslog. * **************************************************************** * PROBLEM DESCRIPTION: zSecure Alert generates 1501 and 1503 * * alerts for destination QRadar Unix * * syslog without a closing square * * bracket, so that the payload cannot be * * parsed correctly. * **************************************************************** * RECOMMENDATION: Apply the PTF provided. * **************************************************************** Alerts 1501 and 1503 for destination QRadar Unix syslog without a closing square bracket.
Problem conclusion
zSecure Alert has been modified, so that alerts 1501 and 1503 with destination QRadar Unix syslog have their payload between square brackets.
Temporary fix
Comments
APAR Information
APAR number
OA67339
Reported component name
ZSEC BASE,ADMIN
Reported component ID
5655T0100
Reported release
250
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2024-12-20
Closed date
2025-01-16
Last modified date
2025-02-03
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UJ96551 UJ96552
Modules/Macros
C2PS1501 C2PS1503
Fix information
Fixed component name
ZSEC BASE,ADMIN
Fixed component ID
5655T0100
Applicable component levels
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSPQTM","label":"IBM Security zSecure Admin"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"250","Line of Business":{"code":"LOB24","label":"Security Software"}}]
Document Information
Modified date:
03 February 2025