Question & Answer
Question
Guardium z/OS GUI report shows some SELECT with GuardAppEvent, GuardAppEventType, GuardAppEventStrValue that I don't want to see in my report
In Guardium monitored z/OS systems with DB Type of "DB2 Collection Profile" for example ... the Guardium GUI report may show some SELECTs as below that you believe should be filtered already according to Guardium Policy rules .
Cause
For example - this kind of SELECT statement appears in GUI reports when you wish them not to be.
"SELECT 'GuardAppEvent:Start', 'GuardAppEventType:Db2zSqlseti', 'GuardAppEventStrValue ..."
Answer
If it is not required to see this SQL in reports, it is common practice to filter them out in the Policy
The Policy rule may take this kind of form :-
Care needs to be taken to ensure the correct fields are used to identify - for example ..
Skip logging for GuardAppEvents
- Object - SYSIBM.SYSDUMMY
- String - GuardAppEvent
- Action - Skip Logging
Was this topic helpful?
Document Information
Modified date:
04 July 2018
UID
ibm10716363