IBM Support

PH66754: HANDLE LARGE POLICIES, POLICY CONTAINING LARGE NUMBER OF FILTER CRITERIA MAY RESULT IN ABEND'S U4088 OR S878

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Policy containing large number of filter criteria (policy length
    is larger than 65535) may result in ABENDs U4088 or S878, or in
    missing or unwanted events streamed to the Guardium Appliance.
    

Local fix

  • Tuning the policy to be less than approximately 32767 characters
    or less than 4095 8-character unique filter values across all
    rules within the policy pushed to the appliance. Adjust the
    total number of unique filter values depending on the length of
    the filter. For example, if the lengths of the filters is
    greater than 8 characters, use fewer than 4095."
    

Problem summary

  • AUI agent ABEND U4088 with large policies
    

Problem conclusion

  • Policy containing large number of filter criteria
    (policy length is larger than 65535) may result in
    ABENDs U4088 or S878, or in missing or unwanted events
    streamed to the Guardium Appliance.
    

Temporary fix

Comments

APAR Information

  • APAR number

    PH66754

  • Reported component name

    SEC GUAR STAP I

  • Reported component ID

    5655STM00

  • Reported release

    B30

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2025-05-28

  • Closed date

    2025-09-22

  • Last modified date

    2025-10-02

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UO05027

Modules/Macros

  • AUIAAACM AUIAAPLI AUIAAUGT AUIACBIM AUIACLMI AUIADT@  AUIAGAIF
    AUIAGCCH AUIAGDSC AUIAGPHN AUIAGQHN AUIAGUDC AUIAMO@  AUIAQINS
    AUIASM@  AUIASMAN AUIFLUS0 AUIFLUSX AUIGADT@ AUIGAPD@ AUIGAPRX
    AUIGDT@  AUIGFALC AUIGFBLT AUIGFBLX AUIGFDT@ AUIGFEXU AUIGFLGT
    AUIGFLTR AUIGFOBG AUIGFOBX AUIGFRLU AUIGFSMT AUIGFSMX AUIGFSTZ
    AUIGFTRI AUIGFZLR AUIGLALC AUIGLDT@ AUIGLMIO AUIGRALC AUIGRDT@
    AUIGRMIO AUIGRSD@ AUIGSDT@ AUILOG00 AUILOG0X AUIMCOM  AUIMGENU
    AUIZCMN  AUIZDT@  AUIZLSSA AUIZMO@  AUIZMSGS AUIZSDSA AUIZSM@
    

Fix information

  • Fixed component name

    SEC GUAR STAP I

  • Fixed component ID

    5655STM00

Applicable component levels

  • RB30 PSY UO05027

       UP25/09/26 P F509

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"B30","Line of Business":{"code":"LOB76","label":"Data Platform"}}]

Document Information

Modified date:
02 October 2025