Troubleshooting
Problem
Trying to capture failed logins to DB2i database, but no traffic is collected. Currently filter_audit_entry_types as AX AF PW and a rule logging failed logins are configured .
Data shows that the PW entries are in the audit journal and SYSAUDIT shows PW is being filtered.
Symptom
Set up filter_audit_entry_types as AX AF PW and rules in policy to capture and log failed logins. DSPSECAUD and DSPJRN show that PW entries have been written to the audit journal while SYSAUDIT reflects that PW is being filtered.
[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"Component":"S-TAP, DB2i, zOS","Platform":[{"code":"PF014","label":"iOS"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB76","label":"Data Platform"}}]
Log InLog in to view more of this document
This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.
Historical Number
TS001540748
Was this topic helpful?
Document Information
Modified date:
06 November 2018
UID
ibm10738859