Resolution
goal
How do I monitor for the changing of a System Value via PSDetect?
fact
VigilEnt Security Agent for iSeries
symptom
Alert filters have been set up for changed System Values (CPF1805) for a particular message, but no alerts show on the console.
cause
PTFs 1D00028 (for 2.1) and 1D01508 (for 2.2) allow for compare data that is the full length of the variable field in the message description. For example, if an alert filter is defined to monitor for message ID CPF1805, and compare data is defined for variable field 1 (&1), a 10 byte character field of this message, then the filter would not work previously if the data being compared to &1 has a length of 10 bytes.
fix
Download the PTF from the support section of NetIQ.com or contact Technical Support for a copy.
How do I monitor for the changing of a System Value via PSDetect?
fact
VigilEnt Security Agent for iSeries
symptom
Alert filters have been set up for changed System Values (CPF1805) for a particular message, but no alerts show on the console.
cause
PTFs 1D00028 (for 2.1) and 1D01508 (for 2.2) allow for compare data that is the full length of the variable field in the message description. For example, if an alert filter is defined to monitor for message ID CPF1805, and compare data is defined for variable field 1 (&1), a 10 byte character field of this message, then the filter would not work previously if the data being compared to &1 has a length of 10 bytes.
fix
Download the PTF from the support section of NetIQ.com or contact Technical Support for a copy.
Additional Information
Formerly known as NETIQKB30909