E-mails are received for the 'Omit Messages' filter, even though PSDETECT is configured only to send (NETIQKB30920)

  • 7730920
  • 02-Feb-2007
  • 08-Oct-2007

Resolution

fact
VigilEnt Security Agent for iSeries 5.4/7.0

symptom
E-mails are received for the 'Omit Messages' filter, even though PSDETECT is configured only to send 'Select Messages'.

symptom
PSDETECT is configured to send an e-mail for only 'Select Messages'.

symptom
In PSDETECT, two filters are configured, one for 'Select Messages' and one for 'Omit Messages', with an action to e-mail selected messages.

cause

When creating a filter to Omit a specific Message ID, for example "CPA3387 Device &4 not available. (C R)", a value must be specified for the variable, &4. Otherwise, the system will not know which device it should be omitting. So, putting &4 as the Variable Number and PRT01 (for this example) for "Equal To Compare Data", the system will now omit any messages with PRT01 in it.

fix
Follow these steps to set the Variable Number and PRT01:

  1. Type PSMENU on the Command Line, press Enter.
  2. Select Option 3 PSDETECT, and press Enter.
  3. Select Option 3 Work With Alert Filter, and press Enter.
  4. Choose Option 5=Work with Filters next to the Alert Queue involved, and press Enter.
  5. Choose Option 5=Work with Filter Details next to the filter involved, and press Enter.
  6. Choose Option 8=Compare Data Variables next to the MSG ID involved, and press Enter.
  7. Change the Equal to Compare Data as appropriate for your situation, and press Enter.


Additional Information

Formerly known as NETIQKB30920