Environment
NetIQ AppManager 6.x
NetIQ AppManager 7.0.x
Situation
Events generated from custom AppManager Knowledge Script category jobs are not passing from AppManager to Security Manager.
AM/SM Connector Catagory Filtering failing to pass events.
AM/SM Connector Catagory Filtering is not allowing Events generated from custom AppManager Knowledge Script category jobs to pass from AppManager to Security Manager.
AM/SM Connector (Alt) :: NetIQ Process Rule Group in Security Manager is not enabled.
AM/SM Connector Catagory Filtering failing to pass events.
AM/SM Connector Catagory Filtering is not allowing Events generated from custom AppManager Knowledge Script category jobs to pass from AppManager to Security Manager.
AM/SM Connector (Alt) :: NetIQ Process Rule Group in Security Manager is not enabled.
Resolution
Perform the following procedures to allow Events from jobs that were created using Knowledge Scripts that are running from a custom KS catagory to pass from AppManager to Security Manager.
In the AppManager / Security Manager Connector (Configuration Wizard):
- On the AM Catagory Filtering tab, enable Forward all unlisted categories.
In the NetIQ Security Manager console:
- Locate the Process Rule Group section.
- Modify the AppManager / Security Manager Connector :: NetIQ rule to disabled.
- Modify the AppManager / Security Manager Connector (Alt) :: NetIQ rule to enabled.
Cause
Category Filtering in the AM/SM Connector can not pass Events from jobs that were created using Knowledge Scripts that are running from a custom category without additional changes being made in Security Manager configuration.
Additional Information
Formerly known as NETIQKB47713
Custom KS category example
The NT_CPULoaded KS is located in the NT category tab of the AppManager Operator Console. If you make a copy of this KS and then rename it to Test_CPULoaded, the new KS would create a new KS category in the AppManager Operator Console called Test.