How do I allow Events from jobs that were created using custom KS category to pass to SM? (NETIQKB47713)

  • 7747713
  • 02-Feb-2007
  • 25-Jan-2011

Environment

NetIQ AppManager 6.x
NetIQ AppManager 7.0.x

Situation

Events generated from custom AppManager Knowledge Script category jobs are not passing from AppManager to Security Manager.
AM/SM Connector Catagory Filtering failing to pass events.
AM/SM Connector Catagory Filtering is not allowing Events generated from custom AppManager Knowledge Script category jobs to pass from AppManager to Security Manager.
AM/SM Connector (Alt) :: NetIQ Process Rule Group in Security Manager is not enabled.

Resolution

Perform the following procedures to allow Events from jobs that were created using Knowledge Scripts that are running from a custom KS catagory to pass from AppManager to Security Manager.

In the AppManager / Security Manager Connector (Configuration Wizard):

  1. On the AM Catagory Filtering tab, enable Forward all unlisted categories.

In the NetIQ Security Manager console:

  1. Locate the Process Rule Group section.
  2. Modify the AppManager / Security Manager Connector :: NetIQ rule to disabled.
  3. Modify the AppManager / Security Manager Connector (Alt) :: NetIQ rule to enabled.

Cause

Category Filtering in the AM/SM Connector can not pass Events from jobs that were created using Knowledge Scripts that are running from a custom category without additional changes being made in Security Manager configuration.

Additional Information

Formerly known as NETIQKB47713

Custom KS category example

The NT_CPULoaded KS is located in the NT category tab of the AppManager Operator Console.  If you make a copy of this KS and then rename it to Test_CPULoaded, the new KS would create a new KS category in the AppManager Operator Console called Test.