Re: Fw: Audit of configuration changes
I'd like to find out more about this product, but only for my own curiosity. The benefits gained by this type of auditing, if any, will not justify investing in further software. Mike -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED] Behalf Of Business Integration Sent: Wednesday, September 29, 2004 4:07 PM To: [EMAIL PROTECTED] Subject: Re: Fw: Audit of configuration changes I don't like to advertise but it looks like you're looking for something that only Nastel has so I feel compelled to answer. Nastel's AutoPilot/WMQ (formerly known as MQControl) creates an event message/alert whenever any object parameter changes, whether it is changed using AutoPilot or mqsc or any other method. -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED] On Behalf Of Mike Kenny - BCX - Infrastructure Services Sent: Wednesday, September 29, 2004 12:58 PM To: [EMAIL PROTECTED] Subject: Re: Fw: Audit of configuration changes Thanks Tim, this is an interesting piece of software, but unfortunately, as far as I can tell it does not operate in conjunction with MQ Explorer. If I am wrong on that, somebody please correct me because this would then be what I am looking for. Mike Have a look at the MQ wrapper: An audit trail is also created to monitor and log changes to the MQSeries configuration. Supportpac MS0E can be found here: http://www-306.ibm.com/software/integration/support/supportpac s/product.html#wmq Regards, Tim Crossland Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Fw: Audit of configuration changes
In that case start by looking at the free version. Support pac MS0M http://www-1.ibm.com/support/docview.wss?rs=203uid=swg24004747loc=en_UScs =utf-8lang=en -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED] On Behalf Of Mike Kenny - BCX - Infrastructure Services Sent: Thursday, September 30, 2004 9:27 AM To: [EMAIL PROTECTED] Subject: Re: Fw: Audit of configuration changes I'd like to find out more about this product, but only for my own curiosity. The benefits gained by this type of auditing, if any, will not justify investing in further software. Mike -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED] Behalf Of Business Integration Sent: Wednesday, September 29, 2004 4:07 PM To: [EMAIL PROTECTED] Subject: Re: Fw: Audit of configuration changes I don't like to advertise but it looks like you're looking for something that only Nastel has so I feel compelled to answer. Nastel's AutoPilot/WMQ (formerly known as MQControl) creates an event message/alert whenever any object parameter changes, whether it is changed using AutoPilot or mqsc or any other method. -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED] On Behalf Of Mike Kenny - BCX - Infrastructure Services Sent: Wednesday, September 29, 2004 12:58 PM To: [EMAIL PROTECTED] Subject: Re: Fw: Audit of configuration changes Thanks Tim, this is an interesting piece of software, but unfortunately, as far as I can tell it does not operate in conjunction with MQ Explorer. If I am wrong on that, somebody please correct me because this would then be what I am looking for. Mike Have a look at the MQ wrapper: An audit trail is also created to monitor and log changes to the MQSeries configuration. Supportpac MS0E can be found here: http://www-306.ibm.com/software/integration/support/supportpac s/product.html#wmq Regards, Tim Crossland Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Fw: Audit of configuration changes
Thanks, I'll check this out. Mike -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED] Behalf Of Business Integration Sent: Thursday, September 30, 2004 11:12 AM To: [EMAIL PROTECTED] Subject: Re: Fw: Audit of configuration changes In that case start by looking at the free version. Support pac MS0M http://www-1.ibm.com/support/docview.wss?rs=203uid=swg2400474 7loc=en_UScs =utf-8lang=en -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED] On Behalf Of Mike Kenny - BCX - Infrastructure Services Sent: Thursday, September 30, 2004 9:27 AM To: [EMAIL PROTECTED] Subject: Re: Fw: Audit of configuration changes I'd like to find out more about this product, but only for my own curiosity. The benefits gained by this type of auditing, if any, will not justify investing in further software. Mike -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED] Behalf Of Business Integration Sent: Wednesday, September 29, 2004 4:07 PM To: [EMAIL PROTECTED] Subject: Re: Fw: Audit of configuration changes I don't like to advertise but it looks like you're looking for something that only Nastel has so I feel compelled to answer. Nastel's AutoPilot/WMQ (formerly known as MQControl) creates an event message/alert whenever any object parameter changes, whether it is changed using AutoPilot or mqsc or any other method. -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED] On Behalf Of Mike Kenny - BCX - Infrastructure Services Sent: Wednesday, September 29, 2004 12:58 PM To: [EMAIL PROTECTED] Subject: Re: Fw: Audit of configuration changes Thanks Tim, this is an interesting piece of software, but unfortunately, as far as I can tell it does not operate in conjunction with MQ Explorer. If I am wrong on that, somebody please correct me because this would then be what I am looking for. Mike Have a look at the MQ wrapper: An audit trail is also created to monitor and log changes to the MQSeries configuration. Supportpac MS0E can be found here: http://www-306.ibm.com/software/integration/support/supportpac s/product.html#wmq Regards, Tim Crossland Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Audit of configuration changes
Hi, I just tried out a few things on Win2k box with WMQ v5.3 server and I could not get any events related to object changes to fire. I thought Win2k MQ had those events. Hummm, I guess I was mixing up mainframe with Windows - !! :)) Regards, Roger Lacroix Quoting Mike Kenny - BCX - Infrastructure Services [EMAIL PROTECTED]: Thanks for this Roger. Actually the 'who'is probably not a major problem as we could probably determine this from the time. When you get a chance, I'd like to know what that attribute is. David Partridge pointed me at CONFIGEV (on z/OS), but this does not seem to exist on W2 (thanks anyway David) Mike -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED] Behalf Of Roger Lacroix Sent: Tuesday, September 28, 2004 3:12 PM To: [EMAIL PROTECTED] Subject: Re: Audit of configuration changes Hi, I don't have a queue manager in front of me right now but there is a queue manager attribute that is for object change (I don't remember what is it called). But if you enable it, an event will be generated when an MQ object is changed. Of course, the hard part is 'who' changed it. Things that I have learnt over the years is that developers don't get 'Admin' access to queue managers (even in DEV) and nobody gets access to the mqm account except for myself and my team members. It means a little more work for myself and my team but in the end, far fewer headaches. Regards, Roger Lacroix Capitalware Inc. http://www.capitalware.biz Quoting Mike Kenny - BCX - Infrastructure Services [EMAIL PROTECTED]: Using MQ 5.3 on W2K I am trying to use the event log to determine what has happened to our system and when, without success. For example, I can see in the event log that an MQGET operation failed because get had been disabled. OK, that is simple enough, I just need to enable get. But when it happens again, I may want to look into the cause rather than the sympton, but the event log does not appear to have an entry indicating when the get operation was disabled (nor by whom). Is there any way of enabling this level of logging in the event log? Or elsewhere? Note: I am using the above as an example only, I really want be able to audit any configuration changes. Kind Regards, Mike Kenny Principal Consultant Professional Services Business Connexion (Pty) Ltd Office: +27 (0)11 266 5703 Mobile: +27 (0)83 266 1437 Fax: +27 (0)11 266 5769 Email: [EMAIL PROTECTED] Web Site: www.bcx.co.za NOTICES: 1. This message and any attachments are confidential and intended solely for the addressee. If you have received this message in error, please notify the sender at Business Connexion (Pty) Ltd immediately. Any unauthorised use, alteration or dissemination is prohibited. 2. Business Connexion (Pty) Ltd accepts no liability whatsoever for any loss whether it be direct, indirect or consequential, arising from information made available and actions resulting there from. 3. Please note that Business Connexion only binds itself by way of signed agreements. 'Signed' refers to a hand-written signature, excluding any signature appended by 'electronic communication' as defined in the Electronic Communications and Transactions Act, no. 25 of 2002. 4. Directors: P.A. Watt, B. Mophatlane, A.C. Farthing (British), B. Sithole, I. Mophatlane, M.W. Schoeman. 5. Business Connexion (Pty) Ltd Company Registration Number: 1993/003683/07. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Fw: Audit of configuration changes
Thanks Tim, this is an interesting piece of software, but unfortunately, as far as I can tell it does not operate in conjunction with MQ Explorer. If I am wrong on that, somebody please correct me because this would then be what I am looking for. Mike Have a look at the MQ wrapper: An audit trail is also created to monitor and log changes to the MQSeries configuration. Supportpac MS0E can be found here: http://www-306.ibm.com/software/integration/support/supportpac s/product.html#wmq Regards, Tim Crossland Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Audit of configuration changes
Thanks for the effort anyway Mike I just tried out a few things on Win2k box with WMQ v5.3 server and I could not get any events related to object changes to fire. I thought Win2k MQ had those events. Hummm, I guess I was mixing up mainframe with Windows - !! :)) Regards, Roger Lacroix Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Fw: Audit of configuration changes
No, but you could just remove those from the mqm group Unfortunately that doesn't prevent / track changes made by users not using this support pack. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Fw: Audit of configuration changes
I don't like to advertise but it looks like you're looking for something that only Nastel has so I feel compelled to answer. Nastel's AutoPilot/WMQ (formerly known as MQControl) creates an event message/alert whenever any object parameter changes, whether it is changed using AutoPilot or mqsc or any other method. -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED] On Behalf Of Mike Kenny - BCX - Infrastructure Services Sent: Wednesday, September 29, 2004 12:58 PM To: [EMAIL PROTECTED] Subject: Re: Fw: Audit of configuration changes Thanks Tim, this is an interesting piece of software, but unfortunately, as far as I can tell it does not operate in conjunction with MQ Explorer. If I am wrong on that, somebody please correct me because this would then be what I am looking for. Mike Have a look at the MQ wrapper: An audit trail is also created to monitor and log changes to the MQSeries configuration. Supportpac MS0E can be found here: http://www-306.ibm.com/software/integration/support/supportpac s/product.html#wmq Regards, Tim Crossland Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Fw: Audit of configuration changes
If you look at the former Candle product now - IBM Tivoli OMEGAMON for MQ you will find a very rich MQ configuration tool. This tool allows you to copy all your MQ objects into a central database through automatic discovery. Any changes to the configuration made through the tool is logged for auditing purposes. The tool also has an automatic scheduling facility which as one of its functions is the ability to compare the database objects against the actual environment. If it detects a discrepancy between the database and the actual environment a notification report will be generated and the user will have the option of incorporating the found differences into the database or to enforce the use of the tool by returning the actual object back to the state it was in the database. Barry D. Lamkin Senior IT Specialist IBM Software Group Business Integration [EMAIL PROTECTED] To ERPRISEINTEGRATIO [EMAIL PROTECTED] N.COM cc Sent by: MQSeries List Subject [EMAIL PROTECTED] Re: Fw: Audit of configuration N.AC.AT changes 09/29/2004 10:07 AM Please respond to MQSeries List I don't like to advertise but it looks like you're looking for something that only Nastel has so I feel compelled to answer. Nastel's AutoPilot/WMQ (formerly known as MQControl) creates an event message/alert whenever any object parameter changes, whether it is changed using AutoPilot or mqsc or any other method. -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED] On Behalf Of Mike Kenny - BCX - Infrastructure Services Sent: Wednesday, September 29, 2004 12:58 PM To: [EMAIL PROTECTED] Subject: Re: Fw: Audit of configuration changes Thanks Tim, this is an interesting piece of software, but unfortunately, as far as I can tell it does not operate in conjunction with MQ Explorer. If I am wrong on that, somebody please correct me because this would then be what I am looking for. Mike Have a look at the MQ wrapper: An audit trail is also created to monitor and log changes to the MQSeries configuration. Supportpac MS0E can be found here: http://www-306.ibm.com/software/integration/support/supportpac s/product.html#wmq Regards, Tim Crossland Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Fw: Audit of configuration changes
Not to be confused with IBM Tivoli Monitoring for WebSphere MQ. Any hints on what if any merging there will be between these two products? My vote would be to keep the former Candle product but give it better integration with Tivoli. - Bruce Giordano Barry Lamkin [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent by: MQSeries List cc: [EMAIL PROTECTED] Subject: Re: Fw: Audit of configuration changes Wednesday September 29, 2004 01:34 PM Please respond to MQSeries List If you look at the former Candle product now - IBM Tivoli OMEGAMON for MQ you will find a very rich MQ configuration tool. This tool allows you to copy all your MQ objects into a central database through automatic discovery. Any changes to the configuration made through the tool is logged for auditing purposes. The tool also has an automatic scheduling facility which as one of its functions is the ability to compare the database objects against the actual environment. If it detects a discrepancy between the database and the actual environment a notification report will be generated and the user will have the option of incorporating the found differences into the database or to enforce the use of the tool by returning the actual object back to the state it was in the database. Barry D. Lamkin Senior IT Specialist IBM Software Group Business Integration [EMAIL PROTECTED] To ERPRISEINTEGRATIO [EMAIL PROTECTED] N.COM cc Sent by: MQSeries List Subject [EMAIL PROTECTED] Re: Fw: Audit of configuration N.AC.AT changes 09/29/2004 10:07 AM Please respond to MQSeries List I don't like to advertise but it looks like you're looking for something that only Nastel has so I feel compelled to answer. Nastel's AutoPilot/WMQ (formerly known as MQControl) creates an event message/alert whenever any object parameter changes, whether it is changed using AutoPilot or mqsc or any other method. -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED] On Behalf Of Mike Kenny - BCX - Infrastructure Services Sent: Wednesday, September 29, 2004 12:58 PM To: [EMAIL PROTECTED] Subject: Re: Fw: Audit of configuration changes Thanks Tim, this is an interesting piece of software, but unfortunately, as far as I can tell it does not operate in conjunction with MQ Explorer. If I am wrong on that, somebody please correct me because this would then be what I am looking for. Mike Have a look at the MQ wrapper: An audit trail is also created to monitor and log changes to the MQSeries configuration. Supportpac MS0E can be found here: http://www-306.ibm.com/software/integration/support/supportpac s/product.html#wmq Regards, Tim Crossland Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Fw: Audit of configuration changes
Bruce, Hope all is well with you. Your vote wins. Some of the features of the IBM Tivoli Monitoring for WebSphere MQ will be incorporated into the OMEGAMON XE for MQ agent when they both come together, next year. The Candle Net Portal will be maintained as the interface, renamed as the Tivoli Management Portal. Barry D. Lamkin Senior IT Specialist IBM Software Group Bruce Giordano [EMAIL PROTECTED] RUDENTIAL.COM To Sent by: MQSeries [EMAIL PROTECTED] List cc [EMAIL PROTECTED] N.AC.AT Subject Re: Fw: Audit of configuration changes 09/29/2004 02:30 PM Please respond to MQSeries List Not to be confused with IBM Tivoli Monitoring for WebSphere MQ. Any hints on what if any merging there will be between these two products? My vote would be to keep the former Candle product but give it better integration with Tivoli. - Bruce Giordano Barry Lamkin [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent by: MQSeries List cc: [EMAIL PROTECTED] Subject: Re: Fw: Audit of configuration changes Wednesday September 29, 2004 01:34 PM Please respond to MQSeries List If you look at the former Candle product now - IBM Tivoli OMEGAMON for MQ you will find a very rich MQ configuration tool. This tool allows you to copy all your MQ objects into a central database through automatic discovery. Any changes to the configuration made through the tool is logged for auditing purposes. The tool also has an automatic scheduling facility which as one of its functions is the ability to compare the database objects against the actual environment. If it detects a discrepancy between the database and the actual environment a notification report will be generated and the user will have the option of incorporating the found differences into the database or to enforce the use of the tool by returning the actual object back to the state it was in the database. Barry D. Lamkin Senior IT Specialist IBM Software Group Business Integration [EMAIL PROTECTED] To ERPRISEINTEGRATIO [EMAIL PROTECTED] N.COM cc Sent by: MQSeries List Subject [EMAIL PROTECTED] Re: Fw: Audit of configuration N.AC.AT changes 09/29/2004 10:07 AM Please respond to MQSeries List I don't like to advertise but it looks like you're looking for something that only Nastel has so I feel compelled to answer. Nastel's AutoPilot/WMQ (formerly known as MQControl) creates an event message/alert whenever any object parameter changes, whether it is changed using AutoPilot or mqsc or any other method. -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED] On Behalf Of Mike Kenny - BCX - Infrastructure Services Sent: Wednesday, September 29, 2004 12:58 PM To: [EMAIL PROTECTED] Subject: Re: Fw: Audit of configuration changes Thanks Tim, this is an interesting piece of software, but unfortunately, as far as I can tell it does not operate in conjunction with MQ Explorer. If I am wrong on that, somebody please correct me because this would then be what I am looking for. Mike Have a look at the MQ wrapper: An audit trail is also created to monitor and log changes to the MQSeries configuration. Supportpac MS0E can be found here: http://www-306.ibm.com/software/integration/support/supportpac s/product.html#wmq Regards, Tim Crossland Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at
Audit of configuration changes
Using MQ 5.3 on W2K I am trying to use the event log to determine what has happened to our system and when, without success. For example, I can see in the event log that an MQGET operation failed because get had been disabled. OK, that is simple enough, I just need to enable get. But when it happens again, I may want to look into the cause rather than the sympton, but the event log does not appear to have an entry indicating when the get operation was disabled (nor by whom). Is there any way of enabling this level of logging in the event log? Or elsewhere? Note: I am using the above as an example only, I really want be able to audit any configuration changes. Kind Regards,Mike KennyPrincipal ConsultantProfessional ServicesBusiness Connexion (Pty) LtdOffice: +27 (0)11 266 5703Mobile: +27 (0)83 266 1437Fax: +27 (0)11 266 5769Email: [EMAIL PROTECTED]Web Site: www.bcx.co.zaNOTICES:1. This message and any attachments are confidential and intended solely for the addressee. If you have received this message in error, please notify the sender at Business Connexion (Pty) Ltd immediately. Any unauthorised use, alteration or dissemination is prohibited.2. Business Connexion (Pty) Ltd accepts no liability whatsoever for any loss whether it be direct, indirect or consequential, arising from information made available and actions resulting there from.3. Please note that Business Connexion only binds itself by way of signed agreements. 'Signed' refers to a hand-written signature, excluding any signature appended by 'electronic communication' as defined in the Electronic Communications and Transactions Act, no. 25 of 2002.4. Directors: P.A. Watt, B. Mophatlane, A.C. Farthing (British), B. Sithole, I. Mophatlane, M.W. Schoeman.5. Business Connexion (Pty) Ltd Company Registration Number: 1993/003683/07.
Re: Audit of configuration changes
Mike,
You might like to have a look at the
reconda products. I think this is an area in which they specialise. Of course
there are the old favourites Tivoli, BMC Patrol, CA Unicentre, MQ Software QPASA, Nastel, Candle
Command Centre and so on.
Regards.
Nick
-Original
Message-
From: Mike Kenny - BCX -
Infrastructure Services [mailto:[EMAIL PROTECTED]
Sent: 28 September 2004 13:38
To: [EMAIL PROTECTED]
Subject: Audit of configuration
changes
Using
MQ 5.3 on W2K I am trying to use the event log to determine what has happened
to our system and when, without success. For example, I can see in the event
log that an MQGET operation failed because get had been disabled. OK, that is
simple enough, I just need to enable get. But when it happens again, I may want
to look into the cause rather than the sympton, but the event log does not
appear to have an entry indicating when the get operation was disabled (nor by
whom). Is there any way of enabling this level of logging in the event log? Or
elsewhere?
Note:
I am using the above as an example only, I really want be able to audit any
configuration changes.
Kind Regards,
Mike Kenny
Principal Consultant
Professional Services
Business Connexion (Pty) Ltd
Office: +27 (0)11 266 5703
Mobile: +27 (0)83 266 1437
Fax: +27 (0)11 266 5769
Email: [EMAIL PROTECTED]
Web Site: www.bcx.co.za
NOTICES:
1. This message and any attachments are confidential and intended solely for
the addressee. If you have received this message in error, please notify the
sender at Business Connexion (Pty) Ltd immediately. Any unauthorised use,
alteration or dissemination is prohibited.
2. Business Connexion (Pty) Ltd accepts no liability whatsoever for any loss
whether it be direct, indirect or consequential, arising from information made
available and actions resulting there from.
3. Please note that Business Connexion only binds itself by way of signed
agreements. 'Signed' refers to a hand-written signature, excluding any
signature appended by 'electronic communication' as defined in the Electronic
Communications and Transactions Act, no. 25 of 2002.
4. Directors: P.A. Watt, B. Mophatlane, A.C. Farthing (British), B. Sithole, I.
Mophatlane, M.W. Schoeman.
5. Business Connexion (Pty) Ltd Company Registration Number: 1993/003683/07.
*
This message contains privileged and confidential information intended
only for the use of the recipient named above. Its contents do not
constitute a commitment by Strategic Thought Limited ("Strategic
Thought") unless separately endorsed by an authorised representative
of Strategic Thought.
Any use, dissemination, distribution, reproduction or unauthorised
disclosure of this message is prohibited. If you receive this message
in error, please notify the sender immediately and delete it from your
computer systems.
Any views expressed in this message are those of the individual sender
and may not necessarily reflect those of Strategic Thought.
Strategic Thought believes this e-mail and any attachments to be virus
free. However, the recipient is responsible for ensuring it is virus
free and Strategic Thought do not accept any responsibility for any
loss or damage howsoever caused from use of this e-mail, attachments
or contents.
*
Re: Audit of configuration changes
On OS/390, there is an audit record cut for configuration changes. They are written to SYSTEM.ADMIN.CONFIG.EVENT if you alter the qmgr to enable CONFIGEV. Dave Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Audit of configuration changes
Hi, I don't have a queue manager in front of me right now but there is a queue manager attribute that is for object change (I don't remember what is it called). But if you enable it, an event will be generated when an MQ object is changed. Of course, the hard part is 'who' changed it. Things that I have learnt over the years is that developers don't get 'Admin' access to queue managers (even in DEV) and nobody gets access to the mqm account except for myself and my team members. It means a little more work for myself and my team but in the end, far fewer headaches. Regards, Roger Lacroix Capitalware Inc. http://www.capitalware.biz Quoting Mike Kenny - BCX - Infrastructure Services [EMAIL PROTECTED]: Using MQ 5.3 on W2K I am trying to use the event log to determine what has happened to our system and when, without success. For example, I can see in the event log that an MQGET operation failed because get had been disabled. OK, that is simple enough, I just need to enable get. But when it happens again, I may want to look into the cause rather than the sympton, but the event log does not appear to have an entry indicating when the get operation was disabled (nor by whom). Is there any way of enabling this level of logging in the event log? Or elsewhere? Note: I am using the above as an example only, I really want be able to audit any configuration changes. Kind Regards, Mike Kenny Principal Consultant Professional Services Business Connexion (Pty) Ltd Office: +27 (0)11 266 5703 Mobile: +27 (0)83 266 1437 Fax: +27 (0)11 266 5769 Email: [EMAIL PROTECTED] Web Site: www.bcx.co.za NOTICES: 1. This message and any attachments are confidential and intended solely for the addressee. If you have received this message in error, please notify the sender at Business Connexion (Pty) Ltd immediately. Any unauthorised use, alteration or dissemination is prohibited. 2. Business Connexion (Pty) Ltd accepts no liability whatsoever for any loss whether it be direct, indirect or consequential, arising from information made available and actions resulting there from. 3. Please note that Business Connexion only binds itself by way of signed agreements. 'Signed' refers to a hand-written signature, excluding any signature appended by 'electronic communication' as defined in the Electronic Communications and Transactions Act, no. 25 of 2002. 4. Directors: P.A. Watt, B. Mophatlane, A.C. Farthing (British), B. Sithole, I. Mophatlane, M.W. Schoeman. 5. Business Connexion (Pty) Ltd Company Registration Number: 1993/003683/07. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Audit of configuration changes
Thanks for this Roger. Actually the 'who'is probably not a major problem as we could probably determine this from the time. When you get a chance, I'd like to know what that attribute is. David Partridge pointed me at CONFIGEV (on z/OS), but this does not seem to exist on W2 (thanks anyway David) Mike -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED] Behalf Of Roger Lacroix Sent: Tuesday, September 28, 2004 3:12 PM To: [EMAIL PROTECTED] Subject: Re: Audit of configuration changes Hi, I don't have a queue manager in front of me right now but there is a queue manager attribute that is for object change (I don't remember what is it called). But if you enable it, an event will be generated when an MQ object is changed. Of course, the hard part is 'who' changed it. Things that I have learnt over the years is that developers don't get 'Admin' access to queue managers (even in DEV) and nobody gets access to the mqm account except for myself and my team members. It means a little more work for myself and my team but in the end, far fewer headaches. Regards, Roger Lacroix Capitalware Inc. http://www.capitalware.biz Quoting Mike Kenny - BCX - Infrastructure Services [EMAIL PROTECTED]: Using MQ 5.3 on W2K I am trying to use the event log to determine what has happened to our system and when, without success. For example, I can see in the event log that an MQGET operation failed because get had been disabled. OK, that is simple enough, I just need to enable get. But when it happens again, I may want to look into the cause rather than the sympton, but the event log does not appear to have an entry indicating when the get operation was disabled (nor by whom). Is there any way of enabling this level of logging in the event log? Or elsewhere? Note: I am using the above as an example only, I really want be able to audit any configuration changes. Kind Regards, Mike Kenny Principal Consultant Professional Services Business Connexion (Pty) Ltd Office: +27 (0)11 266 5703 Mobile: +27 (0)83 266 1437 Fax: +27 (0)11 266 5769 Email: [EMAIL PROTECTED] Web Site: www.bcx.co.za NOTICES: 1. This message and any attachments are confidential and intended solely for the addressee. If you have received this message in error, please notify the sender at Business Connexion (Pty) Ltd immediately. Any unauthorised use, alteration or dissemination is prohibited. 2. Business Connexion (Pty) Ltd accepts no liability whatsoever for any loss whether it be direct, indirect or consequential, arising from information made available and actions resulting there from. 3. Please note that Business Connexion only binds itself by way of signed agreements. 'Signed' refers to a hand-written signature, excluding any signature appended by 'electronic communication' as defined in the Electronic Communications and Transactions Act, no. 25 of 2002. 4. Directors: P.A. Watt, B. Mophatlane, A.C. Farthing (British), B. Sithole, I. Mophatlane, M.W. Schoeman. 5. Business Connexion (Pty) Ltd Company Registration Number: 1993/003683/07. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Audit of configuration changes
Unfortunately, configuration event support only seems to be present on OS/390. Why this is so I don't know as it should be simple to implement. I don't think that this is in the new release when it drops (at least I saw nothing about this in the presentation that Mark Taylor gave at the ISV conference and was I believe also shown in USA at a public event). Dave Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Audit of configuration changes
With my extremely small knowledge of Big Bertha I believe its simpler to track every single action on the mainframe compared to Microsoft Windows NT/XP. If MS had the same features as the mainframe when tracking events throughout the system we probably wouldn't have so many SP and security pages. Just an opinion whether its warranted or not ;-). David C. Partridge David.Partridge@ To PRIMEUR.COM [EMAIL PROTECTED] Sent by: cc MQSeries List [EMAIL PROTECTED] Subject n.AC.AT Re: Audit of configuration changes 09/28/2004 08:41 AM Please respond to MQSeries List [EMAIL PROTECTED] n.AC.AT Unfortunately, configuration event support only seems to be present on OS/390. Why this is so I don't know as it should be simple to implement. I don't think that this is in the new release when it drops (at least I saw nothing about this in the presentation that Mark Taylor gave at the ISV conference and was I believe also shown in USA at a public event). Dave Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Audit of configuration changes
That we still do not have a way to track changes to the MQ Infrastructure, regardless of what method was used, as part of the base product, seems odd to me. Unfortunately, if this was included, the value of some 3rd party tools would be diminished, which is maybe why IBM doesn't do it (a totally uninformed guess.). -Original Message- From: Christopher Fryett [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 28, 2004 9:56 AM To: [EMAIL PROTECTED] Subject: Re: Audit of configuration changes With my extremely small knowledge of Big Bertha I believe its simpler to track every single action on the mainframe compared to Microsoft Windows NT/XP. If MS had the same features as the mainframe when tracking events throughout the system we probably wouldn't have so many SP and security pages. Just an opinion whether its warranted or not ;-). David C. Partridge David.Partridge@ To PRIMEUR.COM [EMAIL PROTECTED] Sent by: cc MQSeries List [EMAIL PROTECTED] Subject n.AC.AT Re: Audit of configuration changes 09/28/2004 08:41 AM Please respond to MQSeries List [EMAIL PROTECTED] n.AC.AT Unfortunately, configuration event support only seems to be present on OS/390. Why this is so I don't know as it should be simple to implement. I don't think that this is in the new release when it drops (at least I saw nothing about this in the presentation that Mark Taylor gave at the ISV conference and was I believe also shown in USA at a public event). Dave Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive This communication, including attachments, is for the exclusive use of addressee and may contain proprietary, confidential or privileged information. If you are not the intended recipient, any use, copying, disclosure, dissemination or distribution is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return email and delete this communication and destroy all copies. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Fw: Audit of configuration changes
Have a look at the MQ wrapper: An audit trail is also created to monitor and log changes to the MQSeries configuration. Supportpac MS0E can be found here: http://www-306.ibm.com/software/integration/support/supportpacs/product.html#wmq Regards, Tim Crossland http://www.solent-consultancy.com Mike Kenny - BCX - Infrastructure Services To [EMAIL PROTECTED] [EMAIL PROTECTED] O.ZA cc Sent by: MQSeries List Subject [EMAIL PROTECTED] Audit of configuration changes N.AC.AT 28/09/2004 13:38 Please respond to MQSeries List Using MQ 5.3 on W2K I am trying to use the event log to determine what has happened to our system and when, without success. For example, I can see in the event log that an MQGET operation failed because get had been disabled. OK, that is simple enough, I just need to enable get. But when it happens again, I may want to look into the cause rather than the sympton, but the event log does not appear to have an entry indicating when the get operation was disabled (nor by whom). Is there any way of enabling this level of logging in the event log? Or elsewhere? Note: I am using the above as an example only, I really want be able to audit any configuration changes. Kind Regards, Mike Kenny Principal Consultant Professional Services Business Connexion (Pty) Ltd Office: +27 (0)11 266 5703 Mobile: +27 (0)83 266 1437 Fax: +27 (0)11 266 5769 Email: [EMAIL PROTECTED] Web Site: www.bcx.co.za NOTICES: 1. This message and any attachments are confidential and intended solely for the addressee. If you have received this message in error, please notify the sender at Business Connexion (Pty) Ltd immediately. Any unauthorised use, alteration or dissemination is prohibited. 2. Business Connexion (Pty) Ltd accepts no liability whatsoever for any loss whether it be direct, indirect or consequential, arising from information made available and actions resulting there from. 3. Please note that Business Connexion only binds itself by way of signed agreements. 'Signed' refers to a hand-written signature, excluding any signature appended by 'electronic communication' as defined in the Electronic Communications and Transactions Act, no. 25 of 2002. 4. Directors: P.A. Watt, B. Mophatlane, A.C. Farthing (British), B. Sithole, I. Mophatlane, M.W. Schoeman. 5. Business Connexion (Pty) Ltd Company Registration Number: 1993/003683/07. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Fw: Audit of configuration changes
Unfortunately that doesn't prevent / track changes made by users not using this support pack. -Original Message- From: Tim Crossland [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 28, 2004 11:44 AM To: [EMAIL PROTECTED] Subject: Re: Fw: Audit of configuration changes Have a look at the MQ wrapper: An audit trail is also created to monitor and log changes to the MQSeries configuration. Supportpac MS0E can be found here: http://www-306.ibm.com/software/integration/support/supportpacs/product.html #wmq Regards, Tim Crossland http://www.solent-consultancy.com Mike Kenny - BCX - Infrastructure Services To [EMAIL PROTECTED] [EMAIL PROTECTED] O.ZA cc Sent by: MQSeries List Subject [EMAIL PROTECTED] Audit of configuration changes N.AC.AT 28/09/2004 13:38 Please respond to MQSeries List Using MQ 5.3 on W2K I am trying to use the event log to determine what has happened to our system and when, without success. For example, I can see in the event log that an MQGET operation failed because get had been disabled. OK, that is simple enough, I just need to enable get. But when it happens again, I may want to look into the cause rather than the sympton, but the event log does not appear to have an entry indicating when the get operation was disabled (nor by whom). Is there any way of enabling this level of logging in the event log? Or elsewhere? Note: I am using the above as an example only, I really want be able to audit any configuration changes. Kind Regards, Mike Kenny Principal Consultant Professional Services Business Connexion (Pty) Ltd Office: +27 (0)11 266 5703 Mobile: +27 (0)83 266 1437 Fax: +27 (0)11 266 5769 Email: [EMAIL PROTECTED] Web Site: www.bcx.co.za NOTICES: 1. This message and any attachments are confidential and intended solely for the addressee. If you have received this message in error, please notify the sender at Business Connexion (Pty) Ltd immediately. Any unauthorised use, alteration or dissemination is prohibited. 2. Business Connexion (Pty) Ltd accepts no liability whatsoever for any loss whether it be direct, indirect or consequential, arising from information made available and actions resulting there from. 3. Please note that Business Connexion only binds itself by way of signed agreements. 'Signed' refers to a hand-written signature, excluding any signature appended by 'electronic communication' as defined in the Electronic Communications and Transactions Act, no. 25 of 2002. 4. Directors: P.A. Watt, B. Mophatlane, A.C. Farthing (British), B. Sithole, I. Mophatlane, M.W. Schoeman. 5. Business Connexion (Pty) Ltd Company Registration Number: 1993/003683/07. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive This communication, including attachments, is for the exclusive use of addressee and may contain proprietary, confidential or privileged information. If you are not the intended recipient, any use, copying, disclosure, dissemination or distribution is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return email and delete this communication and destroy all copies. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Fw: Audit of configuration changes
True - although one of my clients restricted access to runmqsc on Unix and then used the supportpac. Regards, Tim Crossland http://www.solent-consultancy.com From: Potkay, Peter M (ISD, IT) [EMAIL PROTECTED] To: '[EMAIL PROTECTED]' [EMAIL PROTECTED], [EMAIL PROTECTED] Subject: RE: Fw: Audit of configuration changes Date: Tue, 28 Sep 2004 11:50:52 -0400 Unfortunately that doesn't prevent / track changes made by users not using this support pack. -Original Message- From: Tim Crossland [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 28, 2004 11:44 AM To: [EMAIL PROTECTED] Subject: Re: Fw: Audit of configuration changes Have a look at the MQ wrapper: An audit trail is also created to monitor and log changes to the MQSeries configuration. Supportpac MS0E can be found here: http://www-306.ibm.com/software/integration/support/supportpacs/product.html #wmq Regards, Tim Crossland http://www.solent-consultancy.com Mike Kenny - BCX - Infrastructure Services To [EMAIL PROTECTED] [EMAIL PROTECTED] O.ZA cc Sent by: MQSeries List Subject [EMAIL PROTECTED] Audit of configuration changes N.AC.AT 28/09/2004 13:38 Please respond to MQSeries List Using MQ 5.3 on W2K I am trying to use the event log to determine what has happened to our system and when, without success. For example, I can see in the event log that an MQGET operation failed because get had been disabled. OK, that is simple enough, I just need to enable get. But when it happens again, I may want to look into the cause rather than the sympton, but the event log does not appear to have an entry indicating when the get operation was disabled (nor by whom). Is there any way of enabling this level of logging in the event log? Or elsewhere? Note: I am using the above as an example only, I really want be able to audit any configuration changes. Kind Regards, Mike Kenny Principal Consultant Professional Services Business Connexion (Pty) Ltd Office: +27 (0)11 266 5703 Mobile: +27 (0)83 266 1437 Fax: +27 (0)11 266 5769 Email: [EMAIL PROTECTED] Web Site: www.bcx.co.za Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
