Support for data areas and IFS are no-cost additions to AP-Journal.
Raz-Lee Security, a provider of IBM i security, auditing and compliance solutions, has announced the availability of several unique no-cost features in its patent-pending DB2 audit trail product AP-Journal.
AP-Journal supports sending "mass mode" real-time Syslog alerts regarding application field-level data changes to SIEM products, for example: IBM/Tivoli, RSA enVision, IBM/Q1Labs, ArcSight, GFI, etc. This support sends only Syslog messages without any additional processing and has been measured to transfer up to 2000 transactions per second to SIEM products while using less than 1 percent CPU.
A significant addition to monitoring changes to file data is the newly-implemented support for monitoring changes to objects and members, for example, in data areas and in the IFS. This support involves implementing additional journal codes such as R=Rcd, E=DA (data area), B=IFS, U=Rd (Read), F=M (member).
Additional features added to AP-Journal include support for periodic file structure changes to application files, enabling AP-Journal to continue monitoring application files across changes to file structures, as well as replaceable layouts in relatively long legacy records which use internal pointers to fields within the record.
A unique developer-oriented feature enables coding field-specific exit routines for determining, in real time, whether or not to filter specific journal records.
Eli Spitz, vice president of Business Development at Raz-Lee Security, says,"Raz-Lee's DB2 audit trail product, AP-Journal, has been one of our most successful offerings during the past four to five years. Enthusiastic customer feedback and requests for additional capabilities have led to the recent additions to the product, which we are certain will be accepted with even greater enthusiasm by the IBM i community."
LATEST COMMENTS
MC Press Online