Raz-Lee Expands DB2 Audit Trail Solution with New Features
Date Posted: January 26, 2012 10:47 AM
Author: Mark Donahue

Raz-Lee Security--a provider of IBM i security, auditing, and compliance solutions--has announced the immediate availability of numerous market-unique features at no cost into its patent-pending DB2 audit trail product, AP-Journal.

Raz-Lee will be hosting a webinar about the new AP-Journal features and release on Thursday, Feb. 9, 2012, at 10 a.m. EST.

AP-Journal supports sending "mass mode" realtime Syslog alerts regarding application field-level data changes to SIEM products, for example IBM/Tivoli, RSA enVision, IBM/Q1Labs, ArcSight, GFI, etc. This support sends only Syslog messages without any additional processing and has been measured to transfer up to 2000 transactions per second to SIEM products while using less than 1% CPU.

A significant addition to monitoring changes to file data is the newly implemented support for monitoring changes to objects and members, for example in data areas and in the IFS. This support involves implementing additional journal codes such as R=Rcd, E=DA (data area), B=IFS, U=Rd (Read), F=M (member).

Additional features added to AP-Journal include support for periodic file structure changes to application files, enabling AP-Journal to continue monitoring application files across changes to file structures, as well as replaceable layouts in relatively long legacy records that use internal pointers to fields within the record.

A unique developer-oriented feature enables coding field-specific exit routines for determining, in realtime, whether or not to filter specific journal records.


Want to use this article? Click here for options!
Want to subscribe? Click here!
There are no comments to display. Be the first to add your thoughts!
You must log on before posting a comment.

Are you a new visitor? Register Here
 

around the forums

Running automated tests on a display file program
Forum Name: RPG
21 May 2012 07:57 PM | Replies: 0
Using remote commands with FTP
Forum Name: Communications/Networking
21 May 2012 03:57 PM | Replies: 3
How do I start reading from the first record?
Forum Name: CL
21 May 2012 02:51 PM | Replies: 5

ProVIP Sponsors

BCD

Join Our Community!

Subscribe today to iPro Developer! iPro Developer is packed with technical know-how for developers of IBM i, iSeries, AS400 and System i. Sign up now to get your full subscriber benefits including:

  • Code available for download
  • Full access to the online article archive (including all System iNEWS ProVIP content)
  • Downloadable ebook with past 6 months of articles
  • Discounts on eLearning classes, self-paced training, in-person events, and more!
iPro Developer Newsletters
  • Get the Latest News
  • Product Updates
  • Helpful Tricks
  • Productivity Tips