Author |
Message
|
bcostacurta |
Posted: Mon Jun 18, 2012 4:38 am Post subject: MQSeries Events when MQSeries objects are created. |
|
|
Acolyte
Joined: 10 Dec 2009 Posts: 71 Location: Luxembourg
|
Hello,
are MQSeries events generated by MQSeries server when objects are created or modified ?
It seems that queues ACCOUNTING and STATISTICS contain events about objects activities (here queues and channel) but not creation or modifications.
Thanks for your attention.
Bruno |
|
Back to top |
|
 |
zpat |
Posted: Mon Jun 18, 2012 5:01 am Post subject: |
|
|
 Jedi Council
Joined: 19 May 2001 Posts: 5866 Location: UK
|
Use configuration events. |
|
Back to top |
|
 |
bcostacurta |
Posted: Mon Jun 18, 2012 5:39 am Post subject: |
|
|
Acolyte
Joined: 10 Dec 2009 Posts: 71 Location: Luxembourg
|
Thanks.
We still have some v6, it seems CONFIGEV is a feature only available from v7.
I suppose there is no solution under v6.
Bye. |
|
Back to top |
|
 |
zpat |
Posted: Mon Jun 18, 2012 5:50 am Post subject: |
|
|
 Jedi Council
Joined: 19 May 2001 Posts: 5866 Location: UK
|
People normally ask questions like that when they don't have proper MQ security on their objects.
Once the queue managers are secured so that only the authorised people can change anything - the need for such events is usually eliminated. |
|
Back to top |
|
 |
bcostacurta |
Posted: Mon Jul 02, 2012 5:52 am Post subject: |
|
|
Acolyte
Joined: 10 Dec 2009 Posts: 71 Location: Luxembourg
|
Hello zpat,
yes you're right.
Indeed at the MQSeries administration dept. we are currently implementing security on the channel type SVRCONN.
However our external client currently still have some mqm level access, and we simply would like to check and monitor any potential creation or modification about MQSeries objects.
Bye,
Bruno |
|
Back to top |
|
 |
zpat |
Posted: Mon Jul 02, 2012 6:05 am Post subject: |
|
|
 Jedi Council
Joined: 19 May 2001 Posts: 5866 Location: UK
|
Short of coding exits, the only way I can think of would be to take a MS03 backup of the MQ configuration each day and compare it to the previous day's version in a cron scheduled simple script.
Better to set up a new group for the application (and a userid of the same name e.g. userid = appone, group = appone).
Set up appropriate MQ access rules for this group - test them out, and then set the external client's svrconn mcauser to this value.
If you need some examples of basic rules for application groups - let me know. |
|
Back to top |
|
 |
Michael Dag |
Posted: Mon Jul 02, 2012 9:29 pm Post subject: |
|
|
 Jedi Knight
Joined: 13 Jun 2002 Posts: 2607 Location: The Netherlands (Amsterdam)
|
|
Back to top |
|
 |
|