LO68070: UNABLE TO CHANGE SEVERITY AND TYPE FOR SOME DDM EVENTS
Closed as duplicate of another APAR.
For certain DDM events such as the following: "ID for 'user x' (IP Adress 192.1.x.x) in vault 'O=testvault' was not downloaded because the wrong password was supplied. Error" The default severity for this event is Failure and the type is Security:Access. However because there is not an event document for this event, it is not possible to modify the event severity or the event type. This can be problematic because this is a very common ID Vault alert and so if an Admin has designated an event handler to handle all alerts of type Failure by writing the information to Statrep or broadcasting a message via email, this will cause an excessive amount of data to be written to statrep and many emails sent out. With other events, the severity and type can be modified so as to filter such events from being handled by an event handler. With this specific event however, this is not possible since there does not appear to be an event document associated with this specific event. Although an Admin may choose to filter out Events of type Failure, this can be risky as he can potentially not catch legitimate events of type Failure.
Filter out events of type Failure.
This APAR is associated with SPR# MKHS8SDUFF. The record was closed as a duplicate. This APAR is a duplicate of LO43601
Reported component name
Reported component ID
Last modified date
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following: