System monitoring is an essential component of IT security because it helps keep track of the performance and availability of IT infrastructure, as well as detect and troubleshoot issues that may affect the security of the network and applications. Monitoring is often required by IT security, insurance and regulatory frameworks.
With data collected from security journal, history logs, message queues and system values iEventMonitor provides simple and powerful monitoring of all aspects of the IBM i operating system. Use this data to configure alerts with sophisticated routing and escalation rules. Alerts are sent to email, SIEM feeds and SMS. When the optional web portal is installed, alerts are sent with a link to respond the messages remotely.
| Alerting & Reporting | |
| Intelligent Routing | Route alerts by message ID, user or job name. Includes, user configurable escalation and suppression rules |
| Send alerts via SMTP | |
| SMS | Send mobile alerts via SMTP or optional native SMS with included Twilio integration |
| SIEM | Send alerts to enterprise SIEM platforms |
| Centralized Reporting | Aggregate alerts from multiple LPARs into one central reporting node |
| Centralized Alerting | Setup alerting rules for multiple LPARs from one central reporting node |
| Automations | |
| Remote Responder | Respond to messages remotely using an integrated web portal |
| Custom Exit Programs | User exit programs to automate handling of watch tasks |
| System Watches | |
| Device watch | Alert when a specified device is not in a usable state |
| Database file monitor | Watch IBM i database files for selected events like record adds, changes, deletes and more |
| Job Queue Watch | Job queue exceeds a configurable threshold |
| Job Name Watch | Monitor job start and end events |
| Output Queue Watch | Alert when unprocessed spool files exceed a user defined threshold |
| Problem Log Watch | Alert when operating system adds a new entry to the system problem log |
| IBM i License Monitor | Alerts when an IBM licensed product is set to expire |
| IBM i PTF Monitor | Alerts for new or defective PTFs from IBM |
| IBM i Firmware Monitor | Alerts for new firmware updates from IBM |
| Receiver Watch | Alert when journal receiver count or storage exceeds limits |
| HA/DR Replication Monitor | Real time alerts for iCluster journal replication or configuration errors |
| Heartbeat Monitor | Send alerts on schedule to indicate monitoring status |
| Performance Monitors | |
| ASP% Disc Space Watch | Periodically checks ASP % and send alert when it changes by a configurable rate |
| Temp Storage Watch | Alert when temporary storage exceeds a user-defined limit |
| Data Queue Watch | Alert when a data queue exceeds a user-defined limit |
| Job Table Watch | Alert when when the number of jobs is approaching the system-defined limit |
| Lock-Wait Watch | Watch for Lock Wait status (LCKW) for a specified job and user profile according to a configurable interval |
| Mutex-Wait Watch | Watch for Mutex Wait status (MTXW) for a specified job and user profile according to a configurable interval |
| Thread-Wait Watch | Watch for Thread Wait status (THDW) for a specified job and user profile according to a configurable interval |
| System Utilization Monitor | Monitor CPU utilization for interactive subsystems |
| Network Watches | |
| Connection Watch | Periodically test connection to specified remote system. Includes optional exit program for full customization and automation. |
| Network Location Watch | A configurable network location is not working or is reporting lost packets or other interuptions |
| Security Monitors | |
| System Security Audit Monitor |
Track security journals and system values: AD - Auditing changes AF -Authority failures AX - Row/Column Access CD - Command line use CP - User profile changes DO - Deleted objects DS - DST password reset EV - Environment variables OW - Obj Ownership changes PS - Profile swaps PW - Invalid passwords SK - Secure socket connections SO - Security actions ST - Service tools use SV - System value changes |
| Digital Certificate Expiration | An installed certificate in DCM will expire within a configurable timeframe |
| User Profile Activity Watch | Track user profile activity in interactive sessions |
| Privileged User Watch | Log and alert for interactive logons from any powreful profile |
| User Profile Expiration Watch | A user profile will expire withing a configurable timeframe |
| Custom Monitors | |
| Message Queue Monitor | Configure a watch for any message queue. Includes optional exit program for full customization and automation. Respond to messages remotely via optional responder web portal. |
| Watch For Specific Messages | Set watches for specific message IDs arriving at any message queue or in the System History Log. Includes optional exit program for full customization and automation. |
iEventMonitor includes a full implementation of Kisco's Bluescape web UI - at no additional cost. All application functions are available in the web version and the 5250 interface.
Product Information:
> Product Details
> Frequently Asked Questions
Technical Support:
> Enhancements + Features
> Problem Reports
> Email Configuration
> HTTPS Browser Security
> Release Upgrade Instructions
> PTF Instructions
Related Products:
> SafeNet/i
> iSecMap
> iFileAudit
More IBM i Security:
> Kisco U
