Important Updates to Cybersecurity Software

HelpSystems is updating the names of our cybersecurity software, including the Powertech product line. Don’t worry—the functionality of your products won’t change.

See the new names here > New, Simpler Names for HelpSystems Security Software.

--------------------

QSYSMSG is an optional, user-created message queue that receives, and can be used to handle, various serious and critical messages. 

The system sends some messages to the QSYSMSG message queue instead of QSYSOPR. It also sends certain messages to QSYSMSG, to QSYSOPR, or to both QSYSMSG and QSYSOPR.  

Use this document only if QSYSMSG exists and if Robot Console is monitoring this message queue.

If Robot Console is not monitoring the QSYSMSG message queue, you do not need to refer to this document. 

Robot Console must be at R05M16 or later to use the following setup.   

  1. Create the QSYS/QSYSMSG message queue.

    CRTMSGQ MSGQ(QSYS/QSYSMSG) MSGQFULL(*WRAP) TEXT('Critical Messages Monitored by Robot/Console')

    Add RBTUSER to have *CHANGE authority to QSYS/QSYSMSG so Robot/Console can retrieve messages from the QSYSMSG queue

  2. Setup Console to monitor for QSYSMSG message queue.

    RBO

    Option 5 - Console

    Option 6 - System Setup Menu

    Option 2 - Message Queue Maintenance

    F6 = Add Record

    Start List at Message Queue - QSYSMSG (press enter)

    1=Select next to QSYSMSG

    On the 'Message Queue to Monitor Entry' panel, enter the following: Description - QSYSMSG queue

    Direct all Messages to Message Center - QSYSOPR (or whatever message center the messages should be redirected to).

    Press enter to save the changes to the QSYSMSG queue

    Press F12 to return to the Message Queue Maintenance panel

    Activate QSYSMSG queue, taking option 4 (Start Monitoring Messages)

  3. Create QSYS/QSYSMSG2 message queue for Console to re-queue the messages, allowing SIEM Agent for IBM i to retrieve the messages.

    CRTMSGQ MSGQ(QSYS/QSYSMSG2) TEXT('Critical Messages - Monitored by SIEM Agent for IBM i')

  4. Create Message Set in Console to re-queue the message to QSYSMSG2

    RBO

    Option 5 - Console

    Option 2 - Message Set Menu

    Option 1 - Maintain Message Sets

    F6 = Add Record

    On the 'Monitor Message Instructions' panel, enter the following:

    Message Group - *NONE

    Message Set Name - QSYSMSG

    Description - Send QSYSMSG MSG to QSYSMSG2

    Message Queue Name - QSYSMSG
    Library - QSYS

    Message Set Type - select 'All Messages'

    Message File - QCPFMSG
    Library - QSYS

    Enter a '1' next to 'Always do this message set'

    F10 = Next Option

    F10 = Next Option (nothing needed on 'Extended Set Information' panel)

    On the 'Operator Assistance Language' panel, enter:

    Operation - CALLCP

    Operation Values - RBCMSGTOQ

    Press enter to save changes

  5. Return to 'Maintain Message Sets' menu (press F12 multiple times to return to previous panels).

    Activate the Message Set - QSYSMSG

    Option 10 - Hold/Release SET (notice - verify that the status displayed is 'RLS')

  6. Add QSYSMSG2 message queue to the RBTCONLIB/RBCMSGTOQD data area for the OPAL program 'RBCMSGTOQ' to route the messages to:

    CHGDTAARA DTAARA(RBTCONLIB/RBCMSGTOQD (1 20)) VALUE('QSYSMSG2  QSYS      ')

  7. Setup SIEM Agent for IBM i to send message to SYSLOG server.

    WRKPTIA

    Option 1 - Work with Brokers/Agents

    Option 2 = Change next to Syslog Server

    Message Queue to Monitor - QSYSMSG2
    Library - QSYS

    Syslog Server Location - Enter IP address for the Syslog Server

    Press enter to save changes

    F12 = Close Window

  8. Change the 'Critical Priority' on the message by selecting Option 7 - Syslog Server

    Note - Messages with Critical Priority of '0' are not sent to the Syslog Server
    Note - Change message CPF1397 to have a value greater than 0, for testing in next step

  9. Use message CPF1397, send Test Message in Robot Console to verify setup is done properly in both Robot Console and Powertech SIEM Agent for IBM i.

    RBO

    Option 5 - Console

    Option 2 - Message Set Menu

    Option 2 - Test Message Sets

    Select '1' - QSYS/CPFMSG

    Start List at: Message ID - enter CPF1397

    Option 2 = Test Message Data List

    F6 = Add Test Message Data

    This can be done by listing the message – submit the command:

    (F21) System command

    Example:
    WRKMSGD MSGID(CPF1397)

    Option 5 = Display details

    Option 1 = Display Message Text
    Here you will note where to put the test data

    Example:
    Message . . . . : Subsystem &1 varied off work station &3 for user &8.

    (Note - You now know positions and type of Data 1 (&1) SUBSYSTEM, 3 (&3) Work Station, and 8 (&8) User)

    Enter Test Data and press enter to save changes.

  10. Verify message is in QSYS server.

 


Still have questions? We can help. Submit a case to Technical Support.

Last Modified On: November 07, 2018