PH56368: FILTERING OF EVENT MAY FAIL IF POLICY RULE INCLUDES AN OBJECT FILTER SCHEMA.TABLE SPECIFIED FOR TABLE MIGRATED FROM DB2 V7

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• It is possible, in rare situations, the filtering of an event
  will fail resulting in the event not being captured. This
  situation may occur if the table specified in the policy has
  been migrated from Db2 V7
  

Local fix

• Modify the schema filter to include the wildcard '%' character
  at the end of the filter value. For example, if the object
  filter string is '%/SC1.TABLE1' modify the string to
  '%/SC1%.TABLE1
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users of IBM Security Guardium S-TAP for     *
  *                 Db2 on z/OS.                                 *
  ****************************************************************
  * PROBLEM DESCRIPTION: It is possible, in rare situations,     *
  *                      the filtering of an event will fail     *
  *                      resulting in the event not being        *
  *                      captured. This situation may occur if   *
  *                      the table specified in the policy has   *
  *                      been migrated from Db2 V7.              *
  ****************************************************************
  * RECOMMENDATION: Apply the PTF.                               *
  ****************************************************************
  Filtering of event may fail if policy rule includes an object
  filter schema.table specified for table migrated from Db2 V7.
  

Problem conclusion

• Filtering will tolerate Db2 migration.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI93582 UI93583

Modules/Macros

• ADHGEDML
  

Fix information

• Fixed component name

  SEC GUAR STAP D

• Fixed component ID

  5655STP00

Applicable component levels

• RA13 PSY UI93583

     UP23/09/19 P F309

• RB30 PSY UI93582

     UP23/09/19 P F309

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.