IBM AIX

OverviewResources

Once IBM AIX is configured to deliver events to EventTracker Manager; alerts, dashboards and reports can be configured into EventTracker.

Some of the Knowledge Packs available in EventTracker are listed below. For more information, please refer Integration Guide.

Compliance

Alerts

IBM AIX-Account disabled: This alert is generated when administrator disables the system accounting.

Reports

IBM AIX-Administrator logon activity: This report provides information related to administrator logon activity which include columns When, Computer, Who, Command, Action and Message Details.
IBM AIX-User authentication failed: This report provides information related to user authentication failed activity which include columns When, Computer, Who, Command and Message Details.

Operations

Alerts

IBM AIX-Device removed: This alert is generated when administrator removes the device from the server.
IBM AIX-System rebooted: This alert is generated when administrator reboots the server.

Reports

IBM AIX-Cron activity: This report provides information related to cron activity which include columns When, Computer, Who, Command, Action, Status and Message Details.
IBM AIX-Device management: This report provides information related to device management which include columns When, Computer, Who, Command, Action, Status and Message Details.
IBM AIX-File management: This report provides information related to file management which include columns When, Computer, Who, Command, Action, Status and Message Details.
IBM AIX-File system activity: This report provides information related to file system activity which include columns When, Computer, Who, Command, Action, Status and Message Details.
IBM AIX-Group management: This report provides information related to group management which include columns When, Computer, Who, Command, Action, Status and Message Details.
IBM AIX-Kernel process activity: This report provides information related to kernel process activity which include columns When, Computer, Who, Process Name, Action, Status and Message Details.
IBM AIX-Logical volume management activity: This report provides information related to logical volume activity which include columns When, Computer, Who, Command, Action, Status and Message Details.
IBM AIX-System resource controller: This report provides information related to system resource controller which include columns When, Computer, Who, Command, Action, Status and Message Details.
IBM AIX-User management: This report provides information related to user management which include columns When, Computer, Who, Action, Status and Target Account.

Security

Alerts

IBM AIX-Security role changed: This alert is generated when administrator create, change and remove the security roles.

Reports

IBM AIX-Audit configuration: This report provides information related to audit configuration which include columns When, Computer, Who, Command, Action, Status and Message Details.
IBM AIX-File access control changes: This report provides information related to file access control changes which include columns When, Computer, Who, Command, Action, Status and Message Details.
IBM AIX-Password changed: This report provides information related to password activity which include columns When, Computer, Who, Command, Action, Status and Message Details.
IBM AIX-Security objects audit: This report provides information related to security objects audit which include columns When, Computer, Who, Command, Action, Status and Message Details.

Scope

The configuration details in this guide are consistent with EventTracker Enterprise version 7.X and later,IBM AIX 6.1 and 7.1

Documentation:

For more information please refer the Integration guide