Document toolboxDocument toolbox

mainframe.ibm

Introduction

The tags beginning with mainframe.ibm identify events generated by an IBM mainframe.

Valid tags and data tables

The full tag must have 4 levels. The first two are fixed as mainframe.ibm. The third level identifies the type of events sent, and the fourth level indicates the event subtype. 

Technology

Brand

Type

Subtype

Technology

Brand

Type

Subtype

mainframe

ibm

  • type80

  • <subtype>

These are the valid tags and corresponding data tables that will receive the parsers' data:

Tag

Data table

Tag

Data table

mainframe.ibm.type80.<subtype>

mainframe.ibm.type80



How is the data sent to Devo?

Logs generated by IBM mainframes are forwarded to Devo using a dedicated collector. Contact us if you need to forward these events to your Devo domain so we can guide you through the process.

Also, a couple of relay rules are needed to define the fourth level of the tag and send the data to the target table. Create the rules using the following values:

Relay rule 1

  • Source Tag → devo.collectors.out

  • Select the Stop Processing checkbox

Relay rule 2

  • Source Message → ([^ ]+).*

  • Target Tag → mainframe.ibm.type80.\M1

  • Select the Stop Processing and Sent without syslog tag checkboxes