Set Diagnostic Logging to Capture Errors and Warnings (DIAGLEVEL)

MediaNivel 1Automatizadadb2

Descripción

The DIAGLEVEL parameter specifies the type of diagnostic errors that will be recorded in the db2diag.log file. It is recommended that the DIAGLEVEL parameter be set to at least 3. DIAGLEVEL must be 3 or higher. Run as the instance owner (or with sqllib/db2profile sourced) so the db2 CLP reads this instance's configuration.

Cómo se verifica

Método de auditoría: Comando de shell

shell

out=$(db2 get dbm cfg 2>/dev/null) || exit 1; printf '%s\n' "$out" | awk '{ if (match($0, /\([A-Z0-9_]+\) *=/)) { k = substr($0, RSTART + 1, RLENGTH); sub(/\).*/, "", k); v = $0; sub(/^[^=]*=/, "", v); gsub(/[ \t]/, "", v); c[k] = v } } END { if (c["DIAGLEVEL"] != "" && c["DIAGLEVEL"] + 0 >= 3) print "compliant"; else print "noncompliant: " c["DIAGLEVEL"] }'

Salida esperada: compliant

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

1. Attach to the Db2 instance db2 => attach to <db2instance> 2. Run the following command: db2 => update database manager configuration using diaglevel 3

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: db2databaselogging
Referencia: CIS IBM Db2 12.1 Benchmark v1.0.0 - 3.1.3 Set Diagnostic Logging to Capture Errors and Warnings (DIAGLEVEL)

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target db2