IBM Db2
TMA-DB2-3.1.3
Set Diagnostic Logging to Capture Errors and Warnings (DIAGLEVEL)
中等級 1自動化db2
說明
The DIAGLEVEL parameter specifies the type of diagnostic errors that will be recorded in the db2diag.log file. It is recommended that the DIAGLEVEL parameter be set to at least 3. DIAGLEVEL must be 3 or higher. Run as the instance owner (or with sqllib/db2profile sourced) so the db2 CLP reads this instance's configuration.
檢查方式
稽核方法: Shell 指令
shell
out=$(db2 get dbm cfg 2>/dev/null) || exit 1; printf '%s\n' "$out" | awk '{ if (match($0, /\([A-Z0-9_]+\) *=/)) { k = substr($0, RSTART + 1, RLENGTH); sub(/\).*/, "", k); v = $0; sub(/^[^=]*=/, "", v); gsub(/[ \t]/, "", v); c[k] = v } } END { if (c["DIAGLEVEL"] != "" && c["DIAGLEVEL"] + 0 >= 3) print "compliant"; else print "noncompliant: " c["DIAGLEVEL"] }'- 預期輸出
compliant
修補方式
修補方法: 操作指南或基礎設施修補檔
1. Attach to the Db2 instance db2 => attach to <db2instance> 2. Run the following command: db2 => update database manager configuration using diaglevel 3
屬性
- 作業系統
- 不限
- 標籤
- db2databaselogging
- 參考資料
- CIS IBM Db2 12.1 Benchmark v1.0.0 - 3.1.3 Set Diagnostic Logging to Capture Errors and Warnings (DIAGLEVEL)
檢查此主機
請在您有權稽核的機器上執行此指令。掃描為唯讀操作。
shell
tmaegis scan --target db2