3.1.9 Set Administrative Notification Level (NOTIFYLEVEL)

Information

The NOTIFYLEVEL parameter specifies the type of administration notification messages that are written to the administration notification log.

It is recommended that this parameter be set greater than or equal to 3.

A setting of 3, which includes settings 1 & 2, will log all fatal errors, failing services, system integrity, as well as system health.

Rationale:

The system should be monitoring all Health Monitor alarms, warnings, and attentions. This may give an indication of any malicious usage on the Db2 instance.

Solution

Attach to the Db2 instance

db2 => attach to <db2instance>

Run the following command:

db2 => update database manager configuration using notifylevel 3

Default Value:

The default value of NOTIFYLEVEL is 3.

See Also

https://workbench.cisecurity.org/benchmarks/10752

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-2, 800-53|AU-7, 800-53|AU-12, CSCv7|6.2

Plugin: Windows

Control ID: 3808922160d958938639905ca340ff2d712849682e6c70e50a31e485c8f84e82