3.1.15 Set administrative notification level

Information

The notifylevel parameter specifies the type of administration notification messages that are written to the administration notification log. It is recommended that this parameter be set greater than or equal to 3. A setting of 3, which includes settings 1 and 2, will log all fatal errors, failing services, system integrity, as well as system health.

The system should be monitoring all Health Monitor alarms, warnings, and attentions. This may give an indication of any malicious usage on the DB2 instance.

Solution

1. Attach to the DB2 instance.
db2 => attach to $DB2INSTANCE
2. Run the following command from the DB2 command window:
db2 => update database manager configuration using notifylevel 3
Default Value:
The default value for the notifylevel parameter is 3.

See Also

https://workbench.cisecurity.org/files/1654

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-12c.

Plugin: IBM_DB2DB

Control ID: 15b02d66f2b33f93685bb1507ed5475eeaca3d9ab3c029bf2a552176fbb92ed4