So you have event management technology in place to help you address and mitigate incidents as they occur, whether from your distributed servers, network devices, or other endpoints, but no way to incorporate your mainframe into that solution…well now you do.
Mainframe Event Acquisition System™ (MEAS™) is designed to help clients collect, in real-time, information pertaining to security events, database-related events, transaction processing events, and more. The technology enables mainframe clients the ability to collect, store, report, and take action against the data through integration with SIEM (Security Information and Event Management) technologies including Splunk, IBM, CA, Symantec, ArcSight, Dell, RSA, McAfee, and LogRhythm.
Clients can initiate the appropriate action in response to mainframe events to report them via the SIEM technologies and can email or text message the appropriate users to ensure policy-based security compliance of mainframe events.
MEAS™ listens for events on the mainframe within each LPAR, selecting only those required by the client. When the desired event is detected, MEAS™ will capture the event details, convert the data to expose the event to the SIEM technology in use by the customer. Additionally, MEAS™ will write and keep a history of events in a SQL database that can be used to execute queries against, perform event correlation, and send additional events to the SIEM software for action.
By having real-time access to your mainframe events, you can better react to situations that require your attention. No more running batch jobs to search through SMF data and having to wait 24 hours before you know something occurred. With MEAS™, you will know about and be able to respond to events that could have a negative impact on your security and compliance requirements.
