On Fri, Dec 5, 2014 at 7:25 AM, Art Celestini <[email protected]> wrote:

> <vendor pitch>
>
> You might want to take a look at IronStream from Syncsort:
> (http://www.syncsort.com/en/Solutions/Mainframe-Solutions/Ironstream
> It captures SYSLOG/OPERLOG messages in real time and sends them to a
> Splunk server (http://www.splunk.com/) where you can search and report
> based on keyword, message number, etc.  IronStream also supports the
> capture of SMF records in real time, and interprets (converts to JSON
> and translates to ASCII) those records before sending them to Splunk.
> Data can be observed in Splunk within a few seconds of its creation
> on the mainframe.
>
> </vendor pitch>
>

​Ah, no money. Nice to know of it, however.

We actually have code in CA-OPS/MVS which traps some SYSLOG messages
(mostly from CA-7 browse log, via CAGTS) and sends SNMP messages to
SolarWinds' Orion​ (our LAN software for this sort of thing), by using the
CAOPSWTO facility. I have actually used this, in testing only, to send SNMP
traps to my Linux/Intel desktop. Since CA-OPS/MVS uses REXX, I _could_
reformat the "interesting" z/OS SYSLOG messages in order to send them, via
REXX sockets, to a UNIX syslog daemon. Or as I did in my testing, use
CA-OPS/MVS to an SNMP server which could relay to the UNIX syslog daemon.
Combine this with Co:Z to send UNIX commands back over SSH to z/OS and I
could do "weird and wonderful(?)" things. Well, except that I'm not allowed
because z/OS is going away and management wants it "stable" and so "don't
make any changes", possibly because they don't understand what I'm doing.



>
> Art Celestini
> Technology Architect
> SyncSort Inc.
>
>
-- 
The temperature of the aqueous content of an unremittingly ogled
culinary vessel will not achieve 100 degrees on the Celsius scale.

Maranatha! <><
John McKown

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to