Enterasys Security Information and Event Manager, Configuration Manual

Page: 53 / 426

Configuring DSMs
CA Top Secret 37
qextopsloadlib.trs
qextops_trsmain_JCL.txt
Step 3
Load the files onto the IBM mainframe using any terminal emulator file transfer
method.
a
Upload the sample
qextops_trsmain_JCL.txt
and
qextops_jcl.txt
files
using the TEXT protocol.
b
Upload the
qextopsloadlib.trs
file using a BINARY mode transfer. The
qextopsloadlib.trs
file is a tersed file containing the executable (the
mainframe program qextops). When you upload the .trs file from a workstation,
pre-allocate a file on the mainframe with the following DCB attributes:
DSORG=PS, RECFM=FB, LRECL=1024, BLKSIZE=6144. The file transfer
type must be binary and not text.
NOTE
Qextops is a small C mainframe program that reads the output of the TSSUTIL
(EARLOUT data) line by line. Qextops adds a header to each record containing
event information, for example, record descriptor, the date, and time. The program
places each field into the output record, suppresses trailing blank characters, and
delimits each field with the pipe character. This output file is formatted for SIEM
and the blank suppression reduces network traffic to SIEM. This program does
not consume CPU or I/O disk resources.
Step 4
Customize the
qextops_trsmain_JCL.txt
file according to your
installation-specific requirements.
The
qextops_trsmain_JCL.txt
file uses the IBM utility TRSMAIN to extract the
program stored in the
qextopsloadlib.trs
file.
An example of the
qextops_trsmain_JCL.txt
file includes:
//TRSMAIN JOB (yourvalidjobcard),Q1labs,
// MSGCLASS=V
//DEL EXEC PGM=IEFBR14
//D1 DD DISP=(MOD,DELETE),DSN=<yourhlq>.QEXTOPS.TRS
// UNIT=SYSDA,
// SPACE=(CYL,(10,10))
//TRSMAIN EXEC PGM=TRSMAIN,PARM='UNPACK'
//SYSPRINT DD SYSOUT=*,DCB=(LRECL=133,BLKSIZE=12901,RECFM=FBA)
//INFILE DD DISP=SHR,DSN=<yourhlq>.QEXTOPS.TRS
//OUTFILE DD DISP=(NEW,CATLG,DELETE),
// DSN=<yourhlq>.LOAD,
// SPACE=(CYL,(10,10,5),RLSE),UNIT=SYSDA
//
You must update the file with your installation specific information for parameters,
for example, jobcard, data set naming conventions, output destinations, retention
periods, and space requirements.
The .trs input file is an IBM TERSE formatted library and is extracted by running
the JCL, which calls the TRSMAIN. This tersed file, when extracted, creates a PDS
linklib with the
qextops
program as a member.