Halcyon and IBM i Services

I opened a request with Halcyon asking how to tie in the SQL stuff with IBM i Services into their stuff to send out alerts. Waited a day and got back very detailed instructions. Kudo's to them.

On the example I was using I was taking the netstat_job_info and if there were more than x number of connections from the same remote IP address on port 23 to alert me. I can forward this PDF on.
I would think you could use it for all sorts of stuff, such as sending out alerts on critical minimum balance items. No programming needed.

Basically we had a runaway PC with thousands of connections bringing our main production lpar down to it's knees. Awesome denial of service attack. Start enough tasks and bust QMAXACTLVL and base pool (system pool 2) is dead in the water. Same device name and everything so playing tricks with QAUTOCFG or QAUTOVRT is an exercise in futility. Same device name, same remote IP address, same job name, same local IP address, same local port of 23-telnet, but multiple remote ports. Old IBM client access. VM instances so they're dragging their feet on upgrading the instances to iACS.

Of course, lately I'm playing whack-a-mole with denial of service on our main production lpar. Normally it's add another thousand to QMAXACTLVL then try to figure out who was the culprit this time. I would really like to go a week without it crippling us.
Strongly recommend that if you are at IBM i 7.4 you have performance collection constantly running and have the latest version of MGTOOLS on your system.
https://www.ibm.com/support/pages/mustgather-how-obtain-and-install-qmgtools-and-keep-it-current

Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com