Why is the Cross-Enterprise APM Agent (CE-APM) not reporting any DB2 metrics?

Document ID : KB000008862
Last Modified Date : 14/02/2018
Show Technical Document Details
Issue:

I have all of the necessary setup procedures in place with the correct information in the CE-APM properties file along with the correct setup in the XNET STC and IDB2 STC to facilitate successful communication between all of the necessary components, but I am not getting DB2 metrics passed back to the CE-APM agent via Sysview for DB2 for z/OS (IDB2).  What could be impacting this process?

Cause:

Review of the IDB2 Data Collector job output reveals the following messages that are reiterated over and over again in the log:

DBG44032I DI1A 15:38:12 USER SESSION CONNECTED: CEAPM-SYSVDB2 
DBG44033I DI1A 15:38:12 USER 468496 -GUSERS SECURITY BLOCK COMMAND CONNECT 
DBG82001I DI1A 15:38:12 NUAGTDSP - RETURN CODE FROM NUINSUB = 36 FOR REQUEST DSQPARMS ELAPSED
DBG44031I DI1A 15:38:12 USER SESSION DISCONNECTED: CEAPM-SYSVDB2

These messages are occurring because the ID associated with the CE-APM connection to XNET and IDB2 (468496) is not passing the IDB2 Security file check, thus preventing the ID from obtaining data.

 

 

Resolution:

The ID in question, 468496, is failing IDB2's security check. The addition of the following line in the Security file resolves this. 

Under the line:              (TYPE=USER,$-Z9999999,*,SYSADM),      /*EVERYONE IS SYSADM 

add:                             (TYPE=USER,468496,*,SYSADM)             /*CE-APM ID IS SYSADM 

Once the line has been added to the IDB2 Security file, refresh it by either issuing the 'SECURITY' command in IDB2 or by bouncing the IDB2 Data Collector.