Mainframe Event Acquisition System™ (MEAS™) is designed to help clients collect, in real-time, information pertaining to security events, database related events, transaction processing events and more. The technology enables mainframe clients the ability to collect, store, report and take action against the data through integration with SIEM (Security Information and Event Management) technologies including Splunk, IBM, CA, Symantec, ArcSight, Dell, RSA, McAfee and LogRhythm.
Clients can initiate the appropriate action in response to mainframe events to report them via the SIEM technologies and can email or text message the appropriate users to ensure policy-based security compliance of mainframe events.
MEAS™ listens for events on the mainframe within each LPAR, selecting only those required by the client. When a desired event is detected, MEAS™ will capture the event details, convert the data to expose the event to the SIEM technology in use by the customer. Additionally, MEAS™ will write and keep a history of events in a SQL database that can be used to execute queries against, perform event correlation and send additional events to the SIEM software for action.
By having real-time access to your mainframe events, you can better react to situations that require your attention. No more running batch jobs to search through SMF data and having to wait 24 hours before you know something occurred. With MEAS™, you will know about and be able to respond to events that could have a negative impact on your security and compliance requirements.