Command and configuration events

With Advanced Message Security, we can generate command and configuration event messages, which can be logged and serve as a record of policy changes for auditing.

Command and configuration events generated by IBM MQ are messages of the PCF format sent to dedicated queues on the queue manager where the event occurs.

Configuration events messages are sent to the SYSTEM.ADMIN.CONFIG.EVENT queue.

Command events messages are sent to the SYSTEM.ADMIN.COMMAND.EVENT queue.

Events are generated regardless of tools you are using to manage Advanced Message Security security policies.

In Advanced Message Security, there are four types of events generated by different actions on security policies:

• Creating security policies in AMS, which generate two IBM MQ event messages:
  • A configuration event
  • A command event
• Change security policies in AMS, which generates three IBM MQ event messages:
  • A configuration event that contains old security policy values
  • A configuration event that contains new security policy values
  • A command event
• Displaying and dumping security policies in AMS, which generates one IBM MQ event message:
  • A command event
• Removing security policies in AMS, which generates two IBM MQ event messages:
  • A configuration event
  • A command event