Rulebooks

Rulebooks transform Ansible from a task-execution tool into a reactive automation platform that responds intelligently to your infrastructure’s needs in real-time.

Rulebooks run continuously via ansible-rulebook CLI, listening for events and executing actions when conditions match.

Rulebooks transform Ansible from a task-execution tool into a reactive automation platform that responds intelligently to your infrastructure’s needs in real-time.

Different rulebooks are as follows:

• 1101_logon_by_unknown_user - Monitor zSecure alerts from Kafka for logon by an unknown user
• 1103_superuser_logon- Monitor zSecure alerts from Kafka for logon of a user with uid(0)
• 1107_1108_group_auth_status - Monitor zSecure Alerts from Kafka for Group Authority Change
• 1111_invalid_password_limit_exceeded - Monitor zSecure alerts from Kafka for password threshold exceeded alert
• 1212_access_read_data_set - Monitor zSecure alerts from Kafka for access >= READ on a sensitive dataset
• 1213_access_update_data_set - Monitor zSecure alerts from Kafka for access >= UPDATE on a sensitive dataset
• 1607_SMF_Flood_Alert - Monitor zSecure alerts from Kafka for SMF Record Flood alert