CEM Problem with creating an event base alert for datasets sending an email.

Products

• Compliance Event Manager

Issue/Introduction

 

Compliance Event Manager

Created an objectvio policy statement with an email being set against the datasets .
Thousands of emails were issued within mintues.

This is the condition created

Condition  = ENTITY=*"CON." || ENTITY=*"CONTEST." || ENTITY!="C
             ON.DIRECT.DBA" && ENTITY!="CON.DIRECT.ADMIN" && EN
             TITY!="CON.DIRECT.OPER" && CLASS="DATASET"

Environment

z/os

Cause

The issue was because of no PARENDS

Resolution

Change

Condition  = ENTITY=*"CON." || ENTITY=*"CONTEST." || ENTITY!="CON.DIRECT.DBA" && ENTITY!="CON.DIRECT.ADMIN" && ENTITY!="CON.DIRECT.OPER" && CLASS="DATASET"

To
Condition  = ENTITY=*"CON." || ENTITY=*"CONTEST."  && ( ENTITY!="CON.DIRECT.DBA" && ENTITY!="CON.DIRECT.ADMIN" && ENTITY!="CON.DIRECT.OPER" ) && CLASS="DATASET"