FUJ00176340
FUJ00176340
Peak Incident Management System
Call Reference PC0290571 Call Logger Ifran Khan -- Security Ops
IReleace Targeted At -- HNG-X Top Ref AUDIT_SERVER INITIAL _SETUP_V2_2116 D009-
21.16 D008
Call Type Live Incidents Priority B -- Business restricted
Contact Tfran Khan Call Status Closed -- Advice and guidance given
Target Date 24/09/2020 ee 100
Days)
Summary ARQ HSS323 POIAS854B Events FAD: 214907
All References Type Value
Jira POA-3169
Release PEAK PC0291891
Product Baseline AUDIT_SERVER_INITIAL_SETUP_V2_2116_D009-D008
Call reference PCO162602
Product Baseline AUDIT SERVER INITIAL _SETUP_V2_2116_V009-V008
Jira POA-3170
Work Instruction WI2144R
Product Baseline AUDIT SERVER INITIAL SETUP_V2_ 2116 V009
Collections I Name User Date
BIFApproved Adam Harney 30-Sep-2020 10:18:40
Impact
Si cues : User Date
Gerald Barnes 28-Sep-2020 10:19:29
Some transaction data is missing from PARC201 only. It is present on PARC202. Therefore we only have
one copy of the data. It is proposed to store the missing data on PARC201 too. It is proposed that the audit
servers have a generic share for storing data from ad hoc situations like this and a record of such occasions
is kept in DEV/INF/ION/0001.
Progress Narrative
fDatc:21-Sep-2020 14:06:59 Uscr:ifran Khan
LL PCO290571 opened
entered are:-
summary:ARQ HSS323 POIAS854B Events FAD: 214907
call Type:L
call Priority:
lfarget Release:HNG-X Rel. Ind.
outed to:Security Ops - Ifran Khan
oate:21-Sep-2020 14:06:59 Uscr:ifran Khan
[Start of Response]
could you please check the attached ARQ. THe ARQ has "Filtering Failed" and the quer haler log states 303 Gaps. implications?
[End of Response]
lkesponse code to call Live Incidents/Defects(L) as Incident Under Investigation (40)
jbate:21-Sep-2020 14:09:02 User:ifran Khan
evidence Added
Screenshot of filtering failed
jbate:21-Sep-2020 14:09:22 User:Ifran Khan
lnvidence Added ~
jbate:21-Sep-2020 14:09:34 User:Ifran Khan
Defect cause updated to 40: General — User
Date: 21-Sep-2020 14:09:52 User:Ifran Khan
[the Call record has been transferred to the team: Audit-Dev
[the Call record has been assigned to the Team Member: Gerald Barnes
FUJ00176340
FUJ00176340
jDate:21-Sep-2020 16:29:29 Uscr:Gerald Barnes
Reference Added: ©. PCo162602
Date:21-Sep-2020 16:29:59 User:Gerald Barnes
{Start of Response]
[his is a known issue - see PC0162602.
{End of Response]
response code to call type Las Category 40 -- Pending -- Incident Under Investigation
Date: 22-Sep-2020 15:32:34 User:Gerald Barnes
[Start of Response]
KEL gbar402R produced to help find this problem more easily in the future.
[End of Response]
lkesponse code to call type L as Category 40 -- Pending -- Incident Under Investigation
Date:23-Sep-2020 11:52:41 User:Gerald Barnes
[Start of Response]
I have saved the m
lof these missing transactions.
{End of Response]
ssing transactions using query OTH3493W. We need to get these saved on }IRRELEVANT!so that we have two copies
kesponse code to call type L as Category 40 -- Pending -- Incident Under Investigation
Date:28-Sep-2020 10:16:32 Uscr:Gerald Barnes
lproduct HNG-X Platforms -- Audit Server (ARC) (version:¥2) added.
Jbate:28-Sep-2020 10:19:29 User:Gerald Barnes
lA new Business Impact has been adde
Some transaction data is missing from PARC201 only. It is present on PARC202. Therefore we only have one copy of the data. It is
raposed to store the missing data on PARC201 too. It is proposed that the audit servers have a generic share for storing data
from ad hoc situations like this and a record of such occasions is kept in DEV/INF/ION/0001.
bate:28-Sep-2020 10:19:54 User:Gerald Barnes
[fhe call Target Release has been moved to Proposed For -- HNG-X 21.16
Date:28-Sep-2020 10:37:03 Uscr:Gerald Barnes
Development Cost updated: new cost is 1 (Man Days)
[Start of Response]
DEVELOPMENT IMPACT OF FIX:
SPECIFY THE HNG-X PLATFORMS IMPACTED:
the platform is specified and it is the audit server.
[TECHNICAL SUMMARY:
tt is proposed to create a new folder D:\MiscellaneousArchives with full permissions to AUDIT ESTATE shared as MiscArcs to be
sed to store any one off archives in the future.
LIST OF KNOWN DIMENSIONS DESIGN PARTS AFFECTED BY THE CHANGE:
\UDTT_ SERVER APP V2
\UDIT SERVER INITIAL SETUP V2
DEPENDENCIES:
there are no dependencies.
DEPLOYMENT DETATL:
lsest deployed when the schedules are stopped.
DEV EFFORT IN MANDAYS:
HMPACT ON USER:
jo user impact.
KMPACT. ON OPERATIONS:
tt will make it easier to store one off archives in the future.
RAVE RELEVANT DOR UPDATED?
KEL gbar402R has been produced to cover this incident.
IMPACT ON TEST:
FUJ00176340
FUJ00176340
prop a file on the new MiscellaneousArchives folder and confirm that the next day it can be retrieved by the audit client.
confirm that it gets deleted two days after it is gathered.
RISKS (of releasing and of not releasing proposed fix):
there is little risk. New audit configuration points are regularly added.
LIS? OF LIKELY DELIVERABLES:
configurationFile.txt for PARC201 and PARC202
configurationFileDR.txt for PARC202
lA handover not requesting the new share be set up.
[End of Response]
Response code to call type L as Category 55 -- Pending -- Live Fix Impact Supplied
Date:28-Sep-2020 10:37:51 User:Gerald Barnes
ction placed on Team:BIF
ldate:30-Sep-2020 10:18:49 Uscr:Adam Harney
IBIF approved as per BIF meeting on 30/09/2020
lDate:30-Sep-2020 10:18:52 User:Adam Harney
ction has been removed from the call
JDate:30-Sep-2020 10:54:04 Uscr:Gerald Barnes
It suggest this is put in the 21.16 audit maintenance release.
Date: 30-Sep-2020 10:54:51 Uscr:Gerald Barnes
Action placed on Team: PTF
JDate:01-Oct-2020 10:12:39 User:Adam Harney
the call Target Release has been moved to Targeted At -- HNG-X 21.16
Date:01-Oct-2020 10:12:52 Uscr:Adam Harney
lfargeted at 21.16 as per PIF meeting 01/10/2020
jDate:01-Oct-2020 10:12:56 User:Adam Harney
Action has been removed from the call
jDate:02-Oct-2020 12:59:11
Reference Adde:
ser:Gerald Barnes
: Jira POA-3169
Date:02-Oct-2020 12:59:59 Uscr:Gerald Barnes
[Start of Response]
Poa-3169 is for those parts of the change that can be code reviewed.
[End of Response]
response code to call type L as Category 40 —- Pending -- Incident Under Investigation
Hours spent since call received: 2 hours
JDate:02-Oct-2020 13:01:25 User:Gerald Barnes
Ineference Added: Jira POA-3170
pate: 02-Oct-2020 1:
[Start of Response]
PoA-3170 Is for those parts of the change that cannot be crucible code reviewed.
2:23 Uscr:Gerald Barnes
[End of Response]
Response code to call type L as Category 40 -- Pending -- Incident Under Investigation
Hours spent since call received: 2 hours
Date:20-Oct-2020 1
lreference Added: Product Baseline AUDIT SERVER INITIAL SE
TUP_V2_2116 VO009
FUJ00176340
FUJ00176340
[bate:20-Oct-2020 18:00:00 User:Dimensions Automated User
lkeference Added: Product Baseline AUDIT. SERVER INITIAL SETUP V2_2116 v009-vo08
Date:21-Oct-2020 10:30:07 User:Gerald Barnes
[Start of Response]
Fixed by AUDIT SERVER INITIAL SETUP v2 2116 v009-vo08.
[End of Response]
Response code to call type L as Category 46 -~ Pending -- Product Error Fixed
Hours spent since call received: 4 hours
Date:21-Oct-2020 10:30:22 User:Gerald Barnes
Defect cause updated to 14: Development — Code
Dat e:21-Oct-2020 10:30:31 User:Gerald Barnes
[the Call record has been transferred to the team: Dev-Int-Rel
Dat e:21-Oct-2020 17:35:01 User nsions Automated User
Reference Added: Product Baseline AUDIT SERVER INITIAL SETUP_V2_2116_D009-D008
Jbate:21-Oct-2020 1
[Start of Response]
ssigning Peak to PIT Automated User
[End of Response}
Response code to call type L as Category 40 (Incident Under Investigation)
[fhe incident has been transferred to the Team: Dev-Int-Rel
[fhe incident has been assigned to the Team Member: PIT Automated User
7:51 User:PIT Automated User
bate:23-Oct-2020 09:58:13 User:PIT Automated User
[Start of Response]
Peak 0290571 handled by integration auto handler
[the following baselines attached to this peak have the targeting flags set:
IAUDIT SERVER INITIAL SETUP V2_2116_D009-D008 FOR (LIVE:YES TEST:YES RDT:YES) Integrator: Swadesh Sureshkumar
[these baselines have completed integration testing, moving to holding stack awaiting peak ejection.
[End of Response]
lkesponse code to call type L as Category 47 (Fix Processed by PIT)
the incident has been transferred to the Team: Int-Rel
fhe incident has been assigned to the Team Member: Olu Peters
bate:10-Nov-2020 13:21:15 User:Olu Peters
the Call record has been transferred to the team: Live Supp.Test
Joate:12-Nov-2020 16:28:37 User:Mark Ascott
fhe Call record has been assigned to the Team Member: Timothy Harris
lDate:03-Dec-2020 1.
Reference Added: Rele
JDate:19-Jan-2021 16:08:42 Uscr:Timothy Harris
tested successfully as suggested by Development as follows:
lan AUDGZ file from another ARQ folder was copied to D:/MiscellaneousArchives folder on ARC201 07/01/21.
jote that the same AUDGZ file was copied to the MiscellaneousArchives folder previously 18/12/2020 and was transferred to the
audit (Audit Point) MiscArcs (Subpoint) share and automatically deleted from the MiscellaneousArchives folder 8 days later (by
lesign) .
laited a day for the latest AUDGZ file on MiscellaneousArchives folder (07/01/21) to be transferred to the Audit (Audit Point)
land MiscArcs (Subpoint) share.
Jan ARQ was then executed towards Audit and MiscArcs (Audit Point and Subpoint) with date range 17/12/2020 to 08/01/2021 to pick
lup the AUDGZ files that had been copied to the MicellaneousArchives folder on 18/12/20 and 07/01/21 previously.
lhe 2 files were successfully picked up by the ARQ OTH31439B.
t filtering using ABSTRACT? option and search string ?2JSN (which was in the AUDGZ) file Filteredhx was obtained in the ARO
folder under QUERY _AT/FINAL. This contained instances of the JSN string searched.
Evidence files added.
jDate:19-Jan-2021 16:10:12 User:Timothy Harris
FUJ00176340
FUJ00176340
Joate:19-dan-2021
evidence Added —
[Date:19-Jan-2021
Ievidence Added - E
56 Uscr:fimothy Harris
thx for ARQ OTH31439B
Date:19-Jan-2021 16:13:50 User: Timothy Harris
Returning to Release to Live for closure.
jDate:19-an-2021 16:14:33 Uscr:Timothy Harris
fhe Call record has been transferred to the team: RM-x
jDate:19-Jan-2021 16:14:47 Uscr:Timothy Harris
(fhe Call record has been assigned to the Team Member: Release to Live
Date:01-Feb-2021 09:42:10 User:Adam Harney
[Start of Response]
Applied to Live 29/01/2021
{End of Response]
Response code to call type L as Category 60 -- Final -- S/W Fix Available to Call Logger
lkouting to Call Logger following Final Progress update.
JDate:01-Feb-2021 11:55:26 User:ifran Khan
[Start of Response]
closing as per above comments
[End of Response]
Response code to call type 1 as Category 94 -- Final -- Advice and guidance given
outing to Call Logger following Final Progress update.
joate:01-Feb-2021 11:55:49 User:ifran Khan
CALL PC0290571 closed: Category 94 Type L
Root Cause Development - Code
Logger Ifran Khan -- Security Ops
Subject Product General/Other/Misc -- ACE (version unspecified)
Assignee Ifran Khan -- Security Ops
Last Progress 01-Feb-2021 11:55 -- Ifran Khan