When the Illumio file is successfully imported, a message is sent to the QJRNOPR message queue and an email is sent to all of the Assure Security administrators defined in WRKQJAUT.
If an error occurs in an Illumio job, an alert is sent by email to the Assure Security administrators once per the interval defined in the Alert suppression interval parameter of the CFGILOSRV command.
The success message and alerts are written to the SAM log. Run the DSPQXLOG command to display the log entries. Press F4 on the Point field to display the valid points. Select the ILLUMIO pseudo point to filter the entries to display only the ones related to Illumio.
Alerts are sent in the following situations:
| Alert | Solution |
|---|---|
| Workload name not found | The ACL file has 2 sections, inbound and outbound rules. Each section starts with a comment containing the workload/IBM i system name. Download an ACL file manually from the Illumio policy compute engine (PCE) and validate that the workload name matches the setting in CFGILOSRV. Ensure that the Illumio workload name is in uppercase. |
| Workload inbound rules not found | The ACL file has 2 sections, inbound and outbound rules. Each section starts with a comment containing the workload/IBM i system name. Download an ACL file manually from the Illumio PCE and validate that the workload name matches the setting in CFGILOSRV in the inbound section’s comment. Ensure that the Illumio workload name is in uppercase. |
| Workload outbound rules not found | The ACL file has 2 sections, inbound and outbound rules. Each section starts with a comment containing the workload/IBM i system name. Download an ACL file manually from the Illumio PCE and validate that the workload name matches the setting in CFGILOSRV in the outbound section’s comment. Ensure that the Illumio workload name is in uppercase. |
| Incorrect rule input data | Consult with the Illumio administrator to determine if the Illumio and Assure Security software versions are up to date. Download the ACL file manually from the Illumio PCE and confirm that the file contents are correct. Note: This error is raised by the ADDQJLCN command.
|
| REST API connection error | Validate that the API server name or IP address, API server port, API key auth. username and API key secret settings in CFGILOSRV are correct. |
| Log transfer connection error | Validate that the Syslog server name or IP, Syslog server port and Syslog server protocol settings in CFGILOSRV are correct. |
| Retrieved ACL files contain errors | Find detailed messages in the service job log and continue to troubleshoot with the Illumio administrator. |
| Error while decrypting the API key | Update the API key in CFGILOSRV. |
| Error while encrypting the API key | Update the API key in CFGILOSRV. |
| Format of the downloaded ACL file is invalid | Consult with the Illumio administrator to determine if the Illumio and Assure Security software versions are up to date. Download an ACL file manually from the Illumio PCE and confirm that the file is in the correct format. |
| No ACL file available for download | Get Device timeout expired. Solution: Try to download an ACL file manually from the Illumio PCE. |
| General error | Review the service job log and troubleshoot the specific system errors. Note: This is an unexpected error logged by the error handling procedure.
|