Abstract: Methods, systems, and devices are described for managing mainframe events. In the methods, systems, and devices of the present disclosure, at least one mainframe event is received at a mainframe event server module communicatively coupled with a mainframe. The received at least one mainframe event may be converted to an open format. A destination Security Information and Event Management (SIEM) application may be selected for the received at least one mainframe event based on a set of rules, and a format associated with the selected destination SIEM application may be identified. The at least one mainframe event may then be transmitted in the identified format from the mainframe event server module to the selected destination SIEM application.

Abstract: Methods, systems, and devices are described for monitoring and managing mainframe events. In the methods, systems, and devices of the present disclosure, a stream of messages at a mainframe management console may be monitored to detect mainframe events. The mainframe events may be filtered according to at least one predetermined filtering criterion to identify a plurality of selected mainframe events. The selected mainframe events may then be converted from a character encoding specific to the mainframe to a generic character encoding, and routed to at least one destination Security Information Event Manager (SIEM) application.

Abstract: Methods, systems, and devices are described for monitoring and managing mainframe events. In the methods, systems, and devices of the present disclosure, a stream of messages at a mainframe management console may be monitored to detect mainframe events. The mainframe events may be filtered according to at least one predetermined filtering criterion to identify a plurality of selected mainframe events. The selected mainframe events may then be converted from a character encoding specific to the mainframe to a generic character encoding, and routed to at least one destination Security Information Event Manager (SIEM) application.

Abstract: Methods, systems, and devices are described for managing mainframe events based on identified correlation among related events. In the methods, systems, and devices of the present disclosure, a set of events including at least one mainframe event is stored at a data store associated with a mainframe event server module. The set of events is analyzed to identify a correlation among a subset of the stored events according to at least one predefined correlation criterion. A new event is generated based on the identified correlation among the subset of the stored events, and the new event is transmitted to at least one destination Security Information and Event Management (SIEM) application.

Abstract: Methods, systems, and devices are described for managing mainframe events. In the methods, systems, and devices of the present disclosure, at least one mainframe event is received at a mainframe event server module communicatively coupled with a mainframe. The received at least one mainframe event may be converted to an open format. A destination Security Information and Event Management (SIEM) application may be selected for the received at least one mainframe event based on a set of rules, and a format associated with the selected destination SIEM application may be identified. The at least one mainframe event may then be transmitted in the identified format from the mainframe event server module to the selected destination SIEM application.