Transaction Surveillance Configuration Examples

BASE24 Example

[TRANSACTION-LOG-LOCATION-0]
SOURCE-NAME = Base24
LOG-FILE-LOCATION=$DATA01.BASE24:JLF1
SOURCE-TYPE = BASE24
LOG-READER-EXE-NAME = irb24tlr
TYPE = ATM
FILENAME-PREFIX=TL

FLD1 = STRING(18,19)
FLD3 = TOKEN("03",STRING(0,6))
FLD5 = TOKEN("24",INT(0))

[TRANSACTION-DETAILS]
NUMBER-OF-TRANSACTIONS = 18000

[RECOVERY]
RECOVERY-FILES-SUBVOL=$DATA01.RCVRY
MAX-BACK-TIME-IN-MINUTES = 1
MAX-TPS-ON-RECOVERY = 200

[HOUSE-KEEPING]
INTERVAL-IN-MINUTES = 5
AFTER-TRANSACTIONS = 10000
TRAWLER-MAX-IDLE-TIME-IN-MINUTES =5

[BIN-LENGTH]
LEN=6

[PAN]
SHOW = (6,4)

[TRANSACTION-EXCEPTION-RULE-0]
NAME = HIGHVAL
KEEP = 24 HOURS
WHERE1 = AMT1 > 300 and SOURCE = "ATM" and MSGCLASS = "A" and
WHERE2 = (( APPSRC <> "Base24" and TRANCODE = "01" ) or
WHERE3 =  ( APPSRC = "Base24" and TRANCODE = "10" and
WHERE4 =    ( ORIGFROM = "1" or ORIGFROM = "2" )))
OCCURRENCE = 3 TIMES WITHIN 5 MINUTES
OCCURRENCE-MATCH = TERMID

BASE24-eps Example

[TRANSACTION-LOG-LOCATION-0]
SOURCE-NAME = B24EPS
LOG-FILE-LOCATION=$DATA01.EPS1:JLF1
SOURCE-TYPE = OTHER
LOG-READER-EXE-NAME = irepstlr
CUSTOM-PARAMETER-0=TIMEOUT=2

FLD1 = TOKEN(2109,STRING(52,4))
FLD3 = TOKEN(2101,int64(0))
FLD5 = TOKEN(2101,int32(8))

[TRANSACTION-DETAILS]
NUMBER-OF-TRANSACTIONS = 18000

[RECOVERY]
RECOVERY-FILES-SUBVOL=$DATA01.RCVRY
MAX-BACK-TIME-IN-MINUTES = 1
MAX-TPS-ON-RECOVERY = 200

[HOUSE-KEEPING]
INTERVAL-IN-MINUTES = 5
AFTER-TRANSACTIONS = 10000
TRAWLER-MAX-IDLE-TIME-IN-MINUTES =5

[BIN-LENGTH]
LEN=6

[PAN]
SHOW = (6,3)

[TRANSACTION-EXCEPTION-RULE-0]
NAME = HIGHVAL
KEEP = 24 HOURS
WHERE1 = AMT1 > 199 and SOURCE = "ATM" and MSGCLASS = "A" and
WHERE2 = (( APPSRC <> "Base24" and TRANCODE = "01" ) or
WHERE3 =  ( APPSRC = "Base24" and TRANCODE = "10" and
WHERE4 =    ( ORIGFROM = "1" or ORIGFROM = "2" )))
OCCURRENCE = 2 TIMES WITHIN 5  MINUTES
OCCURRENCE-MATCH = TERMID

Connex Example

[TRANSACTION-LOG-LOCATION-0]
SOURCE-NAME=Source1
LOG-FILE-LOCATION=$vol1.subvol1:TransLog
SOURCE-TYPE = Connex
LOG-READER-EXE-NAME = ircnxtlr
FLD1 = STRING(18,19)
FLD2 = TOKEN("03",STRING(0,6))
FLD3 = TOKEN("24",INT(0))

[TCPIP]
TCPIP-PORT=1970

[TRANSACTION-DETAILS]
NUMBER-OF-TRANSACTIONS=18000

[PAN]
SHOW = (6,3)

[RECOVERY]
RECOVERY-FILES-SUBVOL=$vol1.subvol1

[HOUSE-KEEPING]
INTERVAL-IN-MINUTES=5
AFTER-TRANSACTIONS=10000
TRAWLER-MAX-IDLE-TIME-IN-MINUTES=5

[TRANSACTION-EXCEPTION-RULE-0]
NAME = HIGHVAL
KEEP = 24 HOURS
WHERE1 = AMT1 > 499 and TYPE = ATM and MSGCLASS = "A" and
WHERE2 = TRANSDESC = "Withdrawal"
OCCURRENCE = 10 TIMES WITHIN 5 MINUTES
OCCURRENCE-MATCH = TERMID

IST/Switch Example

[TRANSACTION-LOG-LOCATION-0]
SOURCE-NAME=Source1
LOG-FILE-LOCATION=ORCL102
SOURCE-TYPE=Other
LOG-READER-EXE-NAME=iristtlr
CUSTOM-PARAMETER=SCHEMA=scott

[TCPIP]
TCPIP-PORT=1970

[TRANSACTION-DETAILS]
NUMBER-OF-TRANSACTIONS=18000

[PAN]
SHOW = (6,3)

[RECOVERY]
RECOVERY-FILES-LOCATION=/Prognosis/Server/IST

[HOUSE-KEEPING]
INTERVAL-IN-MINUTES=5
AFTER-TRANSACTIONS=10000
TRAWLER-MAX-IDLE-TIME-IN-MINUTES=5

[TRANSACTION-EXCEPTION-RULE-0]
NAME = HIGHVAL
KEEP = 24 HOURS
WHERE1 = AMT1 > 499 and TYPE = ATM and MSGCLASS = "A" and
WHERE2 = TRANSDESC = "Withdrawal"
OCCURRENCE = 10 TIMES WITHIN 5 MINUTES
OCCURRENCE-MATCH = TERMID

Postilion Example

[TRANSACTION-LOG-LOCATION-0]
SOURCE-NAME=Source1
LOG-FILE-LOCATION=8990
SOURCE-TYPE = Other
LOG-READER-EXE-NAME = irpostlr
MODE = PRIMARY

[TCPIP]
TCPIP-PORT=1970

[TRANSACTION-DETAILS]
NUMBER-OF-TRANSACTIONS=18000

[PAN]
SHOW = (6,3)

[RECOVERY]
RECOVERY-FILES-SUBVOL=$vol1.subvol1

[HOUSE-KEEPING]
INTERVAL-IN-MINUTES=5
AFTER-TRANSACTIONS=10000
TRAWLER-MAX-IDLE-TIME-IN-MINUTES=5

[TRANSACTION-EXCEPTION-RULE-0]
NAME = HIGHVAL
KEEP = 24 HOURS
WHERE1 = AMT1 > 499 and TYPE = ATM and MSGCLASS = "A" and
WHERE2 = TRANSDESC = "Withdrawal"
OCCURRENCE = 10 TIMES WITHIN 5 MINUTES
OCCURRENCE-MATCH = TERMID
Provide feedback on this article