Previous Topic: Restarting the CA ACF2 for VM Service MachineNext Topic: Setting the SYSID

Using the ACFSERVE Commands › ACFSERVE Command Syntax › Tracing SAF Events

Tracing SAF Events

The ACFSERVE SECTRACE command creates SECTRACE requests to trace SAF events (RACROUTE requests) that are passed to CA ACF2 for VM by the CA‑ESM component.

The syntax for this command is:

ACFServe SECtrace SET traceid options 
ACFServe SECtrace MODify traceid|ALL options 
ACFServe SECtrace DELete traceid|ALL 
ACFServe SECtrace DISAble traceid|ALL 
ACFServe SECtrace ENable traceid|ALL

The operands for this command are defined below.

traceid

Specifies the eight‑character name for the SECTRACE request. ALL can be specified for the traceid in all SECTRACE subcommands, except for SET, to perform the action on all SECTRACE requests.

Options

For SET and MODIFY, the options are described below. There is an ACFSERVE command limit of seven words after the SET or MODIFY subcommands. If you need to specify more operands, use SET to create the trace request and MODIFY to further define the trace request.

Request REQ|ALL

Specifies the RACROUTE request function to trace or ALL to trace all requests. If the request option is not specified, all requests are traced.

User username|ALL

Specifies the user to trace or ALL to trace all users. If the user option is not specified, all users are traced.

Servmach machineid|ALL

Specifies the service machine to trace or ALL to trace all service machines. This is a service machine that is doing SAF security requests communicated through the CA‑ESM component. If the servmach option is not specified, all machines are traced.

Dest destid

Specifies the destination user that the trace messages are sent to. If the dest option is not specified, the trace messages are sent to the SECTRACE CMD issuer.

Limit limitval

Specifies the maximum number of events to trace. If the limit option is not specified, 100 is the maximum.

RESET

Resets the count of the events for this request to zero, allowing for another set of traces to be done up to the LIMIT value.

For example, to trace all REQUEST=AUTH calls done by the SFSPROD service machine in a trace request called SFSTRACE, issue:

ACFSERVE SECTRACE SET SFSTRACE REQUEST AUTH SERVMACH SFSPROD

To display the existing SECTRACE requests that have already been defined, use the ACFSERVE QUERY SECTRACE command under Displaying SECTRACE Requests.