Sample Report

Running the DIRMAINT Event Log (DL) › Sample Report

Sample Report

This report produces two forms of output, a detailed report and a summary. The next two sections contain samples of each report.

Detailed Output

For clarity in explaining how to read this report, field names are italicized and inserted them (in braces) over each line of the first logging. These field names do not appear in the actual report.

                   {report name}                                {page}

CA ACF2 for z/VM SECURITY - ACFRPTDL DIRMAINT   JOURNAL         - PAGE   1

        {rdate}         {rtime}   {user title}

DATE 06/09/90 (90.161) TIME 11.06 For SVM Group


{lid}       {date}    {time}

TLCMGR   98.095 04/01 08.48  COMMAND   RECORD

{session} {name}                         {uid}

TLCMGR    NAM=John Doe            UID=TLSADTLCMGR

{cpuid}    {source}

4381     SRC=LDEVL013

{dir/cmd}

DIRM/CMD=GET     CAI2R310 NOLOCK

{reason code}

RESPONSE=TO   TLCMGR DVHMAC035I FILE CAI2R310 DIRECT SENT VIA CMS PUNCH
         COMMAND.

TLCCK    98.161 06/09 08.07 COMMAND   RECORD
TLCCK    NAM=CHARLIE KOOK        UID=TLC99TLCCK   0999
4381     SRC=LDEVL030
DIRM/CMD=GET     SPOOLMAN
RESPONSE=TO    TLCCK DVITRV221E Command DIRM GET rejected: you are not
         authorized to use it.
 
TLCCK    98.161 06/09 08.07 COMMAND   RECORD
TLCCK    NAM=CHARLIE KOOK        UID=TLC99TLCCK   0999
4381     SRC=LDEVL030
DIRM/CMD=GET     SPOOLMAN
RESPONSE=TO DIRADEXE DVHSPV268I Backup EXEC (DVHBCK) gave return code 4

{report name}: The name of this report.
{page}: The page number of this page of the report.
{rdate}: The date you produced this report.
{rtime}: The time you produced this report.
{user title}: The subtitle the user specified for this report. If you did not specify a subtitle, this field is blank.
{lid}: The logonid of the user that issued the DIRMAINT command.
{date}: The date the user issued the command.
{time}: The time the user issued the command.
{session}: The name of the VM session.
{name}: The name of the user as taken from the logonid record.
{uid}: The user identification string.
{cpuid}: The CPU ID of the executing CPU.
{source}: The input source the command originated from.
{dir/cmd}: The name of the DIRMAINT command that was specified.
{reason code}: The reason CA ACF2 for z/VM produced the record and the disposition of the access.

CA ACF2 for z/VM also produces a Cross‑Reference Table at the end of the ACFRPTDL Report.

CA ACF2 for z/VM SECURITY - ACFRPTDL DIRMAINT CROSS REFERENCE - PAGE 1 DATE 06/09/90 (90.161) TIME 11.06 For TLC Group INDEX COUNT LID COUNT LID COUNT GET 3 -------------- TLCCCK 2 TLCMGR 1

INDEX: The CP command or diagnose instruction (GET and REPLACE) attempted.
COUNT: The total number of attempts reported on this report.
LID: The logonid of the user making an attempt.
COUNT: The number of attempts the specified user made.
LID: The logonid of the user making an attempt.
COUNT: The number of attempts the specified user made.
JNAME: The VM user ID of the virtual machine where the user was logged on. JOBMASK selects on this field.
LID: The logonid of the user who attempted the action. For group machines, this is the group user. LIDMASK and NLIDMASK select on this field.

Summary Output

CA ACF2 for z/VM SECURITY - ACFRPTDL DIRMAINT JOURNAL - PAGE 1 DATE 04/23/98 (98.113) TIME 09.10 DATE TIME JNAME NAME LOG-TYPE COMMAND 98.111 04/21 00.00 DATAMOVE COMMAND QRY 98.111 04/21 04.45 DIRMAINT COMMAND USER 98.111 04/21 04.45 DIRMAINT COMMAND CHKSUM 98.111 04/21 05.00 DATAMOVE COMMAND QRY 98.111 04/21 17.36 SVMMGR COMMAND ACCOUNT 98.111 04/21 17.39 SVMMGR COMMAND DISTRIB 98.111 04/21 17.41 SVMMGR COMMAND GET 98.111 04/21 17.41 SVMMGR COMMAND REPLAC 98.111 04/21 18.00 DATAMOVE COMMAND QRY 98.112 04/22 04.45 DIRMAINT COMMAND USER 98.112 04/22 04.45 DIRMAINT COMMAND CHKSUM 98.112 04/22 05.00 DATAMOVE COMMAND QRY 98.112 04/22 14.02 QAMGR COMMAND BACKUP 98.112 04/22 14.02 DIRMAINT COMMAND USER 98.112 04/22 14.02 DIRMAINT COMMAND CHKSUM 98.112 04/22 14.06 QAMGR COMMAND AMDISK 98.112 04/22 14.11 QAMGR COMMAND GET 98.112 04/22 14.12 QAMGR COMMAND BACKUP 98.112 04/22 14.12 DIRMAINT COMMAND USER 98.112 04/22 14.12 DIRMAINT COMMAND CHKSUM 98.112 04/22 15.00 DATAMOVE COMMAND QRY 98.112 04/22 20.48 VMOPER CONSOLE OPERATOR COMMAND USER 98.112 04/22 21.00 DATAMOVE COMMAND QRY

DATE: The date (in Gregorian and Julian format) the user tried the CP command or diagnose request.
TIME: The time the user attempted the CP command or diagnose request (in a 24‑hour clock format).
JNAME: The VM user ID of the virtual machine the user was logged onto. For group machines, this is the group ID.
NAME: The name of the user, as taken from the logonid record.
LOG‑TYPE: The type of security record that was formatted, COMMAND or DIAGNOSE.
COMMAND: The specific command name that the user tried to execute.

There is also a cross‑reference portion at the end of the summary output of the ACFRPTDL report.

CA ACF2 for z/VM SECURITY - ACFRPTDL DIRMAINT CROSS REFERENCE - PAGE 1 DATE 04/23/98 (98.113) TIME 09.10 INDEX COUNT LID COUNT LID COUNT ACCOUNT 4 -------------- TLCMGR 4 AMDISK 8 -------------- TLCMGR 8 BACKUP 16 -------------- TLCMGR 16 CHKSUM 4 -------------- DIRMAINT 4 DISTRIB 2 -------------- TLCMGR 2 GET 3 -------------- TLCMGR 1 TLCMGR 2 QRY 168 -------------- DATAMOVE 168 REPLACE 5 -------------- TLCMGR 5 USER 5 -------------- DIRMAINT 4 VMOPER 1

See Detailed Output for information about reading the cross‑reference portion of the ACFRPTDL report.