Previous Topic: Running the Report Manually and Using ACFRPTSNext Topic: Running the Logonid Modification Report (LL)


Sample Report

This report generates two types of output, a detailed report and an access report. Samples of each are presented below.

Detailed Report

If you specified a detail filename with the default filename, this report is located in the file IXDETAIL LISTING A.

CA ACF2 for z/VM SECURITY - ACFRPTIX - ACCESS INDEX DETAIL REPORT - PAGE 1 DATE 06/09/98 (98.161) TIME 11.17 PREFIX(********) * RULE MAINT STORED BY MAINT ON 98.070 (03/10) 17.05 *. ACFDCM556I ACCESS rule MAINT stored by MAINT on 03/10/98-12:05 $KEY(MAINT) V0100.VOLUME UID(TLCM6) READ(A) WRITE(A) EXEC(A) V019D.- UID(*) READ(A) EXEC(A) V0191.VOLUME UID(TLCBATCH) READ(A) EXEC(A) V0191.- UID(TLCLOG1) READ(A) EXEC(A) V0191.- UID(RAD) READ(A) EXEC(A) V0490.- UID(*) READ(A) EXEC(A) *. ACFDCM551I Total record length=990 bytes - 24 percent utilized CA ACF2 for z/VM SECURITY - ACFRPTIX - ACCESS INDEX DETAIL REPORT - PAGE 2 DATE 06/09/98 (98.161) TIME 11.17 PREFIX(********) * RULE RAD STORED BY MAINT ON 98.070 (03/10) 17.05 *. ACFDCM556I ACCESS rule RAD stored by MAINT on 03/10/98-12:05 $KEY(RAD) V0191.VOLUME UID(RAD) READ(A) WRITE(A) EXEC(A) V0191.- UID(RAD) PGM(SIO) READ(A) WRITE(A) EXEC(A) V0191.- UID(RAD) READ(A) WRITE(A) EXEC(A) *. ACFDCM551I Total record length=154 bytes - 3 percent utilized

This report lists an access rule. The first line of the report reflects the report name and the page number of this page of the report. The second line reflects the date (in Gregorian and Julian formats), the time (in 24‑hour clock format), and the prefix (if you defined one) for this access rule.

The third and fourth lines are comment lines. The third line reflects the $KEY value of the access rule (RULE MAINT), who last stored the rule (STORED BY MAINT), the date it was stored (ON 95.070 (03/10)), and the time it was stored (17.05). The fourth line is a message line that repeats the information presented in the third line, but in a different format.

The last line of the first reporting is a comment line that reflects the size of the access rule set.

Access Report

If you specified a report filename with the default filename, this report is located in the file IXREPORT LISTING A.

CA ACF2 for z/VM SECURITY - ACFRPTIX - ACCESS INDEX REPORT - PAGE 1 DATE 06/09/98 (98.161) TIME 11.17 PREFIX(********) DATE TIME TYPE KEY CHANGER JOBNAME CHANGE CPU DET 98.070 03/10 12.15 LID MAINT TLCMAINT ________ CHANGE XATE 98.070 03/10 12.15 LID RAD TLCMAINT ________ CHANGE XATE ACFRIX811I All data processed

This report is a summary of access rule sets that matched the search criteria. The fields of this report are described below:

DATE

The date the update was made (in Julian and Gregorian formats). The Gregorian format is mm/dd or dd/mm, depending on the options defined in the VMO OPTS record.

TIME

The time of the update.

TYPE

The type of record for this access report. Valid records types are:

LID

CA ACF2 for z/VM found a logonid record with a prefix that matches the search prefix.

RULE

An access rule matched the search argument.

KEY

The logonid or key of the access rule set.

CHANGER

The logonid of the user who attempted the action. For group machines, this is the group user.

JOBNAME

The VM user ID of the virtual machine where the user was logged on. For group machines, this is the group ID. JOBMASK selects on this field. If you process SMF records from an OS/390 system under VM, this field displays the name of the job stream running at the time of the change. For a TSO session, this field is usually the same as the user's logonid.

CHANGE

The type of update performed. For logonids:

INSERT

A new record was inserted.

CHANGE

An existing record was changed.

This report does not list DELETE and UPDATE changes.

For access rules:

INSERT

A new record was inserted.

REPLACE

An old record was replaced.

DELETE

An access rule set was deleted.

CPU

The ID of the VM CPU used to issue the request. CA ACF2 for z/VM only uses the first four characters of the eight‑character CPUID name.

DET

The page number of the IXDETAIL report where the decompiled listing appears.