Running the Report Manually and Using ACFRPTS

Running the Selected Logonid List (SL) › Running the Report Manually and Using ACFRPTS

Running the Report Manually and Using ACFRPTS

This report uses the standard SYSPRINT, SYSIN, and RECxxxxx files. RECxxxxx is only used if you specify INPUT(SMF). See Common Files in “The Reports” chapter for information about these files.

See Running the Reports Manually in “The Reports” chapter for information about running this report manually.

Follow the instructions listed in Running Reports Using the ACFRPTS EXEC to use the ACFRPTS utility to run the Selected Logonid List report. Select the SL option.

Manual and ACFRPTS Parameters

Listed below are the parameters and their defaults used to generate the SL report manually and using ACFRPTS.

DTCFIELD(YES|NO)

This parameter interacts with the REPORT(SHORT) parameter to create a condensed version of the SHORT format.

YES

The DATE, TIME, and CHANGER fields appear on the report

The DATE, TIME, and CHANGER fields do not appear on the report. This parameter is usually used with the SFLDS parameter.

EDATE(169865|cyyddd)

This parameter specifies the Julian date you are using as an ending point for selecting information.

0 to indicate the 20th century or 1 to indicate the 21st century.

The year.

ddd

The day of the year.

When combined with the SDATE parameter, this parameter creates a window for report content. The defaults for SDATE and EDATE processes all available records. The default is 169865, December 31, 2069.

ETIME(2359|hhmm)

This parameter specifies the end of the time interval for selecting SMF records. This time is based on a 24-hour clock. Any SMF records generated after the specified time of day are ignored. The default is 2359.

HEX

This parameter prints selected SMF records in hexadecimal dump format. This option is provided primarily for diagnostic purposes.

If a report generates a hex dump of an SMF record, the dumped record shows a four-byte RDW (two bytes for the record length, followed by two bytes of binary zeros). This is true even when the input file does not have a RDW. This is the internal format of every SMF record that matches the SMF mapping macros. It provides a consistent format for the dump. This information applies to records dumped due to an error in the SMF record and when you specify HEX.

IF(fldopr)

This parameter is formatted similarly to a high-level programming language IF statement and lets you define flexible record selection criteria. See Valid IF Expressions in this chapter for more information about this parameter.

INPUT(SMF|ACF2)

This parameter specifies the type of input to process. The subparameter must be one of the following:

SMF

Input is accepted as CA ACF2 for z/VM logonid modification SMF records

ACF2

Input is accepted as unformatted records from the CA ACF2 for z/VM Logonid database. To use the CA ACF2 for z/VM Logonid database for input, the person executing the report must have the SECURITY, ACCOUNT, or AUDIT logonid attribute. Also, only those logonid records that the person running the report has authority to access are included in the report output.

If you omit this parameter, the report prints a message and immediately terminates ACFRPTSL.

JOBMASK(********|jobmask,...,jobmask)

This parameter specifies the job name to limit records appearing on this report to those pertaining to the job or jobs indicated by the job name or job name mask. You must use commas or blanks to separate multiple job names. The default is all jobs. In VM, this is equal to the virtual machine user ID.

LINECNT(60|nnn)

This parameter specifies the number of output lines printed on a page. CA ACF2 for z/VM report generators that issue multiple line reports check whether a complete report item fits on a page to prevent splitting the information. Only the physical constraints of the output media you are using limits the maximum number of output lines per page. The default is 60.

MASK(-|lidmask)

This parameter lets you request information for one or more logonids. The default is all logonids.

REPORT(SHORT|FULL|NONE)

This parameter specifies the format of the report. The subparameter must be one of the following:

SHORT

This format is a one-line summary consisting of the logonid, name, date, time, and changer (if you specified INPUT SMF). It fits on an 80‑character screen width. The SFLDS parameter can extend this format to include other fields from the logonid record.

FULL

This display format is a replica of the output from the ACF command list subcommand and fits on a 133-character print line.

NONE

This subparameter specifies that you do not want to generate the report.

If you omit this parameter, the report prints a message and immediately terminates ACFRPTSL.

SDATE(000000|cyyddd)

This parameter specifies the Julian date you are using as a starting point for selecting information.

0 to indicate the 20th century or 1 to indicate the 21st century.

The year.

ddd

The day of the year.

The report generator ignores any input SMF records generated before the SDATE value. The default is 000000.

SELECT(smfval|nnn,...,nnn)|NOSELECT

This parameter defines the SMF record number CA ACF2 for z/VM uses. Generally, this parameter is not necessary because the default SMF numbers are usually correct. The SMF record numbers required for a report are the combined SMF record number for every system that produced the SMF data and the precombined SMF record numbers for the CA ACF2 for z/VM SMF record type the report generator processes. Do not specify precombined SMF record numbers for CA ACF2 for z/VM SMF record types that this report does not process.

If this parameter enters any SMF record number, the report generator only processes those SMF records. It does not use the defaults.

Default SMF numbers are determined in the following manner:

If CA ACF2 for z/VM is active or if this is a NOAUTO IPL and you are the NOAUTO UPDATE user, it uses the SMF record numbers specified by the @SMF macro in the ACFFDR. If a precombined SMF record number is specified as zero, then the report generator uses the precombined default. The ACF2 parameter of the @SMF macro in the ACFFDR defines the combined format SMF record number.
If this is a NOAUTO IPL and you are not the NOAUTO UPDATE user, it uses the combined SMF number default of 230. For precombined SMF records, it uses the precombined SMF number default. Refer to the @SMF macro of the ACFFDR in the Installation Guide for these values.

If you are processing z/OS SMF data and use the default SMF record numbers for other types of SMF records on the z/OS system, you must specify the correct SMF number in this parameter.

When processing CA ACF2 for z/VM SMF data on VM, you must specify this parameter if you are running reports during a NOAUTO IPL and you are not the NOAUTO UPDATE user and the SMF record numbers are not the same as the defaults. You also need to specify this parameter if the @SMF macro in the ACFFDR specifies incorrect SMF record numbers.

SFLDS(fldlist)

This parameter is only valid if you specified REPORT(SHORT). The field list contains the external field names (as defined in the ACFFDR @CFDE entries) of the selected logonid record fields to be formatted with the basic short format fields. The fields are formatted in the order specified with headings produced for each field. If you specify too many fields for one line, the report generates multiple lines. If the field list must be continued onto more than one line, use a dash (&mdash.) at the end of the line.

STIME(0000|hhmm)

This parameter specifies the beginning of the time interval for selecting SMF records. This time is based on a 24-hour clock. Any SMF records generated before the specified time of day are ignored. The record selection begins at the STIME specified for each date in the SDATE/EDATE range and ends on each date at the ETIME you specified. The default is 0000.

SYSID(********|sysid)

This parameter specifies the CA ACF2 for z/VM system ID that was active on the system when the SMF records were generated. You can specify a single system ID or a system ID mask. You cannot specify multiple masks or a series of IDs. The default is all systems.

TITLE(cmdparm|string)

This parameter specifies a character string that is added to the other title information at the top of the report. This character string can be up to 35 characters long. If you do not specify this parameter, the report generator uses the first 35 characters in the command parameters. If this character string is longer than 35 characters, it uses the first 35 characters. If you use ACFRPTS or the full-screen feature, you cannot specify command parameters.

UPDATE|NOUPDATE

The UPDATE parameter requests a summary of logonid modifications including any JESx and logonid validation updates. NOUPDATE (the default) lists only nonvalidation updates. NOUPDATE is the default because of the volume of validation updates (one for every job and session). Only use this parameter if you specified INPUT(SMF).

IF Statement Examples

CA ACF2 for z/VM accepts only one IF statement. However you must specify multiple criteria in one statement.

Example 1

Select all logonid records for users whose system access count (ACC-CNT) is greater than 1000 and who are security officers or auditors. Specify the following for the IF statement contents:

IF((ACC-CNT > 1000) AND (SECURITY OR AUDIT))

Example 2

Select all logonid records with the NOSPOOL (Log, Allow, or Prevent) and SYNERR (Log, Allow, or Prevent) privileges. Specify one of the following for the IF statement contents:

IF((NOSPOOL = 'A')
(NOSPOOL = 'L')
(NOSPOOL = 'P')
(SYNERR = 'A')
(SYNERR = 'L')
(SYNERR = 'P'))

Example 3

Specify an IF statement with the NOT symbol. Enclose the statement in two sets of parentheses, as shown below:

IF((NOT CICS))
IF((NOT VM))

Not as shown below:

IF((NOT SECURITY) AND (NOT AUDIT))

All other expressional operators require only one set of parentheses, unless it has multiple conditions like the last example above.