The @SMF macro specifies SMF processing options, SMF record number performance, and integrity options. You can format SMF record numbers into reports with the CA ACF2 for z/VM report generators. See the Reports and Utilities Guide for information about SMF records. Do not change SMF record numbers after installation. Do not specify an SMF record number greater than 255.
If you are upgrading from a previous CA ACF2 for z/VM release, do not use the numbers defined in the PSWD, DSN, LID, RULE, INFO, RSRC, ACFSERVE, CMDLIM, and DIRM operands to write SMF records. CA ACF2 for z/VM post‑release 3.0 systems writes all SMF records using the number specified in the ACF2= operand.
For detailed information on the SMF options, refer to the explanations of each operand on the following pages. You must specify one @SMF macro per ACFFDR. This macro is required. You must maintain it.
The syntax of the @SMF macro is:
@SMF DESTID=MAINT|userid, DESTINATION ID DUMP|NOTIFY
TIME=(00:00|t1,...,t16), AUTOMATIC SWITCH TOD LIST
SWITCH=DUMP|NOTIFY, DUMP|NOTIFY AT FILE SWITCH
DISKLST=(200,201,202|cuu,...,cuu), LIST OF SMF DISKS
CHECKPT=20, UPDATE HEADER EVERY N WRITES
TIMER=15, UPDATE HEADER EVERY N MINUTES
MAXQUE=10, MAX QUEUED BLOCKIO WRITES
PRIOR=NO|YES, SMF WRITE HIGH PRIORITY
DUMPINT=1|nnn|FILE, SMF DUMP PUNCH INTERVAL
SMFID=string|null, COMBINED SMF RECORD
PSWD=0|nnn, (Default was 220 for pre‑3.3 releases)
DSN=0|nnn, (Default was 221 for pre‑3.3 releases)
LID=0|nnn, (Default was 222 for pre‑3.3 releases)
RULE=0|nnn, (Default was 223 for pre‑3.3 releases)
INFO=0|nnn, (Default was 226 for pre‑3.3 releases)
RSRC=0|nnn, (Default was 227 for pre‑3.3 releases)
ACFSERVE=0|nnn, (Default was 229 for pre‑3.3 releases)
CMDLIM=0|nnn, (Default was 231 for pre‑3.3 releases)
DIRM=0|nnn, (Default was 232 for pre‑3.3 releases)
ACF2=230|nnn, COMBINED SMF RECORD
LASTPRM=YES CHECK SYNTAX
Specifies a valid VM user ID set up to receive SMF data or notification that an SMF file is ready to process. CA ACF2 for z/VM sends data to this ID in SENDFILE format. The SWITCH operand of this macro determines if the DESTID receives an entire SMF file or a notification file.
MAINT
Specifies MAINT is the user ID that receives SMF data or notification. This is the default value for this operand.
userid
Specifies a site‑defined virtual machine designated to receive SMF data.
Specifies the times of day that CA ACF2 for z/VM automatically initiates an SMF switch. You can specify up to sixteen time of day values in 24‑hour format. Separate these times with commas.
00:00
Specifies that SMF files are switched automatically at the first SMF write request after midnight. This is the default value for this operand. Specifying only TIME=00:00 prevents an automatic switch at any other time.
t1,...,t16
Specifies a site‑defined time. You can specify up to 16 time of day values for this operand. Separate these times with commas.
SMF also switches automatically at midnight if you do not indicate you want to close out the day's activity. You must reload the ACFFDR to make this change effective. See the Administrator Guide for information on reloading the ACFFDR.
Specifies the disposition of SWITCH processing of a SMF file. The SMF SWITCH occurs at file full time, automatically (specified in the TIME= operand) or through the following command:
ACFSERVE SWITCH SMF
Specifies that CA ACF2 for z/VM sends a SMF dump file to the DESTID when it switches SMF files. DUMP is the default.
NOTIFY
Specifies that CA ACF2 for z/VM sends a notification file to the DESTID when it switches SMF files. Using the NOTIFY option improves the throughput of the CA‑ACF2 service machine when there are a large number of SMF records. For information regarding the format of the NOTIFY file and processing of SMF data, see the Report and Utilties Guide.
Specifies a list of minidisk addresses for recording SMF data. You must CMS reserve these minidisks. This list is a circular chain that allows rotation between listed multiple disks. The more minidisks listed, the greater the amount of historical datan CA ACF2 for z/VM maintains. If CA ACF2 for z/VM cannot find the minidisk or a device error occurs, it issues an error message and tries to use the next minidisk in the list.
200,201,202
Specifies that CA ACF2 for z/VM records SMF data on the CA‑ACF2 service machine 200, 201, and 202 minidisks. This is the default value.
cuu,...,cuu
Specifies that CA ACF2 for z/VM records SMF data using site‑defined minidisk addresses. You can specify a maximum of 32 minidisks. You must specify at least two minidisks, but we recommend you specify three. Designate one disk as the active disk, where CA ACF2 for z/VM is currently recording data. CA ACF2 for z/VM reserves any other disks listed for historical SMF data, unless otherwise specified. Disk address 191 is not valid. See the Administrator Guide for additional information about historical SMF disks.
Specifies the number of SMF data blocks CA ACF2 for z/VM writes between each update of the SMF header block. This header block contains checkpoint information, such as the block number of the last data block written. You can specify any number from 0 to 255. The default value is 20. This operand applies only when you specify the PRIOR=NO value; it does not apply when you specify PRIOR=YES. This option affects the performance of your system.
Specifies the maximum amount of time between each update of the SMF header block and write of the current SMF block. This operand ensures CA ACF2 for z/VM only writes SMF records when the system is not busy. Specify the time interval in minutes, from 0 to 255. The default value is 15. This operand applies only when you specify the PRIOR=NO value; it does not apply when you specify PRIOR=YES. This option affects the performance of your system.
Specifies the maximum number of outstanding SMF write requests CA ACF2 for z/VM can queue at any time. When it reaches MAXQUE, SMF writes records through CMS I/O until the BLOCKIO requests are below MAXQUE. You can specify any number from 0 to 255. The default value is 10. This operand applies only when you specify the PRIOR=NO value; it does not apply when you specify PRIOR=YES. This option affects the performance of your system.
Specifies whether to give SMF recording priority over all other CA ACF2 for z/VM activity. If you change the setting of PRIOR while the CA‑ACF2 service machine is active, you must restart the service machine to activate the change.
NO
Specifies SMF recording does not have priority. If you specify NO, SMF records through BLOCKIO. NO is the default.
YES
Writes all SMF I/O through CMS I/O. Recording SMF data has the highest priority. It also restricts the number of SMF records queued up for processing, eliminating the loss of audit data in the event of a system failure. When you specify PRIOR=YES, there may be a decrease in throughput of CA ACF2 for z/VM validations, especially if SMF is creating large numbers of records. All sites running in a C2 configuration must run CA ACF2 for z/VM with this value set to YES.
Specifies the number of SMF records punched in one interval by SMF DUMP processing. Specifying a low number maximizes CA‑ACF2 service machine throughput, but increases the amount of time needed to perform the dump. A high number reduces throughput, but decreases the amount of time needed to perform the dump. If you set SWITCH=NOTIFY in this macro, this operand does not apply.
1
Punches one SMF record in one interval.
nnn
Specifies a site‑defined value (up to 255) for the number of punches of SMF records in one interval.
FILE
Punches an entire SMF file in a single interval. In a PRIORITY DUMP situation, it punches the entire SMF file in a single interval.
Defines a four‑character string that CA ACF2 for z/VM inserts in all SMF records it writes. You can use this in multi‑CPU environments to identify the specific CPU CA ACF2 for z/VM wrote the record for. The specified string appears on most standard CA ACF2 for z/VM reports. The default is NULL. If you specify NULL, the first four characters of the System_Identifier_Default value from the SYSTEM CONFIG file is used. If a value is not specified for System_Identifier_Default, the first four characters of the HCPSYS SYSID macro DEFAULT= operand is used for the SMFID. You must reload the FDR to make this change effective.
Important! If you are upgrading from a pre‑3.3 release, CA ACF2 for z/VM automatically accepts and processes SMF data for those records. If you specify 0 (the default) for the PSWD, DSN, LID, RULE, INFO, RSRC, ACFSERVE, CMDLIM, and DIRM operands, pre‑release 3.3 CA ACF2 for z/VM uses the default. You must specify a number here only if you did not use the pre‑release 3.3 defaults.
If you are installing CA ACF2 for z/VM for the first time, use the default of zero (0) for these operands.
Specifies the SMF record number CA ACF2 for z/VM uses to log password violations and other system logon events. See the Caution! in the SMFID=string|null operand for information about specifying this operand. The default value for this operand is 0.
Specifies the SMF record number CA ACF2 for z/VM uses to log or deny access to a minidisk, CMS file, DOS file accessed through CMS, or OS data set. See the Caution! in the SMFID=string|null operand for information about specifying this operand. The default value for this operand is 0. You must reload the FDR to make this change effective.
Specifies the SMF record number CA ACF2 for z/VM uses to process a request to insert, delete, or change a logonid record. See the Caution! in the SMFID=string|null operand for information about on specifying this operand. The default value for this operand is 0.
Specifies the SMF record number CA ACF2 for z/VM uses to process a request to store, change, or delete an access rule. See the Caution! above for information about specifying this operand. The default value for this operand is 0.
Specifies the SMF record number CA ACF2 for z/VM uses for the Infostorage database updates, including information change journal records. See the Caution! in the SMFID=string|null operand for information about specifying this operand. The default value for this operand is 0.
Specifies the SMF record number CA ACF2 for z/VM uses for resource database updates, including resource journal records. See the Caution! in the SMFID=string|null operand for information about specifying this operand. The default value for this operand is 0.
Specifies the SMF record number CA ACF2 for z/VM uses for ACFSERVE command tracking, including the ACFSERVE command journal records. See the Caution! in the SMFID=string|null operand for information about specifying this operand. The default value for this operand is 0.
Specifies the SMF record number CA ACF2 for z/VM uses for command limiting violations, including command and diagnose limiting journal records. See the Caution! in the SMFID=string|null operand for information about specifying this operand. The default value for this operand is 0.
Specifies the SMF record number CA ACF2 for z/VM uses for DirMaint violations. See the Important! in the SMFID=string|null operand for information about specifying this operand. The default value for this operand is 0.
Defines the SMF record number selected for CA ACF2 for z/VM use. CA ACF2 for z/VM uses this number to write all security‑related logging records. This includes password violations, denied system access loggings, trace records, data set and program loggings, resource loggings, rule modification journal records, and infostorage and logonid modification journal records. The default is 230.
Checks syntax for additional positional parms, missing commas, or parenthesis. When a syntax error occurs, CA ACF2 for z/VM displays an error message. This operand is required and must always be the last operand of the @SMF macro.
Although the @SMF macro includes the DISKFUL and FILEFUL operands, they are obsolete. They remain in this macro for compatibility only. Using these operands results in the following warning Mnote (macro note):
Parameter obsolete ignored
The following ACF subcommand displays the record numbers and the various configuration options SMF recording uses:
SHOW SMF
The following command notifies the CA‑ACF2 service machine that CA ACF2 for z/VM processed an SMF file in unloading status and it is ready to be flagged as a history file:
ACFSERVE ARCHIVE SMF
The following command tells the CA‑ACF2 service machine to switch SMF disks:
ACFSERVE SWITCH SMF
The following command forces an SMF checkpoint:
ACFSERVE CKPT SMF
The following command displays the SMF minidisk addresses and status of SMF files:
ACFSERVE QUERY SMF
The following command reloads the ACFFDR:
ACFSERVE RELOAD
|
Copyright © 2013 CA Technologies.
All rights reserved.
|
|