Previous Topic: EXAMMON and Baseline Historical Analysis

Next Topic: Invoking CA Auditor

EXAMMON and SMF Log Streams

Because EXAMMON is required when recording SMF records in log streams, a TSO or batch user running CA Auditor must be authorized to communicate with the EXAMMON address space.

The TSO or batch user must have read access to the protected SAF resource, as follows:

CLASS=CAEXAMIN
ENTITY=EXAMMON.IFAQUERY

More information:

EXAMMON and External Security