SMF records are assigned record numbers that uniquely identify the type of system activity recorded. For example, SMF record 00 represents a system IPL, and SMF record 26 represents a JES2 job purge. See the Common IBM-Defined SMF Record Types section earlier in this chapter for a description of each SMF record type. This information is also available from the IBM z/OS SPL: System Management Facility manual.
SMF records journal many types of events that occur on the system. They can also indicate whether data center standards are followed. In addition, most access control software applications create audit trails using SMF.
Use the SMF Search Criteria option to display specific SMF records. CA Auditor searches the LPA list and the linklist to verify SMF record formats with CAIPVI. It then displays common fields that are present in a number of these records, such as job name and data set name. For more information on CAIPVI, the CA Product Validation Interface, see the Usage Guide.
This option searches for specific types of SMF records by date and time. You can also select SMF records related to specific jobs, programs, or data sets. For example, you can select job initiation and termination statistics by entering a specific job name or mask. SMF records related to a particular job can show job initiation and termination statistics.
To use this option, enter your selection criteria. After you enter your criteria, the SMF Scan screen shows you all of the selected records. This screen is shown in the SMF Scan Display section later in this chapter.
To interrupt the SMF Search Criteria screen, press PA1.
| Copyright © 2009 CA. All rights reserved. | Tell Technical Publications how we can improve this information |