Implementing CA Compliance Manager for CA Chorus for Security and Compliance Management › Implement the Data Mart › Unload Data from the Logstream using the Data Mart

Unload Data from the Logstream using the Data Mart

The CMGRDUNL job executes the Data Mart, which unloads selected security event information from the system Logger logstream into the UNLOAD DD data set.

Follow these steps:

1. Edit the CMGRDUNL job in CAI.CEIQJCL0 library.

   Modify the job to conform to your installation standards. Follow the instructions in the Notes and Customization sections of the job to customize the job for your environment.

2. Specify the UNLOAD DD output data that contains the security event information extracted from the system logstream. This data is unloaded in a format for the DB2 Load Utility to load to the Data Mart repository.
3. Specify the ERRREPT DD error report output data set. The Data Mart writes the following information into this file:
   • General information about the event record
   • The reason why the event record is invalid
   • A hexadecimal dump of the event record
4. Specify the STATREPT DD Data Mart statistical report output data set. The Data Mart writes the following information to this file:
   • Statistical summary information about the unload process
   • Errors that caused the Data Mart to terminate before successful completion
5. Specify the MAPDB DD parameter, even if you do not specify the SYSIN DD file POLICYSET input control statement.

   This is the name of the data set that was configured in CA LDAP Server as the CA Compliance Manager event policy database (policy file). The policy file holds the event policy. For more information about how to configure the policy file for use by CA Compliance Manager, see the CA LDAP Server for z/OS Installation Guide. See also Configure CA LDAP Server for z/OS and CA Compliance Manager.

6. Specify the following required SYSIN DD input control statements. These statements select each security event record from the logstream that matches the Data Mart event selection criteria:
   • LOGSTREAM(logstream)
   • SDATE(mm/dd/yyyy|TODAY|TODAY-nnnn)
   • EDATE(mm/dd/yyyy|TODAY|TODAY-nnnn)
7. Specify any other SYSIN DD file input control statements that you require to conform to your site's standards.
8. Submit the job.
9. Check the output of the CMGRDUNL job. Verify that the Data Mart completes successfully.

   The Data Mart returns the following codes for the unload process:

   0 - Indicates that the unload process was successful.

   12 - Indicates that the unload process failed (The Data Mart issues a diagnostic message).

   If the Data Mart encounters an invalid event record, it continues processing the next event record in the logstream without terminating. Before continuing, it reports the invalid record in the ERRREPT DD data set.

   If the CMGRDUNL job fails for any reason, review the error in the STATREPT DD data set, fix the error, and rerun the job until it successfully completes. Otherwise, the UNLOAD DD data set cannot properly be loaded into the DB2 Data Mart repository and the data will not be available for compliance analysis.