Previous Topic: 00007: Unauthorized Use of Program by TSO User

Next Topic: 00055: Excessive Number of User Logons per Hour

00050: Excessive Use of TSO Command per Hour


FILE              TSO User Command Counts File
SAS FILE NAME     DETAIL.TSOTSC01
SOURCE LOCATION   sharedprefix.MICS.SOURCE(DYTSOEXC)

SEVERITY          Warning              (SEVERITY='W')
MANAGEMENT AREA   Productivity  (MGMTAREA='PRODUCTIVITY')

PURPOSE      Identifies users who have exceeded the
             installation defined limits for the number of
             selected commands issued per hour.

RATIONALE    Five commands (SEND, STATUS, HELP SPF TUTORIAL,
             and TIME) can cause this exception.  The
             rationale for each command is given below.

             A) The TSO SEND command is used to broadcast
                messages from one user to another, or from a
                user to the operator.  This command should
                not be issued excessively in a short period
                of time under normal circumstances.
                Excessive use may indicate unproductive users
                or superfluous activity between several
                time-sharing parties.

             B) The TSO STATUS command is used to determine
                if a batch job has completed.  This command
                should not be issued excessively in a short
                period of time under normal circumstances.
                Excessive use may indicate unproductive
                users.  The NOTIFY option may be used to
                signal a user when a job is completed.

             C) The TSO HELP command is used to find
                information about TSO or specific TSO
                commands.  This command should not be issued
                excessively in a short period of time under
                normal circumstances.  Excessive use may
                indicate users who are unfamiliar with TSO.
                These users may require training before they
                can use TSO productively.

             D) The TSO SPF TUTORIAL command is used to find
                information about SPF or specific SPF
                commands.  This command should not be issued
                excessively in a short period of time under
                normal circumstances.  Excessive use may
                indicate users who are unfamiliar with SPF.
                These users may require training before they
                can use SPF productively.

             E) The TSO TIME command is used to display the
                time, CPU time, and session time.  This
                command should not be issued excessively in a
                short period of time under normal
                circumstances.  Excessive use may indicate
                unproductive TSO users.

DEFINITION   This exception is detected when an individual
             userid's use of the specified commands per hour
             exceeds the installation specified maximum
             hourly limit.

EXCEPTION    The SAS statements identifying the exception
STATEMENTS   situation and describing the condition are
             stored in the source member named in SOURCE
             LOCATION and are described below:

************************************************************;
*
** 00050
** EXCESSIVE USE OF TSO COMMAND PER HOUR
*;
IF  (COMMAND='SEND' AND TSCCOUNT > use-count )
 OR (COMMAND='STATUS' AND TSCCOUNT > use-count )
 OR (COMMAND='HELP' AND TSCCOUNT > use-count )
 OR (COMMAND='TUTORIAL' AND TSCCOUNT > use-count )
 OR (COMMAND='TIME' AND TSCCOUNT > use-count )
 OR (COMMAND='command-name' AND TSCCOUNT > use-count )
 THEN DO;
  MGMTAREA='PRODUCTIVITY'; EXCCODE='00050'; SEVERITY='W';
  EXCDESC1='EXCESSIVE USE OF TSO COMMAND PER HOUR';
  EXCDESC2='USE COUNT=' || PUT(TSCCOUNT,3.);
  LINK HIT;
END;

THRESHOLD     Modify the values used for the number of times
MODIFICATION  a command is executed and tailor the list of
              commands contained in the definition string
              according to the following conventions:

    use-count     The number of times a command is used per
                  hour.  A threshold of ten SEND commands per
                  hour would appear as:

                     (COMMAND='SEND' AND TSCCOUNT > 10 )

    command-name  The name of the command is specified as a
                  one to eight character alphanumeric field,
                  and must be enclosed in quotes as a
                  standard SAS character literal.  Additional
                  command names must be inserted within the
                  list and be connected to the list with an
                  OR.  For the COBOL compiler used six times,
                  the specification would be:

                     OR (COMMAND='COBOL' AND TSCCOUNT > 6 )