3. REPORTS › 3.1 Standard Analysis Reports › 3.1.3 TSO Audit Reports

3.1.3 TSO Audit Reports

The TSO audit reports are specialized reports that you can
use on as-required basis to study a user's TSO activity in
depth, or identify the users of TSO functions such as
commands, programs, and program libraries.

The TSO audit reports provide a detailed and flexible
tracking capability to aid those responsible for the
administration and control of the TSO System.  They offer
varying levels of detail for the TSO user session and/or
commands executed during the session.  You may tailor the
reports to display selected data elements captured by TSO/MON
and to report additional statistics on the TSO session and
executed commands and programs.

You can use these reports to:

   o  Obtain information concerning detailed resource
      consumption and user evaluation.

   o  Determine users of specific libraries, programs, and
      commands.

   o  Obtain detailed TSO command resource consumption
      information.

   o  Obtain an overview of system access by user logon and
      logoff.

You can use this report to perform the following audits:

   o  TSO User Session -  Provides a trace of a TSO user's
      activity for each TSO/MON recording interval the user
      was logged on to TSO.  This report uses TSO/MON
      recording interval information contained in the System
      record.

   o  TSO User Interactive -  Provides detailed command
      resource measures and information contained in the
      Command records that the system generates during a TSO
      user's session.

   o  TSO Functional Session -  Summarizes the TSO commands
      executed during each TSO/MON recording interval the
      audit covers.  For each command, the report lists each
      user who used the command and the number of times
      it was issued.  This report uses TSO/MON recording
      interval information contained in the System record.


RUNNING THE REPORT

All TSO audit reports run under MICF II and use multiple run-
time parameters.  You can tailor each of the audit reports
to isolate portions of each TSO user's sessions or audit
report data elements.


DIFFERENCES BETWEEN THE CA MICS TSO AUDIT REPORTS AND TSO/MON
AUDIT REPORTS

While the CA MICS TSO Audit Reports replicate the TSO/MON
audit reports as closely as possible, there are certain
differences.

o  Data Differences

   The TSO_TSU file does not retain observations that contain
   no resource usage.  For this reason, a user who is logged
   on, but does not use the enter key at least once during
   the interval will not have an observation on the file for
   that interval.  Therefore, the User Interactive Trace
   Report no longer has average think time and number of
   think events.


o  Report Parameters.

   The paired INCLUDE and EXCLUDE parameter specifications in
   the CA MICS inquiries are NOT mutually exclusive as they
   are with TSO/MON.  For instance, you can now specify a
   group of users to be included on the report and, at the
   same time, identify an individual user(s) to be excluded
   from the selected group.  This capability is available for
   selection of the following:

   - command names
   - library names
   - program names
   - terminal IDs
   - users IDs

    Example - You might wish to include all users whose user
              IDs begin with ABC0 and, at the same time,
              exclude users ABC0300 and ABC0301.  You do this
              by specifying:

                    Users to be included
                           ABC0:
                    Users to be excluded
                           ABC0300 ABC0301


The following sections describe these reports:

    1 - User Session Trace Report
    2 - User Interactive Trace Report
    3 - Functional Session Trace Report