Previous Topic: 3.1.3.2 TSO User Interactive Trace Report

Next Topic: 3.2 MICF Inquiries

3.1.3.3 TSO Functional Session Trace


You use the Functional Session Trace Report to identify the
TSO commands executed during each CA TSO/MON PM recording
interval for the time period covered in the report.  Because
this report can also show the number of unique executions of
each command by TSO user, you can use it to track
unauthorized access to TSO commands and misuse of system
resources (e.g., compiling programs in foreground rather than
in batch).  Further tailoring, using the Audit reporting
control statement syntax, narrows the scope of the report to
particular TSO commands, TSO users or user groups,
performance groups or workload manager service classes, and
TSO terminals.  You can use this report to identify commands
that you have not defined to the CA TSO/MON PM Commands
Table.

Figure 3-21 shows an example of a TSO Functional Session
Trace Report.


INQUIRY ID:

   TSOLXO - TSO Functional Session Trace

DATA SOURCE (File/Timespan):

   TSOTSC - DETAIL

RUNNING THE REPORT

Run this report under MICF, selecting the following run-time
parameters:

    o   database ID to be processed
    o   range of CA MICS file cycles to be processed
    o   SYSID values to be included
    o   range of dates to be processed
    o   time range to be processed
    o   zone values
    o   user IDs to be included
    o   user IDs to be excluded
    o   terminals to be included
    o   terminals to be excluded
    o   command names to be included
    o   command names to be excluded
    o   performance group numbers or workload manager service
        classes to be included
    o   performance group numbers or workload manager service
        classes to be excluded
    o   report format options

                                                          CA MICS IS/MSS                                                        YOUR COMPANY NAME                                                  TSO AUDIT REPORT (SYSTEM TSOP)                                                       FUNCTIONAL SESSION TRACE DATE SELECTION: 01FEB08, TIME SELECTION: 10:00-11:00                              CURRENT DATE/TIME: 23JUN08/18:25 OPTIONS: AUDIT=FUNCTIONAL=(SESSION)                                               DATA LEVEL: 51  INCLUDE=USER=ACB06 ********************************************************************************************************************************          PROCESSING INTERVAL - START: 01FEB08:09:59:59.54     END: 01FEB08:10:04:59.57         ****  SPF DIALOG MANAGER PANELS  ****           ABCE001  ACB06       3                                                                  PANEL  TOTAL       3           ABCE004  ACB06       3                                                                  PANEL  TOTAL       3           ABCE130  ACB06       4                                                                  PANEL  TOTAL       4           ABCQ100  ACB06       1                                                                  PANEL  TOTAL       1           ABCX000  ACB06      12                                                                  PANEL  TOTAL      12         ****  SPF DIALOG MANAGER PROGRAMS  ****           ABCA     ACB06       6                                                                  PROGRAM  TOTAL     6         ****  TSO COMMANDS AND SUBCOMMANDS  ****           SUBMIT   ACB06       3                                                                  COMMAND  TOTAL     3


 Figure 3-21.   TSO Functional Session Trace Report