Coding Each AOF Rule Type › Security Rules › AOF Variables Available in an SEC Rule › OPAU Variables for USS Security Events

OPAU Variables for USS Security Events

The following variables are available for ADDRESS USS security events:

SEC.AUUNFUCD

The server class of the request. Currently, the function code is always U for USS.

Data Type: Character, read-only

Source: The ADDRESS USS host command

SEC.AUUNUNCM

The first 255 bytes of the UNIX command string or CCS for z/OS API request keyword syntax

Data Type: Character, read-only

Source: The ADDRESS USS host command

Sample Values:

• UNIX Command: ps -a
• CCS for z/OS API Command: Node(UNIPC1) Text('Message for TNG pc')

Note: The case of the text can be mixed.

SEC.AUUNVERB

The verb name that indicates whether a UNIX command or a CCS for z/OS API command is sent to the OSF server

Data Type: Character, read-only

Source: The ADDRESS USS host command

Possible Values:

• USSCMD-UNIX System Services command
• WTO-Framework write-to-operator API
• WTOR-Framework write-to-operator with reply API
• REPLY-Framework reply to write-to-operator with reply API
• CMD-Framework command API
• DOM-Framework acknowledge message API
• PING-Framework ping network node API
• LOGOFF-Command to USS server to shut down
• TRACE-Command to USS server to toggle the command tracing parameter

Sample Value: USSCMD