The following layout is for the SMF type 80 record. If you want to customize reporting rather than use TSSUTIL, you can review the layout of the SMF type 80 record shown next. For an ALT-ACID audit entry, the jobname may appear immediately after the eight-character ACID of the audit record that is produced.
|
SMF Type 80 Record Layout |
|||
|---|---|---|---|
|
SMF80FLG |
DS |
X |
X'02'VS2 |
|
SMF80RTY |
DS |
X |
80 DECIMAL |
|
SMF80TME |
DS |
XL4 |
TIME |
|
SMF80DTE |
DS |
CL4 |
DATE |
|
SMF80SID |
DS |
CL4 |
SYSTEM ID |
|
SMF80DES |
DS |
XL2 |
DESCRIPTOR FLAGS |
|
SMF80EVT |
DS |
X |
EVENT CODE: |
|
$S80INIT |
EQU |
1 |
JOB INITIATION |
|
$S80AUTH |
EQU |
2 |
AUTHORIZATION CHECK |
|
$S80CMD |
EQU |
50 |
AUTH COMMAND |
|
$S80PSWD |
EQU |
51 |
PASSWORD CHANGE |
|
$S80COPT |
EQU |
52 |
TSS CONTROL OPTIONS |
|
$S80AVO |
EQU |
55 |
AVO REQUEST |
|
$S80VOL |
EQU |
56 |
VOLUME UPDATE |
|
$S80NVOL |
EQU |
57 |
TAPEMNGT ADD VOLUME |
|
$S80DVOL |
EQU |
58 |
TAPEMNGT DELETE VOLUME |
|
$S80DUF |
EQU |
59 |
DYNAMIC (INSTDATA) UPDATE |
|
$S80ABND |
EQU |
60 |
USER ABEND IN CA Top Secret |
|
$S80XDIS |
EQU |
61 |
EXIT DISABLED |
|
$S80STSS |
EQU |
62 |
START CA Top Secret ADDRESS SPACE |
|
$S80PTSS |
EQU |
63 |
STOP CA Top Secret ADDRESS SPACE |
|
$S80STCA |
EQU |
64 |
STC OPERATOR ACCOUNTABILITY |
|
$S80STAT |
EQU |
65 |
STATISTICS DUMP |
|
* |
|
|
|
|
SMF80EVQ |
DS |
X |
EVENT CODE QUALIFIER |
|
SMF80USR |
DS |
CL8 |
ACCESSOR ID |
|
|
DS |
XL2 |
|
|
|
DS |
XL2 |
|
|
|
DS |
XL2 |
|
|
|
DS |
XL2 |
|
|
SMF80REL |
DS |
CL2 |
OFFSET TO 1ST EXTENSION |
|
SMF80CNT |
DS |
XL2 |
# OF EXTENSION SECTIONS |
|
SMF80ATH |
DS |
X |
AUTHORITY |
|
|
DS |
X |
|
|
|
DS |
X |
|
|
|
DS |
X |
|
|
SMF80TRM |
DS |
CL8 |
TERMINAL ID |
|
SMF80JBN |
DS |
CL8 |
JOBNAME |
|
SMF80RST |
DS |
XL4 |
READER TIME |
|
SMF80RSD |
DS |
XL4 |
READER DATE |
|
SMF80UID |
DS |
CL8 |
SMF USERID |
|
SMF80VER |
DS |
X |
RACF VERSION |
|
LSMF80 |
EQU |
*‑SMF80 |
|
|
SMF80REX |
DSECT |
|
|
|
SMF80DTP |
DS |
X |
DATA TYPE: |
|
$S80XCMD |
EQU |
103 |
IMAGE OF CA Top Secret COMMAND |
|
$S80XSRI |
EQU |
104 |
SRIPL/PW/AVO |
|
$S80XOPT |
EQU |
105 |
IMAGE OF CA Top Secret OPTIONS |
|
$S80XFLG |
EQU |
109 |
COPY OF FLOG |
|
$S80XHDR |
EQU |
255 |
AUDIT/FILE HEADER RECORD |
|
$S80XEND |
EQU |
0 |
AUDIT/FILE WRAPPER |
|
SMF80DLN |
DS |
X |
LENGTH OF DATA IN EXT SECTION |
|
SMF80DTA |
DS |
0X |
VARIABLE DATA SECTION |
|
* |
|
|
|
|
|
DS |
A |
RESERVED |
|
|
DS |
X |
RESERVED |
|
|
DS |
X |
RESERVED |
|
FLIND2 |
DS |
X |
AUDIT REASON INDICATOR: |
|
$FLI2ACT |
EQU |
X'80' |
ACTION AUDIT |
|
$FLI2RSC |
EQU |
X'40' |
RESOURCE AUDIT |
|
$FLI2USR |
EQU |
X'20' |
USER AUDIT |
|
$FLI2FAC |
EQU |
X'10' |
FACILITY AUDIT |
|
* |
|
|
|
|
|
DS |
X |
RESERVED |
|
|
DS |
X |
RESERVED |
|
FLFLAGS |
DS |
X |
LOGGING INDICATORS: |
|
$LOGVIOL |
EQU |
X'80' |
VIOLATION |
|
$LOGFORC |
EQU |
X'40' |
FORCED LOG‑OUT |
|
$LOGFAIL |
EQU |
X'20' |
TRUE FAILURE |
|
$LOGAUDT |
EQU |
X'10' |
AUDITED EVENT |
|
* |
|
|
|
|
FLDATE |
DS |
XL3 |
DATE (PACKED YYDDDF) |
|
|
DS |
X |
RESERVED |
|
FLTIME |
DS |
XL4 |
TIME OF DAY (HHMMSSTH) |
|
FLRACC |
DS |
XL2 |
REQUESTED ACCESS |
|
FLAACC |
DS |
XL2 |
ALLOWED ACCESS |
|
FLRETCOD |
DS |
X |
RETURN CODE |
|
FLDETLRC |
DS |
X |
DETAIL REASON CODE |
|
FLJOBTYP |
DS |
X |
FACILITY |
|
FLSVC |
DS |
X |
CALLING SVC |
|
FLCLASS |
DS |
X |
RESOURCE CLASS: |
|
$ARAPPL |
EQU |
C'A' |
APPLICATION |
|
$ARSUBM |
EQU |
C'B' |
SUBMIT ACID |
|
$RRCHANG |
EQU |
C'C' |
SECURITY FILE CHANGE |
|
$ARDSN |
EQU |
C'D' |
DSNAME PREFIX |
|
$ARDCT |
EQU |
C'E' |
CICS DCT |
|
$ARFCT |
EQU |
C'F' |
CICS FCT |
|
$ARJCT |
EQU |
C'J' |
CICS JCT |
|
$ARTSS |
EQU |
C'O' |
TSS OPTIONS |
|
$ARPGM |
EQU |
C'P' |
PROGRAM |
|
$ARTERM |
EQU |
C'T' |
TERMINAL |
|
$ARVOL |
EQU |
C'V' |
TAPE VOLUME |
|
$ARDASDV |
EQU |
C'W' |
DASD VOLUME |
|
$ARXACTN |
EQU |
C'X' |
TRANSACTION |
|
* |
|
|
|
|
FLMODE |
DS |
X |
USER'S MODE: |
|
$DORM |
EQU |
X'80' |
DORMANT MODE |
|
$WARN |
EQU |
X'40' |
WARN MODE |
|
$FAIL |
EQU |
X'20' |
FAIL MODE |
|
$IMPL |
EQU |
X'30' |
IMPL MODE |
|
* |
|
|
|
|
FLJOBNUM |
DS |
XL2 |
JOBNUMBER (JES FORMAT) |
|
FLNVIOL |
DS |
X |
VIOLATION COUNT (FOR SESSION) |
|
|
DS |
XL2 |
RESERVED |
|
|
DS |
XL2 |
RESERVED |
|
FLACID |
DS |
CL8 |
ACID NAME |
|
FLJOB |
DS |
CL8 |
JOB NAME |
|
FLVOLSER |
DS |
CL6 |
VOLUME SERIAL |
|
|
DS |
CL2 |
RESERVED |
|
FLPGM |
DS |
CL8 |
PROGRAM IN CONTROL |
|
FLRES |
DS |
CL44 |
RESOURCE NAME |
|
FLIND1 |
DS |
X |
INDICATORS: |
|
$FLBYPSS |
EQU |
X'80' |
USER IS BYPASSING SEC'Y |
|
$FLNOTIF |
EQU |
X'40' |
ACTION(NOTIFY) |
|
$FLSUSP |
EQU |
X'20' |
SUSPEND ACID |
|
$FLFRAK |
EQU |
X'10' |
FRACHECK‑INITIATED LOG |
|
$FLRENMO |
EQU |
X'04' |
RENAME OLD DSNAME DATA |
|
$FLRENMN |
EQU |
X'02' |
RENAME NEW DSNAME DATA |
|
$FLRENM |
EQU |
$FLRENMO+ $FLRENMN |
RENAME OLD AND NEW |
|
$FLVSAM |
EQU |
X'01' |
VSAM CATALOG DATA |
|
* |
|
|
|
|
FLINDEV |
DS |
CL8 |
INPUT DEVICE (TERMINAL/READER) |
|
FLATTR1 |
DS |
XL1 |
USER ATTRIBUTES: |
|
$AMULTPW |
EQU |
X'80' |
PASSWORD PER FACILITY |
|
$ATSOMPW |
EQU |
X'40' |
MULTIPLE TSO UADS PASSWORDS |
|
$ANOADSP |
EQU |
X'20' |
DONT USE ADSP (INIT) |
|
$ANOPWC |
EQU |
X'10' |
USER CANNOT CHANGE PASSWORD |
|
$AAUDIT |
EQU |
X'08' |
AUDIT THIS ACID |
|
$AOID |
EQU |
X'04' |
OIDCARD REQUIRED |
|
$ATRACE |
EQU |
X'02' |
TRACE THIS USER |
|
$ANOSUBK |
EQU |
X'01' |
CAN SUBMIT ANY ACID |
|
* |
|
|
|
|
FLATTR2 |
DS |
XL1 |
USER ATTRIBUTES: |
|
$A14LIB |
EQU |
X'80' |
PRIV LIB(S) PRESENT IN A/REC |
|
$AERROR |
EQU |
X'40' |
ACT/REC ON FILE IS IN ERROR |
|
$ASUSPND |
EQU |
X'20' |
ACID IS SUSPENDED |
|
$ANORESK |
EQU |
X'10' |
NO RESOURCE CHECKING |
|
$ANOVOLK |
EQU |
X'08' |
NO VOLUME CHECKING |
|
$ANODSNK |
EQU |
X'04' |
NO DATASET CHECKING |
|
$ANOLCFK |
EQU |
X'02' |
NO LCF CHECKING |
|
* |
|
|
|
|
FLATTR3 |
DS |
XL1 |
USER ATTRIBUTES: |
|
$AMRO |
EQU |
X'80' |
MRO‑SECURITY RECORDS IN CSA |
|
$ASHRPRF |
EQU |
X'40' |
SHARED COMMON PROFILES |
|
$ACON |
EQU |
X'20' |
CONSOLE AUTHORITY |
|
$AGAP |
EQU |
X'10' |
GLOBALLY ADMINISTRABLE PROFILE |
|
$ADUFXTR |
EQU |
X'08' |
DUF EXTRACT |
|
$ADUFUPD |
EQU |
X'04' |
DUF UPDATE |
|
$ASUSPUN |
EQU |
X'02' |
SUSPEND UNTIL IN EFFECT |
|
$ANOVMMD |
EQU |
X'01' |
NO MINI DISK CHECKING |
|
* |
|
|
|
|
|
DS |
X |
RESERVED |
|
FLRTME |
DS |
XL3 |
READER START TIME |
|
FLRDTE |
DS |
XL3 |
READER START DATE |
|
Copyright © 2014 CA Technologies.
All rights reserved.
|
|