TSSOERPT Utility › Running the Report Using JCL

Running the Report Using JCL

The TSSOERPT report uses CA Top Secret report JCL. For example:

//TSSOERPT JOB 1,'USS RPT',MSGCLASS=A,TYPRUN=HOLD
//*
//REPORT EXEC PGM=TSSOERPT,PARM='TITLE(USS EVENTS)'
//*
//SYSPRINT DD SYSOUT=*
//SYSUDUMP DD SYSOUT=*
//RECMAN1 DD DSN=IFASMF.XE15.TSSLOG,DISP=SHR,
//SUBSYS=(LOGR,IFASEXIT)
//SYSIN    DD *
  DETAIL
/*
//

TSSOERPT JCL Parameters

The TSSOERPT JCL parameters are specified using the PARM= keyword on the exec statement or in the SYSIN dataset. The SUMMARY, DETAIL, LINECNT, and TITLE parameters control report formatting. The UID, GID, USER, GROUP, SERVICE, ERROR, INCLUDE, EXCLUDE, JOBMASK, SDATE, EDATE, STIME, and ETIME parameters select which events are included in the report.

EDATE(169365|cyyddd)

Specifies the ending Julian date from which report information is selected, where c is required and specifies the century. Enter 1 for years greater than (>) 2000 or 0 for years less than (<) 2000. When combined with the SDATE parameter, this parameter creates a window for report content. The defaults for SDATE and EDATE process all available records.

ERROR

Specifying ERROR restricts the output of the report to include only entries for services that end with a SAF RC greater than zero. This helps produce a report that is easier to read when attempting to resolve a USS setup problem. If ERROR is not specified.

Default: Report on all SMF records that are written.

ETIME(2359|hhmm)

Specifies the end-of-time interval from which SMF records are selected based on a 24-hour clock. SMF records generated after this specified time of day are ignored. The selection of records begins at the STIME specified for each date in the SDATE/EDATE range and ends on each date at the ETIME given. The defaults for STIME and ETIME process all available records.

EXCLUDE(service1,service2, …,servicen)

Specifies the SAF callable services to be omitted from the report. Services specified in EXCLUDE can be masked with a dash (-) and multiple services can be specified. For information on these services, see the IBM z/OS Security Server (RACF) Callable Services guide.

If SERVICE, INCLUDE and EXCLUDE are not specified.

Default: All services.

Note: This parameter is mutually exclusive with the SERVICE parameter.

GID(value)

Specifies the USS GID you intend to collect security information for. This field is not maskable.

Range: 0 to 2,147,483,647.

Default: All GID values.

GROUP(groupname)

Specifies the group for which you want USS security information collected. This field is maskable.

Default: All groups.

INCLUDE(service1, service2,…,servicen)

Specifies the SAF callable services for which you want security information collected. Services specified in INCLUDE can be masked with a dash (-) and multiple services can be specified.

For information, see the IBM z/OS Security Server (RACF) Callable Services guide.

Default: All services.

Note: This parameter is mutually exclusive with the SERVICE parameter.

JOBMASK(********|jobmask1,...,jobmask8)

Specifies that records appearing on the report are limited to those for the jobs indicated by the job name mask. Use commas or spaces to separate multiple job name masks. Up to 8 job masks can be specified.

Default: All jobs.

LINECNT(60|nnnnn)

The LINECNT parameter specifies the number of output lines to be printed on a page. The maximum number of output lines per page is limited only by the physical constraints of the output media used, or to 99,999 lines.

Default: 60 lines per page.

PRINTER|TERMINAL

Specifying TERMINAL produces report output formatted for an 80 character per line display. Specifying PRINTER produces report output formatted for 133 character per line printed output.

Default: TERMINAL.

SDATE(000000|cyyddd)

Specifies the beginning Julian date from which report information is selected, where c is required and specifies the century. Enter 1 for years greater than (>) 2000 or 0 for years less than (<) 2000. Any input SMF records generated before the SDATE value are ignored.

SERVICE(service)

Specifies the name of the SAF callable service for which you want security information collected. For information, see the IBM z/OS Security Server (RACF) Callable Services guide.

Default: All services.

Note: The SERVICE parameter is mutually exclusive with the INCLUDE and the EXCLUDE parameter.

STIME(000000|hhmm)

Specifies the beginning-of-time interval from which SMF records are selected based on a 24-hour clock. SMF records generated before this time are ignored. The selection of records begins at the STIME specified for each date in the SDATE/EDATE range and ends on each date at the ETIME given.

Default: Process all available records.

SUMMARY|DETAIL

Specifying SUMMARY produces a three-line entry for each event logged. Specifying DETAIL produces report entries that include all the information available for each logging event.

Default: SUMMARY.

TITLE(string)

Specifies a one to 35 character string added to other title information at the top of the report. If this character string is longer than 35 characters, an error message is issued.

Default: USS Event Log.

UID(value)

Specifies the USS UID for which you intend to collect security information. Acceptable numeric values range from zero to 2,147,483,647. This field is not maskable.

Default: All UID values.

USER(acid)

Specifies the acid for which you want USS security information collected. This field is maskable and it is case sensitive.

Default: All acids.