Specific Control Options › ETROPTS—Events Sent

ETROPTS—Events Sent

Valid on z/OS.

Use ETROPTS to control which events the Monitor sends to the CA-Examine product.

All entry methods are accepted.

This control option has the following format:

ETROPTS(ADD|REM,VIO,LOG,START,INIT,USS,CMDADM,CONTROL)

ADD

Indicates that a new category of events are added to the current list of events.

REM

Indicates that a category of events are removed from the current list.

VIO

Transmits security violation events to CA-Examine. This includes initiations and resource access violations.

LOG

Sends Audited events to CA-Examine.

Examples: ETROPTS control option

This example adds successful initiations/terminations and administrative commands to the current list of events sent to CA-Examine:

F TSS,ETROPTS(ADD,INIT,CMDAMD)

This example specifies that the R_chown and R_chmod USS calls are sent to CA-Examine:

TSS MODIFY(ETROPTS(ADD,USS(CHOWN,CHMOD)))