IBM Security Z Security

Security for Z

Join this online user group to communicate across Z Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Lookind SMF records

    Posted 02/15/23 12:08 PM

    I have turned on a Successful Updates on UPDATE.

    And I captured the Typ15's and the Typ 80's

    I have added the flat files and added it to zSecure.

    What I don't remember is how to look at the SMF records in zSecure.

    How do I browse that file?

    TIA



    ------------------------------
    Steve Beaver
    ------------------------------


  • 2.  RE: Lookind SMF records

    Posted 02/16/23 02:12 AM

    Hi Steve, 

    once you have allocated the data sets containing the SMF type 15's and 80's with Setup Files (option SE.1) and assign them type SMF, you can use the EV option to query the contents of the SMF records. Option EV.U generates reports about which users made successful updates to the data sets and resources for which you activated the successful update logging. With option EV.D, you generated reports about which users successfully updated the data sets that you started monitoring. And options EV.R produces similar report about which users successfully updated the general resources that you started monitoring.



    ------------------------------
    Tom Zeehandelaar
    z/OS Security Enablement Specialist - zSecure developer
    IBM
    ------------------------------



Related Content