IBM Security Z Security

 View Only
  • 1.  SMF records reading via zSecure menus

    Posted Fri December 11, 2020 03:21 AM
    Hello ,

    I'm trying to read dumped SMF records by using zSecure panels and apparently nothing appears .

    1) SMF records are dumped in dataset with characteristics :

    Data class . . . . . : DCMULTVL
    Organization . . . : PS
    Record format . . . : VB
    Record length . . . : 0
    Block size . . . . : 32760
    1st extent cylinders: 105
    Secondary cylinders : 500
    Data set name type : LARGE
    SMS Compressible . : NO
    Extended Attributes OPT

    2) In input zSecure the Daily refreshed input files and the dumped SMF dataset are selected 

    3) When I try to go at least on those following menus "Nothing selected" appears :

    EV Events/ 1 SMF reports Predefined analysis reports
    EV Events/ 2 RACF events RACF logging for specific events 

    Is there something missing ?

    Thank you .


    ------------------------------
    Nordine
    ------------------------------


  • 2.  RE: SMF records reading via zSecure menus

    IBM Champion
    Posted Fri December 11, 2020 04:38 AM
    Hi Nordine
    The EV.1 and EV.2 reports only show SMF type 80 records, i.e., RACF event logging.  Does your SMF dump data set contain SMF 80 ?
    You could select the "Show number of SMF records selected" option to see the SMF types and subtypes in your SMF input source.
    Other options on the EV menu support more SMF record types.

    ------------------------------
    Rob van Hoboken
    ------------------------------



  • 3.  RE: SMF records reading via zSecure menus

    Posted Fri December 11, 2020 05:01 AM
    Hi Rob ,

    Yes it is one with SMF type 80 and other one 80:88 .

    What is the path menu to access to "Show number of SMF records selected" option , please ? I'm working with zSecure 2.3.1 .

    Thanks .


    ------------------------------
    Nordine Mosbah
    ------------------------------



  • 4.  RE: SMF records reading via zSecure menus

    Posted Fri December 11, 2020 05:25 AM
    Hi Nordine,

    This is an option on the panel rather than a separate menu choice.

    For example, if you are in EV.1.1 you will see a list of four options at the bottom

    / Output in print format
    _ Use CKFREEZE data
    _ Show number of SMF records selected
    _ Run in background

    Regards,

    ------------------------------
    Jeroen Tiggelman
    Software Development and Level 3 Support Manager IBM Security zSecure Suite
    IBM
    Delft
    ------------------------------