> -----Original Message-----
> From: IBM Mainframe Discussion List On Behalf Of Ben Alford
>
> We ended up using MPF and running a little home-grown routine
> whenever the system generates msg CSV210I about the LLA being
> started,stopped or refreshed. This program parses the msg to
> deterine if it was issued for the START, END or REFRESH and
> then cuts a tiny local SMF record. These SMF records are
> formatted daily for mgmt who had to show the auditors when
> the LLA was refreshed. SYSLOG wasn't adequate for this; SMF was.
> Maybe someday IBM will write some SMF whenever LLA and/or VLF
> are modified, stopped, started, etc. (I don't know if it is
> a known SHARE requirement.)
While it may not address stopping or starting LLA, creating a RACF
FACILITY profile CSVLLA.* with AUDIT(ALL) and appropriate IDs in the
access list with UPDATE authority will cause RACF to log an SMF type 80
record whenever an LLA REFRESH is performed, showing when, by whom, and
whether it succeeded or failed for lack of authority.
-jc-
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
