Do you have a IEAVMXIT active? I think it can delete the unwanted messages efficiently and fast enough to eliminate your problems temporarily.
Kees. "Mark Jacobs" <[email protected]> wrote in message news:<[email protected]>... > I was given bad information prior to my initial posting. The root cause > of the problem wasn't RACF audit being turned on, but cleanup of the > access list of several CSFKEYS profiles. We're getting tons of racf > violation messages in syslog/operlog. MPF can't process them fast > enough, which in turn doesn't allow Netview/SA to have timely access to > the messages it cares about. > > It's an application design problem that eventually has to be fixed by > them, but in the short term we need a solution to this problem. > > On 08/06/12 20:33, Walt Farrell wrote: > > On Mon, 6 Aug 2012 11:26:27 -0400, Mark Jacobs<[email protected]> wrote: > > > > > >> As part of our PCI certification process we were required to turn on the > >> RACF audit function for both failed and successful accesses of selected > >> resources. We're having problems with Netview trying to keep up with the > >> messages being written to Syslog/Operlog by the enablement of the audits. > >> > > First, RACF does not issue messages for successes; only for failures (or warnings). So auditing successes would not be related to your problem. > > > > Next, if you're getting so many failures accessing those resources that NetView is having problems then it sounds to me like you have some other problem, as failures should be rare. > > > > What profiles did you change, and what ICH408I messages have started coming out? > > > > > > > -- > Mark Jacobs > Time Customer Service > Tampa, FL > ---- > > The Doctor: You know when grown-ups tell you everything's going to be > fine, and you think they're probably lying to make you feel better? > Young Amy: Yes. > The Doctor: Everything's going to be fine. > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN ******************************************************** For information, services and offers, please visit our web site: http://www.klm.com. This e-mail and any attachment may contain confidential and privileged material intended for the addressee only. If you are not the addressee, you are notified that no part of the e-mail or any attachment may be disclosed, copied or distributed, and that any other action related to this e-mail or attachment is strictly prohibited, and may be unlawful. If you have received this e-mail by error, please notify the sender immediately by return e-mail, and delete this message. Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries and/or its employees shall not be liable for the incorrect or incomplete transmission of this e-mail or any attachments, nor responsible for any delay in receipt. Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal Dutch Airlines) is registered in Amstelveen, The Netherlands, with registered number 33014286 ******************************************************** ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
