Hi Shelia, Assuming your RACF monitoring options have been set correctly, the ICH408I messages will likely have corresponding SMF records. You can use RACF's SMF Unload utility to generate text or XML output from these records for research and reporting. If you have an adjunct RACF SMF reporting product (e.g., zSecure Audit or Vanguard Advisor), it will provide ISPF menus for generating reports.
For more on setting up RACF monitoring options and using the SMF Unload, see our presentation on this topic. https://www.rshconsulting.com/RSHpres/RSH_Consulting__RACF_Monitoring_&_Reporting__May_2019.pdf Regards, Bob Robert S. Hansel Lead RACF Specialist RSH Consulting, Inc. 617-969-8211 www.linkedin.com/in/roberthansel www.rshconsulting.com -------------------------------------------------------------------------------- Upcoming RSH RACF Training - WebEx - RACF Level I Administration - DEC 4-8, 2023 - RACF Level II Administration - NOV 13-17, 2023 - RACF Level III Admin, Audit, & Compliance - OCT 30 - NOV 3, 2023 ***Date Change*** - RACF - Securing z/OS UNIX - FEB 26 - MAR 1, 2024 --------------------------------------------------------------------------------- -----Original Message----- Date: Wed, 4 Oct 2023 17:38:18 +0000 From: "Chalk, Shelia" <sch...@ssfcu.org> Subject: RACF ICH408I messages Hello, Is there a report that I can run to list all the ICH408i messages within a time period? Thanks Shelia Chalk ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN