Elardus Engelbrecht, DFSORT already have some examples of creating ICETOOL reports based on output files from the RACF® database unload utility (IRRDBU00) or the SMF data unload utility (IRRADU00). The SYS1.SAMPLIB member IRRICE contains DFSORT statements for record selection and ICETOOL statements for report formatting for a wide variety of reports. Check this link which explains in detail about it
http://www.ibm.com/support/knowledgecenter/SSLTBW_2.1.0/com.ibm.zos.v2r1.icha700/icetool.htm And some more examples here http://www.ibm.com/support/docview.wss?uid=isg3T7000097#ex Also Mark Nelson from RACF has given a presentation at share "As Cool as Ice: Analyzing Your RACF® Data Using DFSORT™ and ICETOOL" which can be found here ftp://public.dhe.ibm.com/s390/zos/racf/pdf/r12_as_cool_as_ice.pdf Also RACF has a downloadable utility JCL to create reports using DFSORT. Check this out http://www.ibm.com/systems/z/os/zos/features/racf/downloads/racfice.html I hope this will get you started and if you still need help with creating a specific report, then send me an email and I can show you a way to do it. Thanks, Kolusu DFSORT Development IBM Corporation IBM Mainframe Discussion List <[email protected]> wrote on 05/15/2015 04:11:51 AM: > From: Elardus Engelbrecht <[email protected]> > To: [email protected] > Date: 05/15/2015 04:12 AM > Subject: DFSORT and RACF > Sent by: IBM Mainframe Discussion List <[email protected]> > > Hi to all, > > I want to ask something on IBM-MAIN before I lodge a formal request > for DFSORT gurus attention: > > It is part of my work to produce many audit reports using DFSORT, > ICETOOL, custom REXX, COBOL, Assembler programs. > > Normally, while supported, we don't modify columns in DFSORT/ > ICETOOL, something like this: > > INCLUDE COND=(5,4,CH,EQ,C'0200',AND,118,10,CH,GE,C'2015-01-01') > OUTREC FIELDS=(1,9,10:10,3,CHANGE=(3,C'ABC',C'CBA'), ... etc ... > > or > > INREC IFTHEN=(WHEN=(96,1,CH,EQ,C'S'),OVERLAY=(97:C'ABCDEFGH')), > > But, I have a need to translate the cryptic columns into something > readable. [1] > > Question: > > Is there any need to control the modifying of input/output by > DFSORT/ICETOOL with RACF? > Something like that STGADMIN.?? profiles in FACILITY class to > control usage of ADMINISTRATOR keyword in DFDSS? > > I don't think those auditors will like to see (and not survive) > those ability to modify records. > > Of course I could rerun my jobs from original SMF just to prove > these records are not modified anywhere. > > Thanks in advance! > > Groete / Greetings > Elardus Engelbrecht > > [1] - My auditors already accept that I use a REXX program to > translate something like 'INVPSWD ' by 'Not a valid password' or > 'FPROTALL' by 'Failed by PROTECTALL'. > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
