Jason Cai wrote:

>We always analyse SMF data after we dump SYS1.MANX.   

Good. Hourly, Daily, monthly, etc? Do you splice your records? Say, RMF to 
dataset1, RACF to dataset2, Catalog to dataset3 and so on? Or do you grab all 
and everything and place them on daily dsn and MOD them later to monthly dsn?

 
>Is there any tools or interface which could analyse or monitor SYS1.MANX 
>directly without dump SYS1.MANX?  

Yes, lots [freebies or commercial] of them including IBM's zSecure [1]. Or you 
can roll your own SMFU83/84/85 exits and enable them in SMFPRMxx.


>As you know,IBM zSecure ALTER  tool could analyze SMF records in real time. 

Interactively or in Batch, but then only for records [RACF, Jobs (SMF Type 30 
for example), RMF [interval records for example), OMVS, TCP/IP, DB2, CICS and 
perhaps others too] needed for zSecure.


>We wonder if there is any interface which could help us to develop programs to 
>analyze SMF records in real time. 

What are you trying to solve? Perhaps there are better solutions. But yes, the 
interface is already in place (SMF exits).

[1] - zSecure only reads, but does not make any copies of those raw SMF records 
AFAIK. 

Groete / Greetings
Elardus Engelbrecht

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to