Dear all 

 Thanks for your help!

 We just want to know how  IBM zSecure could alter  specific events based on 
certain RACF information that is captured by SMF in real time  without dumping 
SYS1.MANX 

Could you give us a sample program to alter one specific events based on 
certain  information that is captured by SMF in real time  ?

 We don't care about the program in assemble ,in REXX or in COBOL . 

We read the REXX program which also need to dump sys1.manx first.

Thanks a lot !

Best Regards,

Jason Cai

Lizette Koehler wrote:

>Remember that SMF is being written a lot and quickly.

Indeed. For some type of events recorded in SMF, I wrote automation rules to 
cancel a STC or notify me or do something else. Simply for the reason of speed 
of filling up my SYS1.MANx and my daily datasets. Your LPAR may grind to a halt 
(no new A/S) if all page datasets fill up due to SMF A/S own buffers being 
full. Somewhat big fun...


>You question is very wide-ranging with many solutions.  Some you have to code, 
>some vendor products can provide.

Indeed. that original question is too wide-ranging. Depending on type of 
events, I would look in other places to monitor that specific events. For 
example, I would use automation software to sniff around in SYSLOG and 
Consoles. Failing that, if RACF related, I can use zSecure to sniff around in 
SYS1.MANx. For other things, I just issue 'I SMF'.


>If you can explain what you are trying to do, then the answers can be more 
>directed to your needs.

I'm still waiting with a sore heart for that... ;-)

Groete / Greetings
Elardus Engelbrecht

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to