Real time SMF data capture is non-trivial and normally requires
cross-memory services. Take a look at how WAS does it to get an idea
http://www.ibm.com/developerworks/tivoli/library/t-wasz-smf/. If you're
using SMF logstreams it may be easier. But it looks like your using MAN
data sets so not an option.
On 16/06/2015 4:58 PM, ibmmain wrote:
Dear all
Thanks for your help!
We just want to know how IBM zSecure could alter specific events based on
certain RACF information that is captured by SMF in real time without dumping
SYS1.MANX
Could you give us a sample program to alter one specific events based on
certain information that is captured by SMF in real time ?
We don't care about the program in assemble ,in REXX or in COBOL .
We read the REXX program which also need to dump sys1.manx first.
Thanks a lot !
Best Regards,
Jason Cai
Lizette Koehler wrote:
Remember that SMF is being written a lot and quickly.
Indeed. For some type of events recorded in SMF, I wrote automation rules to
cancel a STC or notify me or do something else. Simply for the reason of speed
of filling up my SYS1.MANx and my daily datasets. Your LPAR may grind to a halt
(no new A/S) if all page datasets fill up due to SMF A/S own buffers being
full. Somewhat big fun...
You question is very wide-ranging with many solutions. Some you have to code,
some vendor products can provide.
Indeed. that original question is too wide-ranging. Depending on type of
events, I would look in other places to monitor that specific events. For
example, I would use automation software to sniff around in SYSLOG and
Consoles. Failing that, if RACF related, I can use zSecure to sniff around in
SYS1.MANx. For other things, I just issue 'I SMF'.
If you can explain what you are trying to do, then the answers can be more
directed to your needs.
I'm still waiting with a sore heart for that... ;-)
Groete / Greetings
Elardus Engelbrecht
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
