Advertisement: The Syncsort Ironstream® product in conjunction with Splunk, can capture SMF data in real time and forward the data to Splunk for consolidation and analysis. It can also capture SYSLOG and Log4J events and send them to Splunk along with flat files. Look it up on the web at http://www.syncsort.com/en/Products/Mainframe/Ironstream
Chris Blaicher Technical Architect Software Development Syncsort Incorporated 50 Tice Boulevard, Woodcliff Lake, NJ 07677 P: 201-930-8234 | M: 512-627-3803 E: [email protected] -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Roger W. Suhr (gmail) Sent: Tuesday, June 16, 2015 1:11 PM To: [email protected] Subject: Re: Is there any tools or interface which could analyze or monitor SYS1.MANX directly? I use the REVIEW command from CBTTAPE.ORG On 2015-06-16 7:44 AM, Elardus Engelbrecht wrote: > Jason Cai wrote: > >> We just want to know how IBM zSecure could alter specific events >> based on certain RACF information that is captured by SMF in real >> time without dumping SYS1.MANX > What do you mean by 'alter'? What are you trying to solve? > > zSecure does NOT alter the records it gets from SYS1.MANx, but see below. > > >> Could you give us a sample program to alter one specific events based on >> certain information that is captured by SMF in real time ? > Select your input (type = 'ACT.SMF') and your selection criteria, then go to > the right page to get your report. Now place that report in a dataset. You > can do that in batch or in TSO / ISPF. Then use whatever program or editing > tool to 'alter' your records. > > Some components of zSecure (I think Command Verifier or something like that) > may intercept some events and allow/disallow it instantly. > > Alternatively, you can go to RACF-L discussion list and ask your questions > there. > > You can also go to "zSecure Suite" discussion list which is listed in this > list of Security related forums: > > https://www.ibm.com/developerworks/community/forums/html/category?id=a > 4c83a8c-1106-418e-bcae-323eb6641707 > > But still, please tell us what do you mean by 'alter'. > > Groete / Greetings > Elardus Engelbrecht > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, send > email to [email protected] with the message: INFO IBM-MAIN -- Hava a great day! Roger W. Suhr Indianapolis, IN 46202 [email protected] ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN ________________________________ ATTENTION: ----- The information contained in this message (including any files transmitted with this message) may contain proprietary, trade secret or other confidential and/or legally privileged information. Any pricing information contained in this message or in any files transmitted with this message is always confidential and cannot be shared with any third parties without prior written approval from Syncsort. This message is intended to be read only by the individual or entity to whom it is addressed or by their designee. If the reader of this message is not the intended recipient, you are on notice that any use, disclosure, copying or distribution of this message, in any form, is strictly prohibited. If you have received this message in error, please immediately notify the sender and/or Syncsort and destroy all copies of this message in your possession, custody or control. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
