Sorry. I was so shaken by what you said about the POCs that I did not answer your question.
The datasets reference by the user during the TSO session? They would be recorded by SMF 14, 15, 6x, 80 or 92 as appropriate. There is no Comm Server/SMF 119 involvement in any dataset access from TSO. Charles -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Carlos Cordero Sent: Monday, November 09, 2015 3:46 PM To: [email protected] Subject: Re: SMF type 119 to catch TN3270 Yes, I mean the DS names referenced by the user during the TSO telnet transmisión. Currently the FTP messages are handled by recording SMF 119 subtype 70, included the DS name and member. The case of IND$FILE (protected in RACF by program class) the current scope for recording events in transmissions reaches only the RACF messages audit/alert in "insufficiente access auth" message and that is the only event where the resource name appears; but, local and remote IP are missing, also the DS name in the cases of "allowed" permissions on specifics resources. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
