Thanks Steve, Elardus, Charles. summary:
For audit TSO-ISPF, using smf type 32. But we need to audit all commands, from TSO, from ISPF, from clist & rexx, and from batch (ikjeft01). Any idea aditional? is there any way to filter the data before the system sending data to SMF? For audit member changes in libraries, using smf type 42, subtype 21, 24, 25. Any limitations? One more, if I active smf's type 32 and 42, all the actions will be recorded? if I only need to audit one person, is it possible to filter it (not after SMF extraction)? Thanks a lot. Regards From: Jose Ignaci Torrecilla Puente/Spain/IBM@IBMES To: [email protected] Date: 29-11-16 14:14 Subject: recording all TSO command and recording all updated member of libraries Sent by: IBM Mainframe Discussion List <[email protected]> Hi folks, how can I know all the TSO-ISPF-ikjeft01(tso batch) commands executed by one user? What should I activate? Second, how can I know who updated one member of one library (not by library stats)? What should I activate? Thanks. Jose I Torrecilla Salvo indicado de otro modo más arriba / Unless stated otherwise above: International Business Machines, S.A. Santa Hortensia, 26-28, 28002 Madrid Registro Mercantil de Madrid; Folio 1; Tomo 1525; Hoja M-28146 CIF A28-010791 ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN Salvo indicado de otro modo más arriba / Unless stated otherwise above: International Business Machines, S.A. Santa Hortensia, 26-28, 28002 Madrid Registro Mercantil de Madrid; Folio 1; Tomo 1525; Hoja M-28146 CIF A28-010791 Salvo indicado de otro modo más arriba / Unless stated otherwise above: International Business Machines, S.A. Santa Hortensia, 26-28, 28002 Madrid Registro Mercantil de Madrid; Folio 1; Tomo 1525; Hoja M-28146 CIF A28-010791 ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
