You'll need 2 things...

First, if TSSUTIL only listed violations, you may not be logging INIT events, 
in which case no log on audit data is being produced and thus no tool will be 
able to report what you are looking for. Check out the LOG control options and 
make sure you have INIT set:

* INIT
Logs all job/session initiations and terminations.

Then, use TSSUTIL with report selection criteria such as:

EVENT(INIT) FACILITY(TSO)

Tom Chicklon

-----Original Message-----
From: IBM Mainframe Discussion List <[email protected]> On Behalf Of 
Steely.Mark
Sent: Wednesday, December 11, 2019 6:21 PM
To: [email protected]
Subject: Sign on Activity Top Secret

**CAUTION EXTERNAL EMAIL**

**DO NOT open attachments or click on links from unknown senders or unexpected 
emails**

Does someone have a program that can be shared - that will list all TSO sign-on 
?

I know it is SMF 80 record. I can write a program but I don't want to re-invent 
the wheel.

The program can be SAS, EARL, ASM etc....
We are z/OS v2.2 and TSS v16. I looked at TSSUTIL but it only listed violations.
CA / Broadcom documentation states: Use a report generator or program to 
produce customized reports based on the credential types used during signon 
activity.
Any help would be appreciated.

Thank You

*** Disclaimer ***
This communication (including all attachments) is solely for the use of the 
person to whom it is addressed and is a confidential AAA communication. If you 
are not the intended recipient, any use, distribution, printing, or copying is 
prohibited. If you received this email in error, please immediately delete it 
and notify the sender.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
**CAUTION EXTERNAL EMAIL**

**DO NOT open attachments or click on links from unknown senders or unexpected 
emails**


This e-mail transmission contains information that is confidential and may be 
privileged.   It is intended only for the addressee(s) named above. If you 
receive this e-mail in error, please do not read, copy or disseminate it in any 
manner. If you are not the intended recipient, any disclosure, copying, 
distribution or use of the contents of this information is prohibited. Please 
reply to the message immediately by informing the sender that the message was 
misdirected. After replying, please erase it from your computer system. Your 
assistance in correcting this error is appreciated.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to