[prev in list] [next in list] [prev in thread] [next in thread] 

List:       racf-l
Subject:    Re: SMF Logstream and IRRADU00
From:       Lou Losee <llosee () GMAIL ! COM>
Date:       2018-03-22 20:50:04
Message-ID: CA+NdcOaCEbDigC-Z6Xzhqu6-XX4MohSu0qNMuQKR=vORS9kjZQ () mail ! gmail ! com
[Download RAW message or body]

Thanks Walt - As you surmised I had already run IFASMFDL without IRRADU00
as an exit.  Running IFASMFDP against the output of IFASMFDL worked great

- Lou

--
Artificial Intelligence is no match for Natural Stupidity
  - Unknown

On Thu, Mar 22, 2018 at 3:13 PM, Walt Farrell <walt.farrell@gmail.com>
wrote:

> On 3/22/2018 3:59 PM, Lou wrote:
>
>> What is required to make the SMF records dumped from the logstream using
>> IFASMFDL compatible with IRRADU00.
>>
>> The resulting records from IFASMFDL are not 'formatted' but rather raw
>> SMF.
>>
>> What am I missing?
>>
>> I would start by reading the RACF Auditor's Guide, e.g., for z/OS V1.13:
> http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/
> ichza8c0/3.2?SHELF=all13be9&DT=20110621120657
>
> As the book describes, IRRADU00 can run as an exit to either IFASMFDP or
> IFASMFDL.
>
> If you've already run IFASMFDL, but didn't tell it to use IRRADU00 as an
> exit, then I would probably take IFASMFDL's output file and run it through
> IFASMFDP, with the appropriate exit specifications.
>
> --
> Walt
>
[prev in list] [next in list] [prev in thread] [next in thread]