kolusu Site Admin
Joined: 26 Nov 2002 Posts: 12367 Topics: 75 Location: San Jose
|
Posted: Tue Jul 19, 2016 10:57 am Post subject: Re: SMF 80... |
|
|
raj051076 wrote: | I tried my best to read and find a solution myself which I thought I will share. But I am stuck:(
I am trying to extract information from SMF80DTA to get the resource name but could not find out the right way to do it. I have read the manuals and understood that I need to take the base offset from SMF80RL2(which I did) for the relocation section. But then how do I parse the relocation section? Any help with this will be much appreciated. I am trying to create a RACF event log report from this data
Thanks
Rajib |
Rajib,
SMF80DTA is based off the offset that is stored in SMF80REL and NOT SMF80RL2. Resource name is the first field in the SMF80DTA.
Secondly I am not even sure as to why you want to re-invent the wheel when there are RACF reporter utilities which would generate the reports for you.
Check out RACF Security Server Auditor's Guide for for samples of RACF Report Writer
Something like this
The RACF report writer
Sample RACFRW CONTROL Report statements
Sample job
Code: |
//STEP0100 EXEC PGM=IFASMFDP
//SYSPRINT DD SYSOUT=*
//SYSUDUMP DD SYSOUT=*
//SYSUT1 DD DISP=SHR,DSN=Your Input SMF DSN
//SYSUT2 DD DSN=&&TYPE80,DISP=(NEW,PASS),
// UNIT=(SYSDA,4),SPACE=(CYL,(100,50),RLSE)
//*
//SYSIN DD *
INDD(SYSUT1,OPTIONS(DUMP))
OUTDD(SYSUT2,TYPE(80))
/*
//********************************************************************
//** GENERATE THE REPORT FOR VIOLATIONS **
//********************************************************************
//STEP0200 EXEC PGM=IKJEFT01
//SORTWK01 DD UNIT=SYSDA,SPACE=(CYL,(40,10),RLSE)
//SYSPRINT DD SYSOUT=*
//SYSTSPRT DD SYSOUT=*
//RSMFIN DD DISP=(SHR,PASS,DELETE),DSN=&&TYPE80
//SYSTSIN DD *
RACFRW TITLE('RACF REPORTS') GENSUM
SELECT VIOLATIONS
LIST TITLE('ACCESS VIOLATIONS SUMMARY REPORT')
SUMMARY RESOURCE BY(USER)
END
//* |
_________________ Kolusu - DFSORT Development Team (IBM)
DFSORT is on the Web at:
www.ibm.com/storage/dfsort
www.linkedin.com/in/kolusu |
|