ACFRPTSG - CA Statistics Report

1
acf2src
 
 
1
 
 
To monitor and assist in determining and identifying potential security issues and problems, CA ACF2 gathers statistics for Sysplex Coupling Facility, Cache Facility, Command Propagation Facility (CPF), SAF RACROUTE requests, and z/OS UNIX System Services requests and logs them to SMF using the standard CA ACF2 SMF record. These records can assist you in determining or identifying potential security related issues and problems.
Running the Report Using the ISPF Panel
You can use the ACFRPTSG ISPF panel to run a report.
 
Function
 
Specifies the name of the security Function for which you want statistics reported. See the list of possible security functions you might see in this field and a brief description of each in Functions.
Note: The FUNCTION parameter is mutually exclusive with the INCLUDE and the EXCLUDE parameter.
 
Include
Specifies multiple security functions for statistics are to be reported. Functions specified in INCLUDE can be masked with a '-'.
Note: This parameter is mutually exclusive with the FUNCTION parameter.
 
Exclude
Specifies security functions that are to be omitted from the report. Functions specified in EXCLUDE can be masked with a '-'.
Note: This parameter is mutually exclusive with the FUNCTION parameter.
 
LOGSTREAM
Indicates if LOGSTREAM SMF data needs to be retrieved. This parameter is available for z/OS1.9 and higher when the SNF data is being captured by a LGR LOGSTREAM structure. When Y is specified an ACFRPTAL is displayed to provide specific logstream parameters.
If you enter 'Y' in the Specify Security Function field the following screen displays. Specify an individual function or all functions.
---------------------ACFRPTSG - CA Statistics Log----------------------- COMMAND ===> Optional Parameters for ACFRPTSG: Function ===> (ALL)
If you enter 'Y' in the Specify Include field the following screen displays. Enter the specific functions to be included in the report.
---------------------ACFRPTSG - CA Statistics Log---------------------- COMMAND ===> Additional parameters for ACFRPTSG: INCLUDE => => => =>
If you enter 'Y' in the Specify Exclude field the following screen displays. Enter the specific functions to be excluded from the report.
---------------------ACFRPTSG - CA Statistics Log---------------------- COMMAND ===> Additional parameters for ACFRPTSG: EXCLUDE => => => =>
Running the Report Using JCL
This ACFRPTSG report uses standard CA ACF2 report JCL like the following for batch submission:
//ACFRPTSG JOB 1,'STATS RPT',MSGCLASS=A,TYPRUN=HOLD //* //REPORT EXEC PGM=ACFRPTSG,PARM='TITLE(CA STATS)' //* //SYSPRINT DD SYSOUT=* //SYSUDUMP DD SYSOUT=* //RECMAN1 DD DSN=SYS1.MAN1,DISP=SHR //SYSIN DD DUMMY //
Parameters
 
Function(function)
Specifies the name of the security function for which you want statistics reported. Possible values for this field are shown in Function Field Values.
Note: The FUNCTION parameter is mutually exclusive with the INCLUDE and the EXCLUDE parameter.
 
INCLUDE(function1, function2)
Specifies security functions for which you want statistics reported. Functions specified in INCLUDE can be masked with a '-'. Possible values for this field are shown in Function Field Values.
Note: This parameter is mutually exclusive with the FUNCTION parameter.
 
EXCLUDE(function1,function2,…)
Specifies multiple security functions that are to be omitted from the report. Services specified in EXCLUDE can be masked with a '-'. Possible values for this field are shown in Function Field Values.
Note: This parameter is mutually exclusive with the FUNCTION parameter.
Common Parameters
The ACFRPTSG panel accepts the following parameters. 
 
  • LINECNT
  • TITLE
  • FORMAT
  • SDATE
  • STIME
  • EDATE
  • ETIME
  • SELECT
Sample Output
The following sample shows a ACFRPTSG report with SYSPLEX, CACHE, CPF, and RACROUTE statitcs:
CA ACF2 Security - CA Statistics Log 12/20/05 ............................................................................ SYSPLEX Statistics: 12/20/05 7.17.57 CPUID: CPU1 Number of writes: 10 Number of reads: 250 Number of deletes: 15 Number of messages sent: 25 Number of message gets: 30 Percent full: 3% CACHE Statistics: 12/20/05 7.32.57 CPUID: XE69 LIDS Records: 285 Reads: 15 Writes: 8 INFO Records: 0 Reads: 31 Writes: 0 RULE Records: 1 Reads: 17 Writes: 0 CPF Statistics: 12/20/05 7.32.57 CPUID: XE69 XE43 INB CMD REQ: 3 OUT CMD RESP: 3 OUT CMD REQ: 4 INB CMD RESP: 4 INB PSW REQ: 0 OUT PSW RESP: 0 OUT PSW REQ: 0 INB PSW RESP: 0 RET RECS: 0 RACROUTE Calls: 12/20/05 7.32.57 CPUID: XE69 REQUEST = AUDIT 0 REQUEST = AUTH 162 REQUEST = DEFINE 243 REQUEST = DIRAUTH 58 REQUEST = EXTRACT 51 REQUEST = STAT 31
Field Descriptions
 
FUNCTION
The security function requested. See the list of possible functions you might see in this field and a brief description of each in the Function Field Values section. Note: When using only 1 value can be specified at any given time.
 
INCLUDE
The security function or functions requested. See the list of possible functions you might see in this field and a brief description of each in the Function Field Values section.
Note: INCLUDE accepts multiple values as well as masked values.
 
EXCLUDE
The security function or functions to be omitted from the report. See the list of possible security functions you might see in this field and a brief description of each in the Function Field Values section.
EXCLUDE accepts multiple values as well as masked values.
Function Field Values
Possible values for the FUNCTION, INCLUDE, and EXCLUDE fields of the ACFRPTSG report follows.
The value reported is maintained in full word counters and therefore the maximum value that may be displayed is 4,294,967,295.
CACHE
Returns the statistics collected from the CACHE Facility. The following statistics are returned:
  • Total number of records in the LIDS cache
  • Total number of reads serviced in the LIDS cache
  • Total number of writes serviced in the LIDS cache
  • Total number of records in the INFO cache
  • Total number of reads serviced in the INFO cache
  • Total number of writes serviced in the INFO cache
  • Total number of records in the RULE cache
  • Total number of reads serviced in the RULE cache
  • Total number of writes serviced in the RULE cache
 
CPF
 
  • CPF
    Return the statistics collected from the Command Propagation Facility. The following statistics are returned for each node:
  • INB CMD REQ
    Total number of inbound command requests
  • OUT CMD RESP
    Total number of outbound command responses
  • OUT CMD REQ
    Total number of outbound command requests
  • INB CMD RESP
    Total number of inbound command responses
  • INB PSW REQ
    Total number of inbound password requests
  • OUT PSW RESP
    Total number of outbound password responses
  • OUT PSW REQ
    Total number of outbound password requests
  • INB PSW RESP
    Total number of inbound password responses
  • RET RECS
    Total number of returned outbound requests
 
RACROUTE
Returns the SAF RACROUTE request statistics. The following statistics are returned:
  • Total number of REQUEST= AUTH
  • Total number of REQUEST= FASTAUTH
  • Total number of REQUEST= LIST
  • Total number of REQUEST= DEFINE
  • Total number of REQUEST= VERIFY
  • Total number of REQUEST= EXTRACT
  • Total number of REQUEST= DIRAUTH
  • Total number of REQUEST= TOKENMAP
  • Total number of REQUEST= VERIFYX
  • Total number of REQUEST= TOKENXTR
  • Total number of REQUEST= TOKENBLD
  • Total number of REQUEST= EXTRACT (BRANCH)
  • Total number of REQUEST= AUDIT
  • Total number of REQUEST= STAT
  • Total number of REQUEST= SIGNON
  • Total number of REQUEST= TOKENMAP (Cross memory MODE)
  • Total number of REQUEST= EXTRACT (Cross memory MODE)
 
SYSPLEX
Returns the statistics collected from the Sysplex Coupling Facility. The following statistics are returned:
  • Total number of writes
  • Total number of reads
  • Total number of deletes
  • Total number of messages sent
  • Total number of messages retrieved
  • Percent full