TSSRPTSG Statistics Report

To monitor and assist in determining and identifying potential security issues and problems, CA Top Secret gathers statistics for the:
ctsfz
To monitor and assist in determining and identifying potential security issues and problems, CA Top Secret gathers statistics for the:
  • Sysplex Coupling Facility
  • Cache Facility
  • Command Propagation Facility (CPF)
  • CMDSTATS
  • Workload
  • IOSTATS
  • SAF RACROUTE requests
  • SECCACHE Facility
The statistics are logged to SMF using the standard CA Top Secret SMF record.
Run the TSSRPTSG Report
TSSRPTSG uses standard CA Top Secret report JCL for batch submission. An example is as follows:
//TSSRPTSG JOB 1,'STATS RPT',MSGCLASS=A //* //REPORT EXEC PGM=TSSRPTSG //* //RECMAN1 DD DSN=IFASMF.XE15.SMFLOG,DISP=SHR, //SUBSYS=(LOGR,IFASEXIT) //SYSPRINT DD SYSOUT=* //SYSUDUMP DD SYSOUT=* //SYSIN DD * INCLUDE(-) //
The report also accepts input through the PARM field, as shown in the following JCL:
//TSSRPTSG JOB 1,'STATSRPT',MSGCLASS=A, //* //REPORT EXEC PGM=TSSRPTSG,PARM=('INCLUDE(-)', // 'EXCLUDE(CACHE,CMDSTATS),LINECNT(20)') //RECMAN1 DD DSN=SYS1.MAN1,DISP=SHR //SYSPRINT DD SYSOUT=* //SYSUDUMP DD SYSOUT=* //SYSIN DD DUMMY //
With the exception of PRINTER|TERMINAL, parameters must be separate by commas and must have input enclosed in parentheses. Features within a parameter specification must also be separated by commas -- for example, INCLUDE(CACHE,SYSPLEX,RACROUTE).
  •  
    FUNCTION(
    feature
    )
    Specifies the name of the security feature for which statistics are reported. Valid values are CACHE, CPF, RACROUTE, SYSPLEX, CMDSTATS, WORKLOAD, IOSTATS, and SECCACHE. Choose an applicable value to invoke specific statistics reporting.
    Only one feature value can be specified for the FUNCTION parameter. This parameter is mutually exclusive with the INCLUDE and EXCLUDE parameters.
  •  
    INCLUDE(
    feature1
    ,
    feature2
    ,…)
    Specifies the name of the security feature or features for which statistics are reported. Specified features can be masked with a dash (-). An example is INCLUDE(C-). Valid values are CACHE, CPF, RACROUTE, SYSPLEX, CMDSTATS, WORKLOAD, IOSTATS, and SECCACHE. Choose an applicable value to invoke specific statistics reporting. You can also specify INCLUDE(-) to report on all features.
    This parameter is mutually exclusive with the FUNCTION parameter.
  •  
    EXCLUDE(
    feature1
    ,
    feature2
    ,…)
    Specifies security features to be omitted from the report. Specified features can be masked with a dash (-) -- for example EXCLUDE(RAC-). Valid values are CACHE, CPF, RACROUTE, SYSPLEX, CMDSTATS, WORKLOAD, IOSTATS, and SECCACHE. Choose an applicable value to invoke specific statistics reporting.
    This parameter is mutually exclusive with the FUNCTION parameter.EXCLUDE is useful when you have specified INCLUDE(-) (to report on all features) but want to exclude some specific features.
  •  
    LINECNT(
    value
    )
    Specifies the number of lines printed per page. Specify a numeric value for this parameter.
    Default
    : 60
  •  
    TITLE(
    value
    )
    Specifies a 1- to 35-character string that is part of the report's page header.
    Example: 
    TITLE(TEST REPORT - APRIL 2014)
    Default
    : CA Statistics Log
  •  
    SDATE(
    yyddd|1yyddd
    )
    Specifies the beginning date from which records should be selected for the report. Valid input consists of numeric values in one of the following formats:
    •  
       
      yyddd
       
      Specifies a year value (
      yy
      ) that represents a year between 1900 and 1999 and a day value (
      ddd
      ) that represents a day of the year between 1 and 365.
      Example:
       SDATE(98031) specifies to select report records beginning on the 31st day of 1998.
    •  
      1
      yyddd
       
      Specifies 1 (to indicate the 21st century), a year value (
      yy
      ) that represents a year between 2000 and 2069, and a day value (
      ddd
      ) that represents a day of the year between 1 and 365.
      Example:
       SDATE(126060) specifies to select report records beginning on the 60th day of 2026.
    Default
    : 00000
  •  
    EDATE(
    yyddd|
    1
    yyddd
    )
    Specifies the ending date from which records should be selected for the report. Valid input consists of numeric values in one of the following formats:
    •  
       
      yyddd
       
      Specifies a year value (
      yy
      ) that represents a year between 1900 and 1999 and a day value (
      ddd
      ) that represents a day of the year between 1 and 365.
      Example:
       SDATE(98031) specifies to select report records until the 31st day of 1998.
    •  
      1
      yyddd
       
      Specifies 1 (to indicate the 21st century), a year value (
      yy
      ) that represents a year between 2000 and 2069, and a day value (
      ddd
      ) that represents a day of the year between 1 and 365.
      Example:
       SDATE(126060) specifies to select report records until the 60th day of 2026.
    Default
    : 99365
  •  
    STIME(
    hhmm
    )
    Specifies the beginning time from which records are selected for the report. Valid input is numeric values in 
    hhmm 
    format.
    Example:
     STIME(0900)
    Default
    : 0000
  •  
    ETIME(
    hhmm
    )
    Specifies the ending time for which records are selected for the report. Valid input is numeric values in hhmm format.
    Example:
     ETIME(1700)
    Default
    : 2359
  •  
    PRINTER|TERMINAL
    Specifies a report output format:
    •  
      PRINTER
      Produces a report format that is designed for output to a 133-column line printer.
    •  
      TERMINAL
      Produces a format that is designed to fit a limited width display terminal.
Function Field Values
The FUNCTION, INCLUDE, and EXCLUDE fields of the TSSRPTSG report accept the following values:
  •  
    CACHE
    Returns the following statistics collected from the CACHE Facility:
    • Total maximum size of the CACHE
    • Total size of the CACHE in use
    • Total number of calls received in CACHE
    • Total number of calls satisfied in CACHE
    • Total number of times CACHE cleared
  •  
    CPF
    Returns statistics collected from the Command Propagation Facility. The following statistics are returned for each node:
    • Total number of inbound command requests
    • Total number of outbound command requests
    • Total number of inbound password requests
    • Total number of outbound password requests
    • Total number of returned outbound requests
  •  
    RACROUTE
    Returns the following SAF RACROUTE request statistics:
    • Total number of REQUEST= AUTH
    • Total number of REQUEST= FASTAUTH
    • Total number of REQUEST= LIST
    • Total number of REQUEST= DEFINE
    • Total number of REQUEST= VERIFY
    • Total number of REQUEST= EXTRACT
    • Total number of REQUEST= DIRAUTH
    • Total number of REQUEST= TOKENMAP
    • Total number of REQUEST= VERIFYX
    • Total number of REQUEST= TOKENXTR
    • Total number of REQUEST= TOKENBLD
    • Total number of REQUEST= EXTRACT (BRANCH)
    • Total number of REQUEST= AUDIT
    • Total number of REQUEST= STAT
    • Total number of REQUEST= SIGNON
    • Total number of REQUEST= TOKENMAP (Cross memory MODE)
    • Total number of REQUEST= EXTRACT (Cross memory MODE)
  •  
    SYSPLEX
    Returns the following statistics collected from the Sysplex Coupling Facility:
    • Total number of writes
    • Total number of reads
    • Total number of deletes
    • Total number of messages sent
    • Total number of messages retrieved
  •  
    CMDSTATS
    Returns the following statistics collected from commands entered in CA Top Secret:
    • Total number of CREATE commands issued
    • Total number of DELETE commands issued
    • Total number of ADD commands issued
    • Total number of REPLACE command issued
    • Total number of RENAME commands issued
    • Total number of REMOVE commands issued
    • Total number of PERMIT commands issued
    • Total number of REVOKE commands issued
    • Total number of WHOOWNS commands issued
    • Total number of WHOHAS commands issued
    • Total number of LIST commands issued
    • Total number of HELP commands issued
    • Total number of LOCK commands issued
    • Total number of UNLOCK commands issued
    • Total number of WHOAMI commands issued
    • Total number of MODIFY commands issued
    • Total number of ADMIN commands issued
    • Total number of DEADMNIN commands issued
    • Total number of MOVE commands issued
    • Total number of REFRESH commands issued
    • Total number of GENCERT commands issued
    • Total number of GENREQ commands issued
    • Total number of EXPORT commands issued
    • Total number of CHKCERT commands issued
    • Total number of MLWRITE commands issued
    • Total number of REKEY commands issued
    • Total number of ROLLOVER commands issued
  •  
    WORKLOAD
    Returns the following statistics collected from the use of Command Processor Subtasks within CA Top Secret Security:
    • Total number of commands issued
    • Command Processor Subtask 1 (percent use)
    • Command Processor Subtask 2 (percent use)
    • Command Processor Subtask 3 (percent use)
    • Command Processor Subtask 4 (percent use)
    • Command Processor Subtask 5 (percent use)
    • Command Processor Subtask 6 (percent use)
    • Command Processor Subtask 7 (percent use)
    • Command Processor Subtask 8 (percent use)
    • Command Processor Subtask 9 (percent use)
    • Command Processor Subtask 10 (percent use)
  •  
    IOSTATS
    Returns the following statistics collected from Input/Output activity within CA Top Secret Security:
    • Number of RACINITS
    • Number of SRI Calls
    • Total RACINITS,RACHECKS,RACDEFS,RACLISTS
    • Number of Violations
    • Number of EXEC intercepts
    • Number of SMF Records Dumped
    • Number of Security File Changes
    • Number of Security File Changes Dumped
    • Number of Audit Records Written
    • Number of Reads to the Security File
    • Number of Writes to the Security File
    • Number of Waits High Water Mark
    • Number of RCBs in WAIT Queue
    • Number of Lock I/Os issued
    • Number of Failed lock I/Os
  •  
    SECCACHE
    Returns the following statistics collected from the SECCACHE facility:
    • Maximum size of cache data area
    • Size of cache data area in use
    • Percentage of cache data area in use
    • Maximum number of index entries
    • Number of index entries in use
    • Percentage of index entries in use
    • Number of successful ADD requests
    • Number of successful DELETE requests
    • Total number of GET requests
    • Number of satisfied GET requests
    • Percentage of GET requests satisfied
    • Number of SHARE enqueue waits
    • Number of EXCLUSIVE enqueue waits
    • Number of data area alloc failures
    • Number of index area alloc failures
    • Lowest security record size in cache
    • Highest security record size in cache
    • Average security record size in cache
    • Record expiration interval in hours
    • Threshold full warning level