SMF Type 80 Record Layout

If you want to customize reporting rather than use TSSUTIL, you can review the layout of the SMF type 80 record, shown in the following table. For an ALT-ACID audit entry, the jobname may appear immediately after the eight-character ACID of the audit record that is produced.
ctsfz
If you want to customize reporting rather than use TSSUTIL, you can review the layout of the SMF type 80 record, shown in the following table. For an ALT-ACID audit entry, the jobname may appear immediately after the eight-character ACID of the audit record that is produced.
SMF Type 80 Record Layout
SMF80FLG
DS
X
X'02'VS2
SMF80RTY
DS
X
80 DECIMAL
SMF80TME
DS
XL4
TIME
SMF80DTE
DS
CL4
DATE
SMF80SID
DS
CL4
SYSTEM ID
SMF80DES
DS
XL2
DESCRIPTOR FLAGS
SMF80EVT
DS
X
EVENT CODE:
$S80INIT
EQU
1
JOB INITIATION
$S80AUTH
EQU
2
AUTHORIZATION CHECK
$S80CMD
EQU
50
AUTH COMMAND
$S80PSWD
EQU
51
PASSWORD CHANGE
$S80COPT
EQU
52
TSS CONTROL OPTIONS
$S80AVO
EQU
55
AVO REQUEST
$S80VOL
EQU
56
VOLUME UPDATE
$S80NVOL
EQU
57
TAPEMNGT ADD VOLUME
$S80DVOL
EQU
58
TAPEMNGT DELETE VOLUME
$S80DUF
EQU
59
DYNAMIC (INSTDATA) UPDATE
$S80ABND
EQU
60
USER ABEND IN CA Top Secret
$S80XDIS
EQU
61
EXIT DISABLED
$S80STSS
EQU
62
START CA Top Secret ADDRESS SPACE
$S80PTSS
EQU
63
STOP CA Top Secret ADDRESS SPACE
$S80STCA
EQU
64
STC OPERATOR ACCOUNTABILITY
$S80STAT
EQU
65
STATISTICS DUMP
*
SMF80EVQ
DS
X
EVENT CODE QUALIFIER
SMF80USR
DS
CL8
ACCESSOR ID
DS
XL2
DS
XL2
DS
XL2
DS
XL2
SMF80REL
DS
CL2
OFFSET TO 1ST EXTENSION
SMF80CNT
DS
XL2
# OF EXTENSION SECTIONS
SMF80ATH
DS
X
AUTHORITY
DS
X
DS
X
DS
X
SMF80TRM
DS
CL8
TERMINAL ID
SMF80JBN
DS
CL8
JOBNAME
SMF80RST
DS
XL4
READER TIME
SMF80RSD
DS
XL4
READER DATE
SMF80UID
DS
CL8
SMF USERID
SMF80VER
DS
X
RACF VERSION
LSMF80
EQU
*-SMF80
SMF80REX
DSECT
SMF80DTP
DS
X
DATA TYPE:
$S80XCMD
EQU
103
IMAGE OF TSS COMMAND
$S80XSRI
EQU
104
SRIPL/PW/AVO
$S80XOPT
EQU
105
IMAGE OF TSS OPTIONS
$S80XFLG
EQU
109
COPY OF FLOG
$S80XHDR
EQU
255
AUDIT/FILE HEADER RECORD
$S80XEND
EQU
0
AUDIT/FILE WRAPPER
SMF80DLN
DS
X
LENGTH OF DATA IN EXT SECTION
SMF80DTA
DS
0X
VARIABLE DATA SECTION
DS
A
RESERVED
DS
X
RESERVED
DS
X
RESERVED
FLIND2
DS
X
AUDIT REASON INDICATOR:
$FLI2ACT
EQU
X'80'
Action Audit
$FLI2RSC
EQU
X'40'
Resource Audit
$FLI2USR
EQU
X'20'
User Audit
$FLI2FAC
EQU
X'10'
Facility Audit
DS
X
RESERVED
FLMODULE
DS
X
SIGNON/SIGNOFF INDICATOR:
$RACINTD
EQU
2
SIGNOFF
$RACINIT
EQU
3
SIGNON
FLFLAGS
DS
X
LOGGING INDICATORS:
$LOGVIOL
EQU
X'80'
VIOLATION
$LOGFORC
EQU
X'40'
FORCED LOG-OUT
$LOGFAIL
EQU
X'20'
TRUE FAILURE
$LOGAUDT
EQU
X'10'
AUDITED EVENT
FLDATE
DS
XL3
DATE (PACKED YYDDDF)
DS
X
RESERVED
FLTIME
DS
XL4
TIME OF DAY (HHMMSSTH)
FLRACC
DS
XL2
REQUESTED ACCESS
ORG
FLRACC+1
FLLTYPE
DS
XL1
SIGNON CREDENTIAL TYPE FIELD   
Note:
This field is populated only for successful signons.
$FLNOPS 
EQU
x’10'
RACROUTE VERIFY PASSCHK=NO USED FOR SIGNON
$FLPMFA
EQU
x’08'
MULTI-FACTOR AUTHENTICATION CREDENTIALS USED FOR SIGNON
$FLPTKT
EQU
x’04'
PASSTICKET CREDENTIALS USED FOR SIGNON
$FLPPHR
EQU
x’02'
PASSPHRASE CREDENTIALS USED FOR SIGNON
$FLPSWD
EQU
x'01'
PASSWORD CREDENTIALS USED FOR SIGNON
$FLKERB
EQU
x'20'
KERBEROS CREDENTIALS USED FOR SIGNON
ORG
FLRACC+2
FLAACC
DS
XL2
ALLOWED ACCESS
ORG
FLAACC+1
FLRETCOD
DS
X
RETURN CODE
FLDETLRC
DS
X
DETAIL REASON CODE
FLJOBTYP
DS
X
FACILITY
FLSVC
DS
X
CALLING SVC
FLCLASS
DS
X
RESOURCE CLASS:
$ARAPPL
EQU
C'A'
APPLICATION
$ARSUBM
EQU
C'B'
SUBMIT ACID
$ARCHANG
EQU
C'C'
SECURITY FILE CHANGE
$ARDSN
EQU
C'D'
DSN PREF
$ARDCT
EQU
C'E'
CICS DCT
$ARFCT
EQU
C'F'
CICS FCT
$ARJCT
EQU
C'J'
CICS JCT
$ARTSS
EQU
C'O'
TSS OPTIONS
$ARPGM
EQU
C'P'
PROGRAM
$ARTERM
EQU
C'T'
TERMINAL
$ARTAPEV
EQU
C'V'
TAPE VOLUME
$ARDASDV
EQU
C'W'
DASD VOLUME
$ARXACTN
EQU
C'X'
TRANSACTION
FLMODE
DS
X
USER'S MODE:
$DORM
EQU
X'80'
DORMANT MODE
$WARN
EQU
X'40'
WARN MODE
$IMPL
EQU
X'30'
IMPL MODE
$FAIL
EQU
X'20'
FAIL MODE
DS
X
RESERVED
FLJOBNUM
DS
XL2
JOBNUMBER (JES FORMAT)
FLNVIOL
DS
X
VIOLATION COUNT (FOR SESSION)
DS
XL3
RESERVED
DS
XL3
RESERVED
FLACID
DS
CL8
ACID NAME
FLJOB
DS
CL8
JOB NAME
DS
XL8
RESERVED
FLVOLSER
DS
CL6
VOLUME SERIAL
FLPGM
DS
CL8
PROGRAM IN CONTROL
FLIND1
DS
X
INDICATORS:
$FLBYPSS
EQU
X'80'
USER IS BYPASSING SEC'Y
$FLNOTIF
EQU
X'40'
ACTION(NOTIFY)
$FLSUSP
EQU
X'20'
SUSPEND ACID
$FLFRAK
EQU
X'10'
FRACHECK-INITIATED LOG
$FLRENMO
EQU
X'04'
RENAME OLD DSN DATA
$FLRENMN
EQU
X'02'
RENAME NEW DSN DATA
$FLRENM
EQU
$FLRENMO+
$FLRENMN
RENAME OLD AND NEW
$FLVSAM
EQU
X'01'
VSAM CATALOG DATA
FLINDEV
DS
CL8
INPUT DEVICE (TERMINAL/READER)
FLATTR1
DS
XL1
USER ATTRIBUTES:
$AMULTPW
EQU
X'80'
PASSWORD PER FACILITY
$ATSOMPW
EQU
X'40'
MULTIPLE TSO UADS PASSWORD
$ANOADSP
EQU
X'20'
DONT USE ADSP (INIT)
$ANOPWC
EQU
X'10'
USER CANNOT CHANGE PASSWORD
$AAUDIT
EQU
X'08'
AUDIT THIS ACID
$AOID
EQU
X'04'
OIDCARD REQUIRED
$ATRACE
EQU
X'02'
TRACE THIS USER
$ANOSUBK
EQU
X'01'
CAN SUBMIT ANY ACID
FLATTR2
DS
XL1
USER ATTRIBUTES:
$A14LIB
EQU
X'80'
PRIV LIB(S) PRESENT IN A/REC
$AERROR
EQU
X'40'
ACT/REC ON FILE IS IN ERROR
$ASUSPND
EQU
X'20'
ACID IS SUSPENDED
$ANORESK
EQU
X'10'
NO RESOURCE CHECKING
$ANOVOLK
EQU
X'08'
NO VOLUME CHECKING
$ANODSNK
EQU
X'04'
NO DATASET CHECKING
$ANOLCFK
EQU
X'02'
NO LCF CHECKING
FLATTR3
DS
XL1
USER ATTRIBUTES:
$AMRO
EQU
X'80'
MRO-SECURITY RECORDS IN CSA
$ASHRPRF
EQU
X'40'
SHARED COMMON PROFILES
$ACON
EQU
X'20'
CONSOLE AUTHORITY
$AGAP
EQU
X'10'
GLOBALLY ADMINISTRABLE PROFILE
$ADUFXTR
EQU
X'08'
DUF EXTRACT
$ADUFUPD
EQU
X'04'
DUF UPDATE
$ASUSPUN
EQU
X'02'
SUSPEND UNTIL IN EFFECT
$ANOVMMD
EQU
X'01'
NO MINIDISK CHECKING
DS
X
RESERVED
FLRTME
DS
XL3
READER START TIME
FLRDTE
DS
XL3
READER START DATE
FLRESL
DS
X
MACHINE LENGTH OF RESOURCE
FLVAR
DS
0X
VARIABLE DATA