SMF Type 80 Record Layout
If you want to customize reporting rather than use TSSUTIL, you can review the layout of the SMF type 80 record, shown in the following table. For an ALT-ACID audit entry, the jobname may appear immediately after the eight-character ACID of the audit record that is produced.
ctsfz
If you want to customize reporting rather than use TSSUTIL, you can review the layout of the SMF type 80 record, shown in the following table. For an ALT-ACID audit entry, the jobname may appear immediately after the eight-character ACID of the audit record that is produced.
SMF Type 80 Record Layout
| |||
SMF80FLG | DS | X | X'02'VS2 |
SMF80RTY | DS | X | 80 DECIMAL |
SMF80TME | DS | XL4 | TIME |
SMF80DTE | DS | CL4 | DATE |
SMF80SID | DS | CL4 | SYSTEM ID |
SMF80DES | DS | XL2 | DESCRIPTOR FLAGS |
SMF80EVT | DS | X | EVENT CODE: |
$S80INIT | EQU | 1 | JOB INITIATION |
$S80AUTH | EQU | 2 | AUTHORIZATION CHECK |
$S80CMD | EQU | 50 | AUTH COMMAND |
$S80PSWD | EQU | 51 | PASSWORD CHANGE |
$S80COPT | EQU | 52 | TSS CONTROL OPTIONS |
$S80AVO | EQU | 55 | AVO REQUEST |
$S80VOL | EQU | 56 | VOLUME UPDATE |
$S80NVOL | EQU | 57 | TAPEMNGT ADD VOLUME |
$S80DVOL | EQU | 58 | TAPEMNGT DELETE VOLUME |
$S80DUF | EQU | 59 | DYNAMIC (INSTDATA) UPDATE |
$S80ABND | EQU | 60 | USER ABEND IN CA Top Secret |
$S80XDIS | EQU | 61 | EXIT DISABLED |
$S80STSS | EQU | 62 | START CA Top Secret ADDRESS SPACE |
$S80PTSS | EQU | 63 | STOP CA Top Secret ADDRESS SPACE |
$S80STCA | EQU | 64 | STC OPERATOR ACCOUNTABILITY |
$S80STAT | EQU | 65 | STATISTICS DUMP |
* | |||
SMF80EVQ | DS | X | EVENT CODE QUALIFIER |
SMF80USR | DS | CL8 | ACCESSOR ID |
DS | XL2 | ||
DS | XL2 | ||
DS | XL2 | ||
DS | XL2 | ||
SMF80REL | DS | CL2 | OFFSET TO 1ST EXTENSION |
SMF80CNT | DS | XL2 | # OF EXTENSION SECTIONS |
SMF80ATH | DS | X | AUTHORITY |
DS | X | ||
DS | X | ||
DS | X | ||
SMF80TRM | DS | CL8 | TERMINAL ID |
SMF80JBN | DS | CL8 | JOBNAME |
SMF80RST | DS | XL4 | READER TIME |
SMF80RSD | DS | XL4 | READER DATE |
SMF80UID | DS | CL8 | SMF USERID |
SMF80VER | DS | X | RACF VERSION |
LSMF80 | EQU | *-SMF80 | |
SMF80REX | DSECT | ||
SMF80DTP | DS | X | DATA TYPE: |
$S80XCMD | EQU | 103 | IMAGE OF TSS COMMAND |
$S80XSRI | EQU | 104 | SRIPL/PW/AVO |
$S80XOPT | EQU | 105 | IMAGE OF TSS OPTIONS |
$S80XFLG | EQU | 109 | COPY OF FLOG |
$S80XHDR | EQU | 255 | AUDIT/FILE HEADER RECORD |
$S80XEND | EQU | 0 | AUDIT/FILE WRAPPER |
SMF80DLN | DS | X | LENGTH OF DATA IN EXT SECTION |
SMF80DTA | DS | 0X | VARIABLE DATA SECTION |
DS | A | RESERVED | |
DS | X | RESERVED | |
DS | X | RESERVED | |
FLIND2 | DS | X | AUDIT REASON INDICATOR: |
$FLI2ACT | EQU | X'80' | Action Audit |
$FLI2RSC | EQU | X'40' | Resource Audit |
$FLI2USR | EQU | X'20' | User Audit |
$FLI2FAC | EQU | X'10' | Facility Audit |
DS | X | RESERVED | |
FLMODULE | DS | X | SIGNON/SIGNOFF INDICATOR: |
$RACINTD | EQU | 2 | SIGNOFF |
$RACINIT | EQU | 3 | SIGNON |
FLFLAGS | DS | X | LOGGING INDICATORS: |
$LOGVIOL | EQU | X'80' | VIOLATION |
$LOGFORC | EQU | X'40' | FORCED LOG-OUT |
$LOGFAIL | EQU | X'20' | TRUE FAILURE |
$LOGAUDT | EQU | X'10' | AUDITED EVENT |
FLDATE | DS | XL3 | DATE (PACKED YYDDDF) |
DS | X | RESERVED | |
FLTIME | DS | XL4 | TIME OF DAY (HHMMSSTH) |
FLRACC | DS | XL2 | REQUESTED ACCESS |
ORG | FLRACC+1 | ||
FLLTYPE | DS | XL1 | SIGNON CREDENTIAL TYPE FIELD Note: This field is populated only for successful signons. |
$FLNOPS | EQU | x’10' | RACROUTE VERIFY PASSCHK=NO USED FOR SIGNON |
$FLPMFA | EQU | x’08' | MULTI-FACTOR AUTHENTICATION CREDENTIALS USED FOR SIGNON |
$FLPTKT | EQU | x’04' | PASSTICKET CREDENTIALS USED FOR SIGNON |
$FLPPHR | EQU | x’02' | PASSPHRASE CREDENTIALS USED FOR SIGNON |
$FLPSWD | EQU | x'01' | PASSWORD CREDENTIALS USED FOR SIGNON |
$FLKERB | EQU | x'20' | KERBEROS CREDENTIALS USED FOR SIGNON |
ORG | FLRACC+2 | ||
FLAACC | DS | XL2 | ALLOWED ACCESS |
ORG | FLAACC+1 | ||
FLRETCOD | DS | X | RETURN CODE |
FLDETLRC | DS | X | DETAIL REASON CODE |
FLJOBTYP | DS | X | FACILITY |
FLSVC | DS | X | CALLING SVC |
FLCLASS | DS | X | RESOURCE CLASS: |
$ARAPPL | EQU | C'A' | APPLICATION |
$ARSUBM | EQU | C'B' | SUBMIT ACID |
$ARCHANG | EQU | C'C' | SECURITY FILE CHANGE |
$ARDSN | EQU | C'D' | DSN PREF |
$ARDCT | EQU | C'E' | CICS DCT |
$ARFCT | EQU | C'F' | CICS FCT |
$ARJCT | EQU | C'J' | CICS JCT |
$ARTSS | EQU | C'O' | TSS OPTIONS |
$ARPGM | EQU | C'P' | PROGRAM |
$ARTERM | EQU | C'T' | TERMINAL |
$ARTAPEV | EQU | C'V' | TAPE VOLUME |
$ARDASDV | EQU | C'W' | DASD VOLUME |
$ARXACTN | EQU | C'X' | TRANSACTION |
FLMODE | DS | X | USER'S MODE: |
$DORM | EQU | X'80' | DORMANT MODE |
$WARN | EQU | X'40' | WARN MODE |
$IMPL | EQU | X'30' | IMPL MODE |
$FAIL | EQU | X'20' | FAIL MODE |
DS | X | RESERVED | |
FLJOBNUM | DS | XL2 | JOBNUMBER (JES FORMAT) |
FLNVIOL | DS | X | VIOLATION COUNT (FOR SESSION) |
DS | XL3 | RESERVED | |
DS | XL3 | RESERVED | |
FLACID | DS | CL8 | ACID NAME |
FLJOB | DS | CL8 | JOB NAME |
DS | XL8 | RESERVED | |
FLVOLSER | DS | CL6 | VOLUME SERIAL |
FLPGM | DS | CL8 | PROGRAM IN CONTROL |
FLIND1 | DS | X | INDICATORS: |
$FLBYPSS | EQU | X'80' | USER IS BYPASSING SEC'Y |
$FLNOTIF | EQU | X'40' | ACTION(NOTIFY) |
$FLSUSP | EQU | X'20' | SUSPEND ACID |
$FLFRAK | EQU | X'10' | FRACHECK-INITIATED LOG |
$FLRENMO | EQU | X'04' | RENAME OLD DSN DATA |
$FLRENMN | EQU | X'02' | RENAME NEW DSN DATA |
$FLRENM | EQU | $FLRENMO+ $FLRENMN | RENAME OLD AND NEW |
$FLVSAM | EQU | X'01' | VSAM CATALOG DATA |
FLINDEV | DS | CL8 | INPUT DEVICE (TERMINAL/READER) |
FLATTR1 | DS | XL1 | USER ATTRIBUTES: |
$AMULTPW | EQU | X'80' | PASSWORD PER FACILITY |
$ATSOMPW | EQU | X'40' | MULTIPLE TSO UADS PASSWORD |
$ANOADSP | EQU | X'20' | DONT USE ADSP (INIT) |
$ANOPWC | EQU | X'10' | USER CANNOT CHANGE PASSWORD |
$AAUDIT | EQU | X'08' | AUDIT THIS ACID |
$AOID | EQU | X'04' | OIDCARD REQUIRED |
$ATRACE | EQU | X'02' | TRACE THIS USER |
$ANOSUBK | EQU | X'01' | CAN SUBMIT ANY ACID |
FLATTR2 | DS | XL1 | USER ATTRIBUTES: |
$A14LIB | EQU | X'80' | PRIV LIB(S) PRESENT IN A/REC |
$AERROR | EQU | X'40' | ACT/REC ON FILE IS IN ERROR |
$ASUSPND | EQU | X'20' | ACID IS SUSPENDED |
$ANORESK | EQU | X'10' | NO RESOURCE CHECKING |
$ANOVOLK | EQU | X'08' | NO VOLUME CHECKING |
$ANODSNK | EQU | X'04' | NO DATASET CHECKING |
$ANOLCFK | EQU | X'02' | NO LCF CHECKING |
FLATTR3 | DS | XL1 | USER ATTRIBUTES: |
$AMRO | EQU | X'80' | MRO-SECURITY RECORDS IN CSA |
$ASHRPRF | EQU | X'40' | SHARED COMMON PROFILES |
$ACON | EQU | X'20' | CONSOLE AUTHORITY |
$AGAP | EQU | X'10' | GLOBALLY ADMINISTRABLE PROFILE |
$ADUFXTR | EQU | X'08' | DUF EXTRACT |
$ADUFUPD | EQU | X'04' | DUF UPDATE |
$ASUSPUN | EQU | X'02' | SUSPEND UNTIL IN EFFECT |
$ANOVMMD | EQU | X'01' | NO MINIDISK CHECKING |
DS | X | RESERVED | |
FLRTME | DS | XL3 | READER START TIME |
FLRDTE | DS | XL3 | READER START DATE |
FLRESL | DS | X | MACHINE LENGTH OF RESOURCE |
FLVAR | DS | 0X | VARIABLE DATA |