On Mon, 9 Feb 2009 16:27:51 +0100, Ferran Perxas <lordbis...@gmail.com> wrote:
>Hi all, > >Thanks for all your answers. I'll explain the whole problem so we can focus >the questions/answers. >Here, in the site i'm working, the developement team works with Natural. The >way they use to invoke these programs is via a call to an assembler >(Software AG) with the PGM Natural to execute, written on the SYSIN >statement. > >In some cases, the developers dynamically build JCL and they submit those >via intrdr from CICS (super "fat-batch-running" transactions), my client >wants to keep this up and working, but i want to know which programs are run >in my productive environement. Or in this case "were" run. > >Because of your answers i can understand that is way impossible for me to >obtain the information submited long ago. But, does anyone have an example >of a userexit that can help me catch this information and direct it to some >kind of log (i.e. not used SMF-record)? > >Thanks all, > >Ferran. > > >On Mon, Feb 9, 2009 at 3:29 PM, David Logan <loga3...@comcast.net> wrote: > >> Yep. If you wanted to log it, you would have to log it manually through an >> exit, like in CI or something. Seems a bit weird to me, but you could do >> it. >> >> David Logan >> Manager of Product Development, Pitney Bowes Business Insight >> http://centrus.com >> W: (720) 564-3056 >> C: (303) 818-8222 >> >> >> -----Original Message----- >> From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On >> Behalf >> Of Ed Finnell >> Sent: Monday, February 09, 2009 07:09 >> To: IBM-MAIN@bama.ua.edu >> Subject: Re: Extracting in-stream dataset (i.e. SYSIN) from SMF >> >> >> In a message dated 2/9/2009 6:58:14 A.M. Central Standard Time, >> lordbis...@gmail.com writes: >> >> belive that the info may be logged in other places than SMF, but i don't >> know where to start searching. >> >> >> >> >> If it is SYSIN DD * it is only kept on SPOOL. If you have shop standards >> that require SYSIN DD DSN=cntl_file you could have a possibility with >> jobnames >> and OPEN/CLOSE or RACF(or equivalent) facilities. >> >> >> >> >> **************A Good Credit Score is 700 or Above. See yours in just 2 easy >> steps! >> ( >> http://pr.atwola.com/promoclk/100000075x1218550342x1201216770/aol?redir=htt >> p:// >> www.freecreditreport.com/pm/default.aspx?sc=668072%26hmpgID=62%26bcd=fe >> bemailfooterNO62<http://www.freecreditreport.com/pm/default.aspx?sc=668072%26hmpgID=62%26bcd=fe%0AbemailfooterNO62> >> ) >> <snip> ....catch this information <snip> How would you know what job(s) to "catch" - maybe by the "called" program? I would be more concerned that you have instream data programs being executed in production mode, uncontrolled, possibly submitted by developers, if I am understanding the circumstances. When a job is purged from the spool (SMF type 26 execution purge node), the job's SYSIN data is also purged. No chance for auditing or post-execution code review. Scott Barry SBBWorks, Inc. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
