Jason,
for you first question I could say experience.
All my customer sites have different "hot messages" to look at.
Others are only warning, others (the most of) are simply ignored.
I cannot simply share them.
I could give you some "generic hints" like:
- JES Spool over x% then add a spool volume
- IRA* messages that warn about critical memory issues
- .....
sorry for that.
About SORT, I can give you a sample to approximate what you need even
though it must be tailored to fit your big picture.
Assuming my input, SYSLOG (VBM), and no more than 28 words after the MSGID
and single word max 30 characters.
If some words are separated by more than one blank the multiple spaces will
be reduced to one.
I'm sure Sri can give you something better.
OPTION VLSCMP
INCLUDE COND=(6,1,SS,EQ,C'M')
INREC IFTHEN=(WHEN=INIT,
PARSE=(%00=(ABSPOS=5,FIXLEN=59),
%01=(ENDBEFR=C' ',FIXLEN=30,REPEAT=29)),
BUILD=(1,4,%00,%01,%02,%03,%04,%05,%06,%07,%08,%09,
%10,%11,%12,%13,%14,%15,%16,%17,%18,%19,
%20,%21,%22,%23,%24,%25,%26,%27,%28,%29)),
IFTHEN=(WHEN=(904,3,CH,GE,C'000',AND,907,1,CH,EQ,C' '),
OVERLAY=(904:30X)),
IFTHEN=(WHEN=(874,3,CH,GE,C'000',AND,877,1,CH,EQ,C' '),
OVERLAY=(874:30X)),
IFTHEN=(WHEN=(844,3,CH,GE,C'000',AND,847,1,CH,EQ,C' '),
OVERLAY=(844:30X)),
IFTHEN=(WHEN=(814,3,CH,GE,C'000',AND,817,1,CH,EQ,C' '),
OVERLAY=(814:30X)),
IFTHEN=(WHEN=(784,3,CH,GE,C'000',AND,787,1,CH,EQ,C' '),
OVERLAY=(784:30X)),
IFTHEN=(WHEN=(754,3,CH,GE,C'000',AND,757,1,CH,EQ,C' '),
OVERLAY=(754:30X)),
IFTHEN=(WHEN=(724,3,CH,GE,C'000',AND,727,1,CH,EQ,C' '),
OVERLAY=(724:30X)),
IFTHEN=(WHEN=(694,3,CH,GE,C'000',AND,697,1,CH,EQ,C' '),
OVERLAY=(694:30X)),
IFTHEN=(WHEN=(664,3,CH,GE,C'000',AND,667,1,CH,EQ,C' '),
OVERLAY=(664:30X)),
IFTHEN=(WHEN=(634,3,CH,GE,C'000',AND,637,1,CH,EQ,C' '),
OVERLAY=(634:30X)),
IFTHEN=(WHEN=(604,3,CH,GE,C'000',AND,607,1,CH,EQ,C' '),
OVERLAY=(604:30X)),
IFTHEN=(WHEN=(574,3,CH,GE,C'000',AND,577,1,CH,EQ,C' '),
OVERLAY=(574:30X)),
IFTHEN=(WHEN=(544,3,CH,GE,C'000',AND,547,1,CH,EQ,C' '),
OVERLAY=(544:30X)),
IFTHEN=(WHEN=(514,3,CH,GE,C'000',AND,517,1,CH,EQ,C' '),
OVERLAY=(514:30X)),
IFTHEN=(WHEN=(484,3,CH,GE,C'000',AND,487,1,CH,EQ,C' '),
OVERLAY=(484:30X)),
IFTHEN=(WHEN=(454,3,CH,GE,C'000',AND,457,1,CH,EQ,C' '),
OVERLAY=(454:30X)),
IFTHEN=(WHEN=(424,3,CH,GE,C'000',AND,427,1,CH,EQ,C' '),
OVERLAY=(424:30X)),
IFTHEN=(WHEN=(394,3,CH,GE,C'000',AND,397,1,CH,EQ,C' '),
OVERLAY=(394:30X)),
IFTHEN=(WHEN=(364,3,CH,GE,C'000',AND,367,1,CH,EQ,C' '),
OVERLAY=(364:30X)),
IFTHEN=(WHEN=(334,3,CH,GE,C'000',AND,337,1,CH,EQ,C' '),
OVERLAY=(334:30X)),
IFTHEN=(WHEN=(304,3,CH,GE,C'000',AND,307,1,CH,EQ,C' '),
OVERLAY=(304:30X)),
IFTHEN=(WHEN=(274,3,CH,GE,C'000',AND,277,1,CH,EQ,C' '),
OVERLAY=(274:30X)),
IFTHEN=(WHEN=(244,3,CH,GE,C'000',AND,247,1,CH,EQ,C' '),
OVERLAY=(244:30X)),
IFTHEN=(WHEN=(214,3,CH,GE,C'000',AND,217,1,CH,EQ,C' '),
OVERLAY=(214:30X)),
IFTHEN=(WHEN=(184,3,CH,GE,C'000',AND,187,1,CH,EQ,C' '),
OVERLAY=(184:30X)),
IFTHEN=(WHEN=(154,3,CH,GE,C'000',AND,157,1,CH,EQ,C' '),
OVERLAY=(154:30X)),
IFTHEN=(WHEN=(124,3,CH,GE,C'000',AND,127,1,CH,EQ,C' '),
OVERLAY=(124:30X)),
IFTHEN=(WHEN=(094,3,CH,GE,C'000',AND,097,1,CH,EQ,C' '),
OVERLAY=(094:30X)),
IFTHEN=(WHEN=(064,3,CH,GE,C'000',AND,067,1,CH,EQ,C' '),
OVERLAY=(064:30X))
SORT FIELDS=COPY
OUTFIL FNAMES=SORTOUT,
OUTREC=(1,4,5,59,
64,870,SQZ=(SHIFT=LEFT,MID=C' '))
Best regards.
Max
Il giorno gio 27 lug 2023 alle ore 14:25 Jason Cai <ibmm...@foxmail.com> ha
scritto:
> Dear Max
>
> I am writing to you regarding two questions that I have.
>
> The first question is about how to monitor and alert the system issues. We
> can monitor most of the issues and send alerts to our phones. However, when
> we cannot provide a complete list of msgids to the monitoring system, some
> critical alerts may be missed. How can we minimize the missing of critical
> alerts and also reduce the false alarms? This is our biggest challenge. We
> want to analyze the operlog every day to find out if there are any
> potential risks in the system and also to locate the problem when it
> occurs. I wonder how your shop handles this situation.
>
> The second question is a simplified one. Can dfsort delete the last word
> if the first position is M and the last word is a number?
>
> I appreciate your time and attention.
>
> Sincerely,
> Jason Cai
>
>
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
