Re: CA-TPX and SMF question
Scott, If I needed to be exact, and wanted to parse through every logon/logoff to keep count of how many are logged on at a particular moment in time, I could do that. However, I don't need to be that exact, counts every 15 minutes work just fine for my need. The problem wasn't gaining access to SAS/MXG, it was a problem of finding the correct variable in the correct MXG dataset to give me the info I need. I found it in the TPXSESSN dataset, in the TPXCCNT variable. As I mentioned in a later post, I found which SMF record/variable was needed with some timely help from a CA developer. From there, getting to the correct MXG dataset/variable was a trivial task. Thanks. Rex -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Scott Barry Sent: Wednesday, November 03, 2010 11:52 AM To: IBM-MAIN@bama.ua.edu Subject: Re: CA-TPX and SMF question >IBM Mainframe Discussion List wrote on 10/28/2010 >05:23:16 PM: > >> From: "Pommier, Rex R." > >> Hi list, > >> I can't find the answer in the CA documentation (or on Google) so I >> thought I'd come here. In the TPX SMF records -specifically the >> interval and shutdown records - there is a section that has SACB >> statistics. It has 2 fields in it, current SACBs in use and the >> SACB high water mark. Can somebody tell me just what the SACB is? > >> What I'm actually looking for is something that tells me the maximum >> number of concurrent users of one of the applications I have defined >> to TPX. If I can't get that, the max number of terminal sessions >> signed onto TPX concurrently. I'm hoping the SACB field is the >> latter of these. > >> TIA. > >> Rex > > With SAS (or WPS) and MXG, I expect that you can derive this metric from the Application LOGON/LOGOFF (or alternatively Terminal SIGNON/SIGNOFF) TPX SMF record type/subtype combinations, using the MXG-unique VMXGCNCR macro facility. Otherwise with the TPX data-source record types, you may be able to use some other data analysis tool to generate the desired information. Scott Barry SBBWorks, Inc. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html The information contained in this e-mail may contain confidential and/or privileged information and is intended for the sole use of the intended recipient. If you are not the intended recipient, you are hereby notified that any unauthorized use, disclosure, distribution or copying of this communication is strictly prohibited. If you received this e-mail in error, please reply to sender and destroy or delete the message and any attachments. Thank you. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: CA-TPX and SMF question
>IBM Mainframe Discussion List wrote on 10/28/2010 >05:23:16 PM: > >> From: "Pommier, Rex R." > >> Hi list, > >> I can't find the answer in the CA documentation (or on Google) so I >> thought I'd come here. In the TPX SMF records -specifically the >> interval and shutdown records - there is a section that has SACB >> statistics. It has 2 fields in it, current SACBs in use and the >> SACB high water mark. Can somebody tell me just what the SACB is? > >> What I'm actually looking for is something that tells me the maximum >> number of concurrent users of one of the applications I have defined >> to TPX. If I can't get that, the max number of terminal sessions >> signed onto TPX concurrently. I'm hoping the SACB field is the >> latter of these. > >> TIA. > >> Rex > > With SAS (or WPS) and MXG, I expect that you can derive this metric from the Application LOGON/LOGOFF (or alternatively Terminal SIGNON/SIGNOFF) TPX SMF record type/subtype combinations, using the MXG-unique VMXGCNCR macro facility. Otherwise with the TPX data-source record types, you may be able to use some other data analysis tool to generate the desired information. Scott Barry SBBWorks, Inc. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: CA-TPX and SMF question
Hi Kirk, and others, Yes, TPX has a macro to define the SMRT. The documentation (systems programmer's guide) also has layouts of the SMF records. The doc talks about fields called MONSACBC and MONSACBH, defined as current SACBs and SACB high water mark. Unfortunately, that's the extent of the definitions. Hence my question to the group. Also, yes, there is a TPXOPER command that will give me a snapshot of what I want. But since we are looking for trending information rather than a one-time snapshot, I needed something that wouldn't require me to sit at a terminal and keep hitting the "enter" key to get me the info. A developer from CA contacted me offline and gave me a much better definition of what the SACB is and what it does. The information he gave me showed me that I was looking in the wrong place, and he then pointed me to a different SMF record that did give me the info I was looking for. In the session interval record, there is a field called M9UCNT that shows the number of sessions currently attached to an application. It gave me the info I needed, once I turned on interval recording. :-) Rex -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Kirk Talman Sent: Wednesday, November 03, 2010 9:13 AM To: IBM-MAIN@bama.ua.edu Subject: Re: CA-TPX and SMF question 2 decades ago, when I was a TPX developer, they were SaveAreaControlBlock. They were getmained at startup below the line and chained together. They contained a savearea and two 6 word workareas used by variable management. The available chain was anchored in the SMRT or the SMRT extension. I had code to move some of them above the line and to create stacks but it was never implemented before CA bought out Legent. There should be an TPXOPER command that gives you what you want. For building exits, is there a macro for the SMRT? Oh how I wish we used TPX here. Switch has bugs I remember fixing in TPX. IBM Mainframe Discussion List wrote on 10/28/2010 05:23:16 PM: > From: "Pommier, Rex R." > Hi list, > I can't find the answer in the CA documentation (or on Google) so I > thought I'd come here. In the TPX SMF records -specifically the > interval and shutdown records - there is a section that has SACB > statistics. It has 2 fields in it, current SACBs in use and the > SACB high water mark. Can somebody tell me just what the SACB is? > What I'm actually looking for is something that tells me the maximum > number of concurrent users of one of the applications I have defined > to TPX. If I can't get that, the max number of terminal sessions > signed onto TPX concurrently. I'm hoping the SACB field is the > latter of these. > TIA. > Rex - The information contained in this communication (including any attachments hereto) is confidential and is intended solely for the personal and confidential use of the individual or entity to whom it is addressed. If the reader of this message is not the intended recipient or an agent responsible for delivering it to the intended recipient, you are hereby notified that you have received this communication in error and that any review, dissemination, copying, or unauthorized use of this information, or the taking of any action in reliance on the contents of this information is strictly prohibited. If you have received this communication in error, please notify us immediately by e-mail, and delete the original message. Thank you -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html The information contained in this e-mail may contain confidential and/or privileged information and is intended for the sole use of the intended recipient. If you are not the intended recipient, you are hereby notified that any unauthorized use, disclosure, distribution or copying of this communication is strictly prohibited. If you received this e-mail in error, please reply to sender and destroy or delete the message and any attachments. Thank you. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: CA-TPX and SMF question
2 decades ago, when I was a TPX developer, they were SaveAreaControlBlock. They were getmained at startup below the line and chained together. They contained a savearea and two 6 word workareas used by variable management. The available chain was anchored in the SMRT or the SMRT extension. I had code to move some of them above the line and to create stacks but it was never implemented before CA bought out Legent. There should be an TPXOPER command that gives you what you want. For building exits, is there a macro for the SMRT? Oh how I wish we used TPX here. Switch has bugs I remember fixing in TPX. IBM Mainframe Discussion List wrote on 10/28/2010 05:23:16 PM: > From: "Pommier, Rex R." > Hi list, > I can't find the answer in the CA documentation (or on Google) so I > thought I'd come here. In the TPX SMF records -specifically the > interval and shutdown records - there is a section that has SACB > statistics. It has 2 fields in it, current SACBs in use and the > SACB high water mark. Can somebody tell me just what the SACB is? > What I'm actually looking for is something that tells me the maximum > number of concurrent users of one of the applications I have defined > to TPX. If I can't get that, the max number of terminal sessions > signed onto TPX concurrently. I'm hoping the SACB field is the > latter of these. > TIA. > Rex - The information contained in this communication (including any attachments hereto) is confidential and is intended solely for the personal and confidential use of the individual or entity to whom it is addressed. If the reader of this message is not the intended recipient or an agent responsible for delivering it to the intended recipient, you are hereby notified that you have received this communication in error and that any review, dissemination, copying, or unauthorized use of this information, or the taking of any action in reliance on the contents of this information is strictly prohibited. If you have received this communication in error, please notify us immediately by e-mail, and delete the original message. Thank you -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
CA-TPX and SMF question
Hi list, I can't find the answer in the CA documentation (or on Google) so I thought I'd come here. In the TPX SMF records -specifically the interval and shutdown records - there is a section that has SACB statistics. It has 2 fields in it, current SACBs in use and the SACB high water mark. Can somebody tell me just what the SACB is? What I'm actually looking for is something that tells me the maximum number of concurrent users of one of the applications I have defined to TPX. If I can't get that, the max number of terminal sessions signed onto TPX concurrently. I'm hoping the SACB field is the latter of these. TIA. Rex The information contained in this e-mail may contain confidential and/or privileged information and is intended for the sole use of the intended recipient. If you are not the intended recipient, you are hereby notified that any unauthorized use, disclosure, distribution or copying of this communication is strictly prohibited. If you received this e-mail in error, please reply to sender and destroy or delete the message and any attachments. Thank you. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SMF QUESTION - TRACKING VSAM CLUSTER
Type 63? Have I stepped through a time warp this morning? I thought VSAM catalogs were obsolete years ago. David Elliot zSeries Software Support -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of John Dawes Sent: Monday, June 14, 2010 10:22 AM To: IBM-MAIN@bama.ua.edu Subject: Re: SMF QUESTION - TRACKING VSAM CLUSTER Eureke, record type 63 found it, Thanks to all who helped. --- On Tue, 15/6/10, Patrick Lyon wrote: From: Patrick Lyon Subject: Re: SMF QUESTION - TRACKING VSAM CLUSTER To: IBM-MAIN@bama.ua.edu Received: Tuesday, 15 June, 2010, 1:01 AM On Mon, 14 Jun 2010 07:52:57 -0700, John Dawes wrote: >G'Day All Readers, > >I am trying to find the job name which created a VSAM dsn. I read type 61, 62 & 64 and came up empty. The DSN was created on May 20, 2010. I have read the SMF tapes for the whole week and I didn't find anything. Is there some other SMF type record I should read? > >Thanks John, give types 63 & 69 a try as well. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SMF QUESTION - TRACKING VSAM CLUSTER
Eureke, record type 63 found it, Thanks to all who helped. --- On Tue, 15/6/10, Patrick Lyon wrote: From: Patrick Lyon Subject: Re: SMF QUESTION - TRACKING VSAM CLUSTER To: IBM-MAIN@bama.ua.edu Received: Tuesday, 15 June, 2010, 1:01 AM On Mon, 14 Jun 2010 07:52:57 -0700, John Dawes wrote: >G'Day All Readers, > >I am trying to find the job name which created a VSAM dsn. I read type 61, 62 & 64 and came up empty. The DSN was created on May 20, 2010. I have read the SMF tapes for the whole week and I didn't find anything. Is there some other SMF type record I should read? > >Thanks John, give types 63 & 69 a try as well. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SMF QUESTION - TRACKING VSAM CLUSTER
In a message dated 6/14/2010 10:02:08 A.M. Central Daylight Time, ptl...@midamerican.com writes: John, give types 63 & 69 a try as well. >> Micheal Cleary's DAF pgm is built for this. Name and SMF should filter it all out. If it's a broad range might want to filter VSAM and RACF first then do the search. File094 on cbttape.org -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SMF QUESTION - TRACKING VSAM CLUSTER
I would have thought that you'd find it with SMF61 but if not did you try to see if it was a rename, ie SMF66. Other option would be to check the VVDS update, SMF60 HTH Jack Kelly 202-502-2390 (Office) From: John Dawes To: IBM-MAIN@bama.ua.edu Date: 06/14/2010 10:54 AM Subject: SMF QUESTION - TRACKING VSAM CLUSTER Sent by: IBM Mainframe Discussion List G'Day All Readers, I am trying to find the job name which created a VSAM dsn. I read type 61, 62 & 64 and came up empty. The DSN was created on May 20, 2010. I have read the SMF tapes for the whole week and I didn't find anything. Is there some other SMF type record I should read? Thanks -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SMF QUESTION - TRACKING VSAM CLUSTER
On Mon, 14 Jun 2010 07:52:57 -0700, John Dawes wrote: >G'Day All Readers, > >I am trying to find the job name which created a VSAM dsn. I read type 61, 62 & 64 and came up empty. The DSN was created on May 20, 2010. I have read the SMF tapes for the whole week and I didn't find anything. Is there some other SMF type record I should read? > >Thanks John, give types 63 & 69 a try as well. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
SMF QUESTION - TRACKING VSAM CLUSTER
G'Day All Readers, I am trying to find the job name which created a VSAM dsn. I read type 61, 62 & 64 and came up empty. The DSN was created on May 20, 2010. I have read the SMF tapes for the whole week and I didn't find anything. Is there some other SMF type record I should read? Thanks -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SMF Question
Responding to my own post: Mary, you (and others), may also want to contact IBM. We have an open issue with them on this topic because there is no indication to operators that it is waiting for logstream processing to complete. In some circumstances, I have had to restart JES2 and DFSMShsm to allow the logstream processing to complete. It does not happen very often, but it has happened. Bob -Original Message- From: Richards, Robert B. Sent: Thursday, March 25, 2010 7:08 AM To: 'IBM Mainframe Discussion List' Subject: RE: SMF Question Mary, Are you running with SMF logstreams? If so, you *must* issue the Z EOD (and do not eliminate it as someone else suggested). That process forces the last data in the SMF buffers to be written out to the logstreams. To see if it is done writing, issue D LOGGER or a variation thereof. Bob -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Mary Elwood Sent: Wednesday, March 24, 2010 1:35 PM To: IBM-MAIN@bama.ua.edu Subject: SMF Question We have z/OS 1.11 running on our DEVL system. We shut the system down using the same scripts that are used on the z/OS 1.9 system. We have something really unusual happening. In a D A,L there is nothing running. ACF2 is down, JES2 is down, OMVS filesystem and inits have been shutdown - everything is down. Something is trying to do a SAF call. We are getting ACF92CCC messages telling us security isn't available to reply u c or w. We think whatever it is is trying to write a record to the SMF datasets. Has anyone ever run across this before? Thank you, Mary Global IT Services Information Services Desk: 703-206-4201 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SMF Question
Mary, Are you running with SMF logstreams? If so, you *must* issue the Z EOD (and do not eliminate it as someone else suggested). That process forces the last data in the SMF buffers to be written out to the logstreams. To see if it is done writing, issue D LOGGER or a variation thereof. Bob -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Mary Elwood Sent: Wednesday, March 24, 2010 1:35 PM To: IBM-MAIN@bama.ua.edu Subject: SMF Question We have z/OS 1.11 running on our DEVL system. We shut the system down using the same scripts that are used on the z/OS 1.9 system. We have something really unusual happening. In a D A,L there is nothing running. ACF2 is down, JES2 is down, OMVS filesystem and inits have been shutdown - everything is down. Something is trying to do a SAF call. We are getting ACF92CCC messages telling us security isn't available to reply u c or w. We think whatever it is is trying to write a record to the SMF datasets. Has anyone ever run across this before? Thank you, Mary Global IT Services Information Services Desk: 703-206-4201 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SMF Question
I'm sure you've realized this by now, but D A,L doesn't show all of the tasks that are running. We make a command scripting product and one of the biggest questions we always get is "How do I shut it all down?" There are many USS threads running and there are parts of JES running that all need to be shut down correctly to really get to where you can "without a doubt" say that NOTHING IS RUNNING. It's difficult to say what is still up at your site, but if you have not shut down JES and/or USS completely then you should start there. I can send you the commands to do it smoothly, or I can send you a special little load module that you can use that will kill all of the running processes at shutdown time to make USS much easier (and quicker) to stop. Sometimes sites don't set up their system tasks correctly, or will forget to authorize things so they end up with address spaces floating around that are still trying to stop (or even worse, keep going). Normally it's pretty simple to figure out what is still running that's causing your problem, and it's not unusual for the security system to get upset when tasks are still running when he isn't. :) If you contact me offline we can discuss how to go about getting it located and shutdown smoothly. Brian -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SMF Question
If your shutdown process issues a "Z EOD" command, that may be the source of the SAF call. MVS will automatically switch to a different SMF dataset (i.e. issue OPEN) and that may cause a SAF call. Try removing the "Z EOD" from your shutdown process and see if the problem goes away. -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Mary Elwood Sent: Wednesday, March 24, 2010 10:35 To: IBM-MAIN@bama.ua.edu Subject: SMF Question We have z/OS 1.11 running on our DEVL system. We shut the system down using the same scripts that are used on the z/OS 1.9 system. We have something really unusual happening. In a D A,L there is nothing running. ACF2 is down, JES2 is down, OMVS filesystem and inits have been shutdown - everything is down. Something is trying to do a SAF call. We are getting ACF92CCC messages telling us security isn't available to reply u c or w. We think whatever it is is trying to write a record to the SMF datasets. Has anyone ever run across this before? Thank you, Mary Global IT Services Information Services Desk: 703-206-4201 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SMF Question
Something is trying to do a SAF call. MVS is still up and doing things after you do your 'shutdown', eg your D A command worked, etc. To stop MVS, do a QUIESCE, after it's 'down' and removed from whatever Jack Kelly 202-502-2390 (Office) From: Mary Elwood To: IBM-MAIN@bama.ua.edu Date: 03/24/2010 01:35 PM Subject: SMF Question Sent by: IBM Mainframe Discussion List We have z/OS 1.11 running on our DEVL system. We shut the system down using the same scripts that are used on the z/OS 1.9 system. We have something really unusual happening. In a D A,L there is nothing running. ACF2 is down, JES2 is down, OMVS filesystem and inits have been shutdown - everything is down. Something is trying to do a SAF call. We are getting ACF92CCC messages telling us security isn't available to reply u c or w. We think whatever it is is trying to write a record to the SMF datasets. Has anyone ever run across this before? Thank you, Mary Global IT Services Information Services Desk: 703-206-4201 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SMF Question
System REXX termination? If you can't identify via "manual" means, try a SAF TRACE or SAD. We have z/OS 1.11 running on our DEVL system. We shut the system down using the same scripts that are used on the z/OS 1.9 system. We have something really unusual happening. In a D A,L there is nothing running. ACF2 is down, JES2 is down, OMVS filesystem and inits have been shutdown - everything is down. Something is trying to do a SAF call. We are getting ACF92CCC messages telling us security isn't available to reply u c or w. We think whatever it is is trying to write a record to the SMF datasets. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
SMF Question
We have z/OS 1.11 running on our DEVL system. We shut the system down using the same scripts that are used on the z/OS 1.9 system. We have something really unusual happening. In a D A,L there is nothing running. ACF2 is down, JES2 is down, OMVS filesystem and inits have been shutdown - everything is down. Something is trying to do a SAF call. We are getting ACF92CCC messages telling us security isn't available to reply u c or w. We think whatever it is is trying to write a record to the SMF datasets. Has anyone ever run across this before? Thank you, Mary Global IT Services Information Services Desk: 703-206-4201 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SAS/SMF QUESTION
On Thu, 2 Aug 2007 14:21:49 -0400, J R <[EMAIL PROTECTED]> wrote: >Deja vu! Did we not discuss this before? http://tinyurl.com/2b9ums > >The default disposition should be DISP=(NEW,DELETE,DELETE) > >That being the case, the only dataset that should be deleted would be the newly created one. > It depends on if the DSN is SMS controlled and if you have a product like STOPx37 installed and what it does in a situation like this. It might also depend on what is set in ALLOCxx. Mark -- Mark Zelden Sr. Software and Systems Architect - z/OS Team Lead Zurich North America / Farmers Insurance Group - ZFUS G-ITO mailto:[EMAIL PROTECTED] z/OS and OS390 expert at http://searchDataCenter.com/ateExperts/ Systems Programming expert at http://expertanswercenter.techtarget.com/ Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SAS/SMF QUESTION
Hello Willie, If the dataset was SMS managed then you can use SMF Type 42 records. I has SAS/MXG so I use this code to access SMF type 14,15,17,18, and 64. //* SMF 1415 - Non-VSAM Open/Close records. //* SMF 1718 - Non-VSAM Scratch/Rename records. //* SMF 64 - VSAM Component or Cluster Status options ls=160 ; MACRO STOPOVER MISSOVER % MACRO _DSNLIST 'DATASET.NAME.ONE' 'DATASET.NAME.TWO' % %LET MACKEEP=%QUOTE( MACRO _LTY64X _NULL_ % MACRO _ETY64X % MACRO _VAR1415 dsnresult ( KEEP=DSNAME JOB SYSTEM OPENTIME PROGRAM DDNAME OPEN ACBIN ACBOUT SITUATN ) % MACRO _ETY1415 IF DSNAME IN (_DSNLIST) THEN OUTPUT work.dsnresult ; % MACRO _ETY1718 OPENTIME = READTIME; IF DSNAME IN (_DSNLIST) THEN OUTPUT work.dsnresult ; % MACRO _ETY64 DSNAME = ENTRNAME; IF DSNAME IN (_DSNLIST) THEN OUTPUT work.dsnresult ; % MACRO _ETY64X ; % ); %include sourclib(vmac1415,vmac1718,vmac64); %include sourclib(vmacsmf,imackeep); DATA _VAR1415 _VAR1718 _VAR64 _SMF _CDE1415 _CDE1718 _CDE64 proc sort data=work.dsnresult ; by opentime ; options linesize=160 nocaps; proc print uniform noobs split='*' ; var dsname job system opentime program ddname open acbin acbout situatn ; title 'Dataset access report'; Regards Bruce Hewson -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SAS/SMF QUESTION
The only time I have seen an existing dataset deleted when JCL specified or defaulted to disposition new was when the job was being run under CA7 (actually CA11 rerun manager) and it deletes existing datasets of that name to prevent "not cataloged 2" (even for normal runs). -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SAS/SMF QUESTION
Was it really deleted or perhaps just uncataloged/renamed? When was the last time is was used successfully? You should also be looking at types 18, 65, and 66 -Original Message- From: willie bunter [mailto:snip] Sent: Thursday, August 02, 2007 9:00 AM To: IBM-MAIN@BAMA.UA.EDU Subject: SAS/SMF QUESTION Hallo, I am trying to track down the culprit who deleted a production library. I ran a SAS/SMF job but no records were found. I ran it for TYPE 17 as well as for TYPE14 & 15 but to no avail. Anybody can suggest that there is something else I could try? Below is my code for type 14 & 15 : DATA RAWOUT(KEEP=PRODUCT SYSTEM DSNAME GENDATE GENTIME JOBNAME); TRACK=0; JOBNAME = ''; INFILE SMF END=EOF; INPUT @2 RECID PIB1. @; IF RECID = 14 THEN GO TO REC14; IF RECID = 15 THEN GO TO REC14; INPUT;DELETE; REC14: INPUT @2 RECID PIB1. @3 GENTIME PIB4. @7 GENDATE PD4. @15 JOBNAME $8. @65 DSNAME $44. @65 DSPREF $11. @65 DSL20 $20. @183 VOLSER $6. @; GENTIME=GENTIME/100; IF DSL20 = 'AM1.JCLERROR.DATALIB' THEN DO; PRODUCT = 'GOTIT'; GO TO GETINFO; END; INPUT;DELETE; GETINFO: OUTPUT RAWOUT; RETURN; PROC SORT DATA=RAWOUT;BY PRODUCT SYSTEM DSNAME GENDATE GENTIME JOBNAME; PROC PRINT DATA=RAWOUT;BY PRODUCT SYSTEM DSNAME;ID GENDATE; Thanks - Need a vacation? Get great deals to amazing places on Yahoo! Travel. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SAS/SMF QUESTION
Deja vu! Did we not discuss this before? http://tinyurl.com/2b9ums The default disposition should be DISP=(NEW,DELETE,DELETE) That being the case, the only dataset that should be deleted would be the newly created one. > Date: Thu, 2 Aug 2007 12:29:33 -0400> From: [EMAIL PROTECTED]> Subject: Re: > SAS/SMF QUESTION> To: IBM-MAIN@BAMA.UA.EDU> > I had a similar issue with a > deleted dataset.> > Turned out I had to go back 3 weeks to find the job that > had deleted it. I knew it was a nonvsam data set so I just scanned the 14, > 15, 17, 18 records. The 60 records are needed if it is VSAM.> > What happened > was a batch job had failed to code the JCL properly. Had a blank after the > data set name and before the DISP parm.> > //STEPLIB DD > DSN=prod.data.set.name ,DISP=SHR> > When this job ended the data set will be > deleted as soon as the other enqueues against it were gone. This took 3 weeks > (this was an IMS RESLIB data set).> > Next thing we knew, IMS would not come > up because this file had been deleted.> > > So, have you gone far enough back > in the SMF data to find the culprit.> > Lizette _ Recharge--play some free games. Win cool prizes too! http://club.live.com/home.aspx?icid=CLUB_wlmailtextlink -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SAS/SMF QUESTION
Deja vu! Did we not discuss this before? http://tinyurl.com/2b9ums The default disposition should be DISP=(NEW,DELETE,DELETE) That being the case, the only dataset that should be deleted would be the newly created one. > Date: Thu, 2 Aug 2007 12:29:33 -0400> From: [EMAIL PROTECTED]> Subject: Re: > SAS/SMF QUESTION> To: IBM-MAIN@BAMA.UA.EDU> > I had a similar issue with a > deleted dataset.> > Turned out I had to go back 3 weeks to find the job that > had deleted it. I knew it was a nonvsam data set so I just scanned the 14, > 15, 17, 18 records. The 60 records are needed if it is VSAM.> > What happened > was a batch job had failed to code the JCL properly. Had a blank after the > data set name and before the DISP parm.> > //STEPLIB DD > DSN=prod.data.set.name ,DISP=SHR> > When this job ended the data set will be > deleted as soon as the other enqueues against it were gone. This took 3 weeks > (this was an IMS RESLIB data set).> > Next thing we knew, IMS would not come > up because this file had been deleted.> > > So, have you gone far enough back > in the SMF data to find the culprit.> > Lizette> >>> >> Anybody can suggest > that there is something else I could try? > >> >Wille - we also have a SAS > job that we use to find out such information.> >> >Here we also check record > types of 17, 18, 61, 62, 64, 65, and 66.> >> > > --> For > IBM-MAIN subscribe / signoff / archive access instructions,> send email to > [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO> Search the archives at > http://bama.ua.edu/archives/ibm-main.html _ PC Magazine’s 2007 editors’ choice for best web mail—award-winning Windows Live Hotmail. http://imagine-windowslive.com/hotmail/?locale=en-us&ocid=TXT_TAGHM_migration_HMWL_mini_pcmag_0707 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SAS/SMF QUESTION
I had a similar issue with a deleted dataset. Turned out I had to go back 3 weeks to find the job that had deleted it. I knew it was a nonvsam data set so I just scanned the 14, 15, 17, 18 records. The 60 records are needed if it is VSAM. What happened was a batch job had failed to code the JCL properly. Had a blank after the data set name and before the DISP parm. //STEPLIB DD DSN=prod.data.set.name ,DISP=SHR When this job ended the data set will be deleted as soon as the other enqueues against it were gone. This took 3 weeks (this was an IMS RESLIB data set). Next thing we knew, IMS would not come up because this file had been deleted. So, have you gone far enough back in the SMF data to find the culprit. --- Looks like an excellent argument for RACF protection. IACC of READ might be most appropriate here. I HIGHLY recommend DAF, from the CBT site, to find the culprit. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SAS/SMF QUESTION
Lizette, I checked the dsn is a PDS. That's why I have been honing on to type 14,15, & 17. Lizette Koehler <[EMAIL PROTECTED]> wrote: I had a similar issue with a deleted dataset. Turned out I had to go back 3 weeks to find the job that had deleted it. I knew it was a nonvsam data set so I just scanned the 14, 15, 17, 18 records. The 60 records are needed if it is VSAM. What happened was a batch job had failed to code the JCL properly. Had a blank after the data set name and before the DISP parm. //STEPLIB DD DSN=prod.data.set.name ,DISP=SHR When this job ended the data set will be deleted as soon as the other enqueues against it were gone. This took 3 weeks (this was an IMS RESLIB data set). Next thing we knew, IMS would not come up because this file had been deleted. So, have you gone far enough back in the SMF data to find the culprit. Lizette >> >> Anybody can suggest that there is something else I could try? > >Wille - we also have a SAS job that we use to find out such information. > >Here we also check record types of 17, 18, 61, 62, 64, 65, and 66. > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html - Yahoo! oneSearch: Finally, mobile search that gives answers, not web links. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SAS/SMF QUESTION
I had a similar issue with a deleted dataset. Turned out I had to go back 3 weeks to find the job that had deleted it. I knew it was a nonvsam data set so I just scanned the 14, 15, 17, 18 records. The 60 records are needed if it is VSAM. What happened was a batch job had failed to code the JCL properly. Had a blank after the data set name and before the DISP parm. //STEPLIB DD DSN=prod.data.set.name ,DISP=SHR When this job ended the data set will be deleted as soon as the other enqueues against it were gone. This took 3 weeks (this was an IMS RESLIB data set). Next thing we knew, IMS would not come up because this file had been deleted. So, have you gone far enough back in the SMF data to find the culprit. Lizette >> >> Anybody can suggest that there is something else I could try? > >Wille - we also have a SAS job that we use to find out such information. > >Here we also check record types of 17, 18, 61, 62, 64, 65, and 66. > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SAS/SMF QUESTION
On Thu, 2 Aug 2007 09:00:24 -0700, willie bunter <[EMAIL PROTECTED]> wrote: >Hallo, > > Anybody can suggest that there is something else I could try? Wille - we also have a SAS job that we use to find out such information. Here we also check record types of 17, 18, 61, 62, 64, 65, and 66. HTH, PTL -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SAS/SMF QUESTION
Willie, Unless you enjoy re-creating the wheel, download the DAF (Dataset Audit Facility) from the CBT.org. It's free, reads SMF data and is designed to do exactly what you're looking for. I am trying to track down the culprit who deleted a production library. I ran a SAS/SMF job but no records were found. I ran it for TYPE 17 as well as for TYPE14 & 15 but to no avail. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
SAS/SMF QUESTION
Hallo, I am trying to track down the culprit who deleted a production library. I ran a SAS/SMF job but no records were found. I ran it for TYPE 17 as well as for TYPE14 & 15 but to no avail. Anybody can suggest that there is something else I could try? Below is my code for type 14 & 15 : DATA RAWOUT(KEEP=PRODUCT SYSTEM DSNAME GENDATE GENTIME JOBNAME); TRACK=0; JOBNAME = ''; INFILE SMF END=EOF; INPUT @2 RECID PIB1. @; IF RECID = 14 THEN GO TO REC14; IF RECID = 15 THEN GO TO REC14; INPUT;DELETE; REC14: INPUT @2 RECID PIB1. @3 GENTIME PIB4. @7 GENDATE PD4. @15 JOBNAME $8. @65 DSNAME $44. @65 DSPREF $11. @65 DSL20 $20. @183 VOLSER $6. @; GENTIME=GENTIME/100; IF DSL20 = 'AM1.JCLERROR.DATALIB' THEN DO; PRODUCT = 'GOTIT'; GO TO GETINFO; END; INPUT;DELETE; GETINFO: OUTPUT RAWOUT; RETURN; PROC SORT DATA=RAWOUT;BY PRODUCT SYSTEM DSNAME GENDATE GENTIME JOBNAME; PROC PRINT DATA=RAWOUT;BY PRODUCT SYSTEM DSNAME;ID GENDATE; Thanks - Need a vacation? Get great deals to amazing places on Yahoo! Travel. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
RES: smf question
Yes, there are three SMF records: Record Type 61 - Define Catalog entry, Record Type 65 - Delete Catalog entry and Record Type 66 - Alter Catalog entry. If you have any doubt don't hesitate to contact me. Roberto Pacheco GFS Software Phone: +55 11 3817 6313 e-mail: [EMAIL PROTECTED] -Mensagem original- De: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] Em nome de Matt Dazzo Enviada em: terça-feira, 14 de novembro de 2006 13:41 Para: IBM-MAIN@BAMA.UA.EDU Assunto: smf question Is there an smf record to track when a catalog was changed/updated or when a dataset was uncataloged? We have a mystery as to how several datasets were deleted in the mvs catalog then scratched by the tape management system. Thanks -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: smf question
Check the SMF manual for record types 61/65/66. Don Imbriale -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Matt Dazzo Sent: Tuesday, November 14, 2006 11:41 AM To: IBM-MAIN@BAMA.UA.EDU Subject: smf question Is there an smf record to track when a catalog was changed/updated or when a dataset was uncataloged? We have a mystery as to how several datasets were deleted in the mvs catalog then scratched by the tape management system. Thanks *** Bear Stearns is not responsible for any recommendation, solicitation, offer or agreement or any information about any transaction, customer account or account activity contained in this communication. *** -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: smf question
You might download the DAF file from CBT.org. That's assuming that you're cutting the relevant SMF records which other postings have pointed you to. -Original Message- From: Matt Dazzo [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 14, 2006 11:41 AM To: IBM-MAIN@BAMA.UA.EDU Subject: smf question Is there an smf record to track when a catalog was changed/updated or when a dataset was uncataloged? We have a mystery as to how several datasets were deleted in the mvs catalog then scratched by the tape management system. Thanks -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: smf question
Types 61, 64, and 65 track catalog DEFINE, ALTER, and DELETE. Larry Crilley Dino Software, Corp. http://www.dino-software.com/ 412.734.2853 -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Matt Dazzo Sent: Tuesday, November 14, 2006 11:41 AM To: IBM-MAIN@BAMA.UA.EDU Subject: smf question Is there an smf record to track when a catalog was changed/updated or when a dataset was uncataloged? We have a mystery as to how several datasets were deleted in the mvs catalog then scratched by the tape management system. Thanks -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: smf question
>Is there an smf record to track when a catalog was changed/updated or when a dataset was uncataloged? We have a mystery as to how several datasets were deleted in the mvs catalog then scratched by the tape management system. Thanks I recommend you get DAF (Dataset Audit Facility) here: http://www.cbttape.org/cbt/CBT094.zip. Most of the time, CA1 has decided to scratch the tape and the scratch and clean job uncataloged the tape dataset. Regards, John -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: smf question
> -Original Message- > From: IBM Mainframe Discussion List > [mailto:[EMAIL PROTECTED] On Behalf Of Matt Dazzo > Sent: Tuesday, November 14, 2006 10:41 AM > To: IBM-MAIN@BAMA.UA.EDU > Subject: smf question > > > Is there an smf record to track when a catalog was changed/updated or > when a dataset was uncataloged? We have a mystery as to how several > datasets were deleted in the mvs catalog then scratched by the tape > management system. Thanks > Yes. Documented in the SMF manual. http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/IEA2G270/CCON TENTS type 17 (scratch nonvsam), 18 (rename nonvsam), 60-69. -- John McKown Senior Systems Programmer HealthMarkets Keeping the Promise of Affordable Coverage Administrative Services Group Information Technology This message (including any attachments) contains confidential information intended for a specific individual and purpose, and its content is protected by law. If you are not the intended recipient, you should delete this message and are hereby notified that any disclosure, copying, or distribution of this transmission, or taking any action based on it, is strictly prohibited. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
smf question
Is there an smf record to track when a catalog was changed/updated or when a dataset was uncataloged? We have a mystery as to how several datasets were deleted in the mvs catalog then scratched by the tape management system. Thanks -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
