Re: z/VM RACF AUDIT RECORD

2010-03-17 Thread Alan Altmark
On Wednesday, 03/17/2010 at 01:15 EDT, Kris Buelens wrote: > You can update it on the fly > - link in RO mode, get the file and update it on your Adisk > - CP SP PUN RACFVM CLASS X > - DISK DUMP SMF CONTROL A > - SET SECUSER RACFM * > - CP SEND CP RACFVM SPOOL RDR CLASS X > - CP SEND RACFVM DISK

Re: z/VM RACF AUDIT RECORD

2010-03-17 Thread Kris Buelens
t; > *Cell - 443 632-4191* > > > > *From:* The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] *On > Behalf Of *Kris Buelens > *Sent:* Wednesday, March 17, 2010 1:15 PM > *To:* IBMVM@LISTSERV.UARK.EDU > *Subject:* Re: z/VM RACF AUDIT RECORD > > > > Y

Re: z/VM RACF AUDIT RECORD

2010-03-17 Thread Martin, Terry R. (CMS/CTR) (CTR)
Support Office - 443 348-2102 Cell - 443 632-4191 From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Kris Buelens Sent: Wednesday, March 17, 2010 1:15 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: z/VM RACF AUDIT RECORD You can update it on the fly - link in

Re: z/VM RACF AUDIT RECORD

2010-03-17 Thread Kris Buelens
You can update it on the fly - link in RO mode, get the file and update it on your Adisk - CP SP PUN RACFVM CLASS X - DISK DUMP SMF CONTROL A - SET SECUSER RACFM * - CP SEND CP RACFVM SPOOL RDR CLASS X - CP SEND RACFVM DISK LOAD (REPLACE Voila... I use DISK DUMP as I don't know if RACF's 190 disk

Re: z/VM RACF AUDIT RECORD

2010-03-17 Thread Rob van der Heij
On Wed, Mar 17, 2010 at 3:45 PM, Scott Rohling wrote: > EDIT is not a valid VMLINK option - not sure what you intended ...   you WRITE is probably what he meant. And maybe even WRITE FILEL to make sure you don't forget to give it back... But indeed, only when RACFVM does not have it R/W already

Re: z/VM RACF AUDIT RECORD

2010-03-17 Thread Martin, Terry R. (CMS/CTR) (CTR)
Support Office - 443 348-2102 Cell - 443 632-4191 From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Scott Rohling Sent: Wednesday, March 17, 2010 10:45 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: z/VM RACF AUDIT RECORD EDIT is not a valid VMLINK option - not

Re: z/VM RACF AUDIT RECORD

2010-03-17 Thread Scott Rohling
* > > *z/OS and z/VM Performance Tuning and Operating Systems Support* > > *Office - 443 348-2102* > > *Cell - 443 632-4191* > > > > *From:* The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] *On > Behalf Of *Bruce Hayden > *Sent:* Wednesday, March 17,

Re: z/VM RACF AUDIT RECORD

2010-03-17 Thread Martin, Terry R. (CMS/CTR) (CTR)
...@listserv.uark.edu] On Behalf Of Bruce Hayden Sent: Wednesday, March 17, 2010 9:02 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: z/VM RACF AUDIT RECORD Just to expand on the CPU id field in SMF CONTROL - from the doc: VMSP is the ID of the CPU where RACF generates the SMF records. RACF limits the CPU ID to

Re: z/VM RACF AUDIT RECORD

2010-03-17 Thread Bruce Hayden
Just to expand on the CPU id field in SMF CONTROL - from the doc: VMSP is the ID of the CPU where RACF generates the SMF records. RACF limits the CPU ID to four characters. It is used as an identifier for SMF records and should not be confused with the larger CPU ID in z/VM systems. And as I know

Re: z/VM RACF AUDIT RECORD

2010-03-17 Thread Jeffrey Forte
:Re: z/VM RACF AUDIT RECORD Sent by:The IBM z/VM Operating System

Re: z/VM RACF AUDIT RECORD

2010-03-17 Thread Kris Buelens
I don't think it can be changed, and,it is only 4 characters, revealing the fact that RACFVM was ported from MVS where some kind of system ID was limited to 4 characters. 2010/3/16 Martin, Terry R. (CMS/CTR) (CTR) > Hi > > > > I am collecting z/VM RACF Audit records from SMF and I see a SYSID

z/VM RACF AUDIT RECORD

2010-03-16 Thread Martin, Terry R. (CMS/CTR) (CTR)
Hi I am collecting z/VM RACF Audit records from SMF and I see a SYSID of 'VMSP'. I would like to change this to match the LPAR name can this be changed and if so where is found? User DateTime Jobname Description Sys DATAMOVE 14 Mar 2010 05:29:45.56 RAC