zSecure Audit Reporting Invalid Dates from CICS SMF110 Records

Technote (troubleshooting)


Problem(Abstract)

While reporting on CICS SMF110 records using zSecure Audit, the dates reported are varied and not current (years earlier or later than present time), and data reported looks a bit off. The data is recognizable in many cases, but clearly not correct..

Symptom

Data is recognizable, but not correct.


Cause

CICS monitor records (SMF110) come in two formats, compressed and uncompressed, which is controlled by an option within CICS. The compression is a simple run length encoding (RLE) which is why the records still look normal and "almost correct".

Environment

CICS with the compression of monitor SMF records enabled.

Resolving the problem

You will need to change the compression parameter and request that the records be written without compression.

Rate this page:

(0 users)Average rating

Add comments

Document information


More support for:

IBM Security zSecure Audit for RACF

Software version:

1.11, 1.12, 1.13.0, 1.13.1, 2.1

Operating system(s):

z/OS

Software edition:

Enterprise

Reference #:

1512412

Modified date:

2014-08-07

Translate my page

Machine Translation

Content navigation