The userid field is missing in the z/OS TSIEM chunk records for the first xx minutes of the day.
Diagnosing the problem
zSecure job tagging adds the userid to the records collected from SMF type 30 records.
When INTERVAL(SMF,SYNC) is not used, jobs on z/OS may not write SMF type 30 records for the first SMF interval. In that case zSecure job tagging process can not collect the userid for that period.
Resolving the problem
Specify the SMF option INTERVAL(SMF,SYNC) in the z/OS SMF parameter member SMFPRMxx.
|Security||Tivoli zSecure Admin||z/OS||1.10, 1.11|
|Security||Tivoli Security Information and Event Manager||z/OS||2.0|
|Security||Tivoli Compliance Insight Manager||z/OS||8.0, 8.5|
Rate this page:
Copyright and trademark information
IBM, the IBM logo and ibm.com are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.