TSIEM z/OS Agent does not collect the userid field.

Technote (troubleshooting)


Problem(Abstract)

The userid field is missing in the z/OS TSIEM chunk records for the first xx minutes of the day.

Diagnosing the problem

zSecure job tagging adds the userid to the records collected from SMF type 30 records.
When INTERVAL(SMF,SYNC) is not used, jobs on z/OS may not write SMF type 30 records for the first SMF interval. In that case zSecure job tagging process can not collect the userid for that period.

Resolving the problem

Specify the SMF option INTERVAL(SMF,SYNC) in the z/OS SMF parameter member SMFPRMxx.

Cross reference information
Segment Product Component Platform Version Edition
Security Tivoli Security Information and Event Manager z/OS 2.0
Security Tivoli Compliance Insight Manager z/OS 8.5

Rate this page:

(0 users)Average rating

Add comments

Document information


More support for:

IBM Security zSecure Admin

Software version:

1.11, 1.12, 1.13.0, 1.13.1, 2.1

Operating system(s):

z/OS

Software edition:

Enterprise

Reference #:

1619980

Modified date:

2013-11-13

Translate my page

Machine Translation

Content navigation