Tivoli Workload Scheduler for z/OS audit package
There are three ways to start the Tivoli Workload Scheduler for z/OS audit function:
- Invoking it interactively (option 10.1 from the main menu)
- Submitting from the dialog a batch job (option 10.2 from the main menu)
- Submitting a batch job outside the dialog
The sample library member EQQAUDIB contains a job that is customized at installation time and that you can submit outside the dialog to start the audit function in those cases when either of the two simpler methods cannot be used. The first two methods are useful when there is an urgency to create reports from the job-tracking or track-log data sets. This facilitates searching for answers to critical questions without having to spend too much time to examine the input records with the aid of the mappings listed in the Diagnosis Guide and Reference. The third way is useful in case of a planned utilization: many installations have a need to create and store audit trails for a set period of time. In this case a Tivoli Workload Scheduler for z/OS audit job (copied from the EQQAUDIB CUSTOMIZED) can be defined to run automatically after every daily plan EXTEND or REPLAN, using the data set referenced by EQQTROUT as input.
Even if you are not required to create an audit trail regularly, the report generated can provide quick answers in determining who in your organization requested a function that caused some business application to fail, or to trace the processing of a job that failed and was rerun many times. If your AUDIT initialization statement specifies all data for JS update requests, you can use the audit report to compare against the master JCL to determine exactly which JCL statements were changed.
Figure 5, Figure 6, and Figure 7 show the parts of the report that you can generate using the audit package. The level of reporting for database updates is dependent on the values you specify on the AUDIT initialization statement.
DATE/TIME OF THIS RUN: 110316 18.02 ***************************************************************** * SAMPLE OPC/ESA AUDIT/DEBUG REPORT * * P R O G R A M P A R A M E T E R S * ***************************************************************** * INPUT SOURCE : TRL * * SEARCH-STRING : * * START DATE : * * START TIME : * * END DATE : * * END TIME : * ***************************************************************** **************************************************** * LINES INSERTED BY PROGRAM ARE MARKED '=====>' * * UNKNOWN FIELD VALUES ARE PRINTED AS '?' * * SUMMARY OF SELECTED RECORDS PRINTED ON LAST PAGE * ****************************************************
DATE/TIME OF THIS RUN: 110316 18.02 | | =============> NOW READING FROM EQQTROUT |03/07 11.19.58 CP UPDT BY PERTICA MCP MODIFY APPL: APPLPLUGINS IA: 110224 1210 PRTY: 5 | - OPNO:001 TYPE: EX-COMMAND ISSUED | 03/07 11.19.59 25 SCHD BY OPC JOBNAME: PLUGIN AD: APPLPLUGINS OCC IA: 1102241210 TOKEN: 0000000000000000 | 03/07 11.19.59 29 PROCESSED PC-OCCURRENCE TOKEN: C76158BA53524889 CALLER: WSA REQUEST TIMESTAMP: 0111066F11195946 | CLEANUPEVENT USER ADID: APPLPLUGINS OP: 001 SCHENV: | 03/07 11.19.59 CP UPDT BY OPC_WSA OP.ZCE2_001 IN APPLPLUGINS IS SET TO S JOBNAME: PLUGIN | 03/07 11.19.59 CP OP.ZCE2_001 IN AD/IA: APPLPLUGINS 3902241210 JOBNAME: PLUGIN | 03/07 11.19.59 29 PROCESSED 2O-DESTINATION NAME: ITAVP2 WS STATUS: A OP SYSTEM: WINDOWS | 03/07 11.19.59 29 PROCESSED 2P-OCCURRENCE TOKEN: C76158BA53524889 OP: 001 WSNAME: ZCE2 | 03/07 11.19.59 CP UPDT BY PX2 OP.ZCE2_001 IN APPLPLUGINS IS SET TO E JOBNAME: PLUGIN ERROR CODE: OSUB RESTART BYPASS | 03/07 11.19.59 CP OP.ZCE2_001 IN AD/IA: APPLPLUGINS 3902241210 JOBNAME: PLUGIN R CODE: OSUB RESTART BYPASS | 03/07 11.20.00 29 PROCESSED 2F-OCCURRENCE TOKEN: C76158BA53524889 OP: 001 WSNAME: ZCE2 | 03/07 11.20.02 JS READ BY PERTICA KEY: APPLPLUGINS 1102241210 OPNO:001 JOBNAME: PLUGIN WSNAME: ZCE2 READ FROM: JS-FILE | //TASKTYPE=ws | </jsdl:application> </jsdl:jobDefinition> | 03/07 11.21.47 JS READ BY PERTICA KEY: APPLPLUGINS 1102241210 OPNO:001 JOBNAME: PLUGIN WSNAME: | 03/07 11.21.52 JS DLET BY PERTICA KEY: APPLPLUGINS 1102241210 OPNO:001 | 03/07 11.21.53 JS READ BY PERTICA KEY: APPLPLUGINS 1102241210 OPNO:001 JOBNAME: PLUGIN WSNAME: | 03/07 11.22.25 CP UPDT BY PERTICA MCP MODIFY APPL: APPLPLUGINS IA: 110224 1210 PRTY: 5 | - OPNO:001 TYPE: OP. ADDED JOBNAME: PLUGIN WSID: ZCE2 USERDATA: | - OPNO:001 TYPE: JOB OPTIONS JOBNAME: PLUGIN TIMEJOB: NO AUTOSUB: YES CONDRJ: NO | - OPNO:001 TYPE: DELETE EXTENDED INFO | - OPNO:001 TYPE: OP. ADDED JOBNAME: PLUGIN WSID: ZCE2 USERDATA: | - OPNO:001 TYPE: JOB STATUS NEW OP. STATUS: R | 03/07 11.22.27 CP UPDT BY PERTICA MCP MODIFY APPL: APPLPLUGINS IA: 110224 1210 PRTY: 5 | - OPNO:001 TYPE: EX-COMMAND ISSUED | 03/07 11.22.27 25 SCHD BY OPC JOBNAME: PLUGIN AD: APPLPLUGINS OCC IA: 1102241210 TOKEN: 0000000000000000 | 03/07 11.22.27 29 PROCESSED PC-OCCURRENCE TOKEN: C76158BA53524889 CALLER: WSA REQUEST TIMESTAMP: 0111066F11222728 | CLEANUPEVENT USER ADID: APPLPLUGINS OP: 001 SCHENV: | 03/07 11.22.27 CP UPDT BY OPC_WSA OP.ZCE2_001 IN APPLPLUGINS IS SET TO S JOBNAME: PLUGIN | 03/07 11.22.27 CP OP.ZCE2_001 IN AD/IA: APPLPLUGINS 3902241210 JOBNAME: PLUGIN | 03/07 11.22.27 29 PROCESSED 2P-OCCURRENCE TOKEN: C76158BA53524889 OP: 001 WSNAME: ZCE2 | 03/07 11.22.27 CP UPDT BY PX2 OP.ZCE2_001 IN APPLPLUGINS IS SET TO E JOBNAME: PLUGIN ERROR CODE: OSUB RESTART BYPASS | 03/07 11.22.27 CP OP.ZCE2_001 IN AD/IA: APPLPLUGINS 3902241210 JOBNAME: PLUGIN R CODE: OSUB RESTART BYPASS | 03/07 11.22.27 29 PROCESSED 2F-OCCURRENCE TOKEN: C76158BA53524889 OP: 001 WSNAME: ZCE2 | 03/07 11.29.19 29 PROCESSED NF-HANDSHAKE EVENT. PULSE FROM TRACKER ON: MVS/ESA AT DEST: ******** | 03/07 11.32.24 36 BACKUP WAS TAKEN. DDNAME OF BACKUP CP: EQQCP1DS DDNAME OF JT: EQQJT04 | 03/07 11.32.43 37 EDP TYPE DATA HAS BEEN LOGGED | 03/07 11.32.43 20 JOB TRACKING START EVENT | 03/07 11.32.43 29 PROCESSED NF-HANDSHAKE EVENT. REQUEST BY TRACKER ON: MVS/ESA WITH ID: HWSZ600 | 03/07 11.32.43 29 PROCESSED IJ-SUBMIT SYNCHR. WS:CPU1 WS SEQ£: 00006 EVDS SEQ£: 00006 REQ£: 098 | 03/07 11.32.43 29 PROCESSED NF-HANDSHAKE EVENT. CONFIRM BY TRACKER ON: MVS/ESA AT DEST: ******** | 03/07 11.32.43 29 PROCESSED NF-HANDSHAKE EVENT. PULSE FROM TRACKER ON: MVS/ESA AT DEST: ******** | 03/07 11.32.46 29 DISCARDED 2O-DESTINATION NAME: CWSDDEST WS STATUS: A OP SYSTEM: Z_OS | 03/07 11.32.47 29 DISCARDED 2O-DESTINATION NAME: NEWTEST4 WS STATUS: O OP SYSTEM: | 03/07 11.32.47 29 PROCESSED 2O-DESTINATION NAME: CWSGDEST WS STATUS: A OP SYSTEM: Z_OS | DATE/TIME OF THIS RUN: 110316 18.02| |
03/07 11.32.48 29 PROCESSED 2I-BIND OK TOKEN: C76690B9DF9C0A47 OP: 001 REMOTE OCC IA: 110224 1111 | 03/07 11.32.48 29 PROCESSED 2S-OCCURRENCE TOKEN: C76690B9DF9C0A47 OP: 001 WSNAME: JOB NAME: | 03/11 11.48.31 CP UPDT BY PERTICA MCP MODIFY APPL: APPLCPU1 IA: 010311 1111 PRTY: 5 | - OPNO:001 TYPE: EX-COMMAND ISSUED | 03/11 11.48.31 25 SCHD BY OPC JOBNAME: VPJOB1 AD: APPLCPU1 OCC IA: 0103111111 TOKEN: 0000000000000000 | 03/11 11.48.31 29 PROCESSED PC-OCCURRENCE TOKEN: C7742F948FA8B149 CALLER: WSA REQUEST TIMESTAMP: 0111070F11483174 | CLEANUPEVENT USER ADID: APPLCPU1 OP: 001 SCHENV: | 03/11 11.48.31 CP UPDT BY OPC_WSA OP.CPU1_001 IN APPLCPU1 IS SET TO S JOBNAME: VPJOB1 | 03/11 11.48.31 CP OP.CPU1_001 IN AD/IA: APPLCPU1 2903111111 JOBNAME: VPJOB1 | 03/11 11.48.31 29 PROCESSED IJ-SUBMIT JCL AD/IA: APPLCPU1 0103111111 VPJOB1 (JOB00055) SEQ£: 000008 | 03/11 11.48.31 29 PROCESSED A1-JOB CARD READ VPJOB1 (JOB00055) AT: 11.48.31.82 | 03/11 11.48.31 29 PROCESSED A2-JOB START VPJOB1 (JOB00055) AT: 11.48.31.87 ON NODE: ZDIS1013 CM-DATA: NO | 03/11 11.48.31 29 PROCESSED A3-STEP END VPJOB1 (JOB00055) AT: 11.48.31.93 PRSTEP: S1 CODE: 0000 | 03/11 11.48.32 29 PROCESSED A3-STEP END VPJOB1 (JOB00055) AT: 11.48.32.05 PRSTEP: S2 CODE: 0000 | 03/11 11.48.32 29 PROCESSED A3-JOB COMPLETE VPJOB1 (JOB00055) AT: 11.48.32.05 CODE: 0000 CM-DATA: NO | 03/11 11.48.32 28 FEEDBACK FOR AD: APPLCPU1 £ OPS UPDATED: 000 FOR DURATION: 000 FOR DEADLINE: 000 | 03/11 11.48.32 CP UPDT BY OPC_JT OP.CPU1_001 IN APPLCPU1 IS SET TO C JOBNAME: VPJOB1 RESTART BYPASS | 03/11 11.48.32 CP OP.CPU1_001 IN AD/IA: APPLCPU1 2903111111 JOBNAME: VPJOB1 RESTART BYPASS | 03/11 11.48.32 29 PROCESSED A3-JOB TERMINATE VPJOB1 (JOB00055) AT: 11.48.32.07 CM-DATA: NO | 03/11 11.49.31 29 PROCESSED 0W-WKST EVENT. WSID: FTW1 LINK STATUS: U WS STATUS: FULLY LINKED: LIMIT: | 03/11 11.50.00 36 BACKUP WAS TAKEN. DDNAME OF BACKUP CP: EQQCP2DS DDNAME OF JT: EQQJT02 | =============> EOF REACHED ON EQQTROUT|
DATE/TIME OF THIS RUN: 110316 18.02 PAGE: 0002 | | | *************************************************** | * *RECORDS * EVENTS * | * E V E N T T Y P E NO * READ *SELECTED* | *************************************************** | * DAILY PLAN STATUS RECORD 01 * 000001 * 000000 * | * DAILY PLAN WORK STATIONS 02 * 000010 * 000000 * | * DAILY PLAN OCC/OPER/CONDS 03 * 000020 * 000000 * | * JOB TRACKING START 20 * 000054 * 000054 * | * MANUAL OPERATIONS 23 * 000132 * 000132 * | * MODIFY CURRENT PLAN 24 * 000176 * 000176 * | * OPERATION SCHEDULED 25 * 000049 * 000049 * | * FEEDBACK DATA 28 * 000004 * 000004 * | * AUTOMATIC OPERATIONS 29 * 002327 * 002327 * | * DATA BASE UPDATE 32 * 000263 * 000227 * | * BACKUP LOG RECORD 36 * 000056 * 000056 * | * DATA LOG RECORD * 000056 * 000056 * | * MULTI-RECORD EVENTS * 000006 * 000002 * | *************************************************** | | | ************************************************************ | * MCP PERFORMANCE * NO OF * E L A P S E D T I M E * | * TYPE OF UPDATE * UPDATES * M I N * M A X * A V G * | ************************************************************ | * MCP ADD * 000001 * 0.01 * 0.01 * 0.01 * | * MCP MODIFY * 000066 * 0.01 * 0.22 * 0.01 * | * MCP CHANG WS * 000001 * 0.03 * 0.03 * 0.03 * | * MCP VARY WS * 000001 * 0.01 * 0.01 * 0.01 * | ************************************************************ | | LONGEST MCP-EVENTS: | | 03/09 12.03.00 CP UPDT BY PERTICA MCP MODIFY 0.22SEC APPL: APPLPLUGINS IA: 110224 1210 PRTY: 5 | 03/11 11.47.49 CP UPDT BY PERTICA MCP MODIFY 0.07SEC APPL: APPLCPU1 IA: 110224 1111 PRTY: 5 | 03/09 16.39.22 CP UPDT BY PERTICA MCP MODIFY 0.05SEC APPL: APPLPLUGINS IA: 110224 1210 PRTY: 5 | | ***** END OF REPORT *****