For commands involving data transfer (APPEND, RETR, STOU or STOR) an SMF record will be written for both successfully and unsuccessfully completed data transfer commands which have begun data transfer. For data transfer commands which have completed unsuccessfully, the byte count of transmission field will contain the number of bytes transferred before the failure, and the recent server reply field will contain the 3-digit error reply code sent to the client. See the information about type 118 records and type 119 records in z/OS Communications Server: IP Programmer's Guide and Reference to find the particular offsets for the record type being used.
The FTP server can also write SMF records when a login attempt fails.
The capability also exists for a user-written exit routine to get control before the SMF records are written. See Configuring the optional FTP user exits for more information.
If you want the FTP server to write SMF type 118 (X'76') or type 119 (X'77') SMF records, you must include at least one of the SMF subtype statements (SMF, SMFAPPE, SMFDEL, SMFLOGN, SMFREN, SMFRETR, or SMFSTOR) in the FTP.DATA data set.
If SMF subtype statements are not coded in the FTP.DATA data set, no SMF records are written by the FTP server.