SMF record type 92 reports activity of mounted file systems and files. For more information about SMF record type 92, see z/OS UNIX System Services Planning.
For a description of when open and close records are written, see Accounting for open() and close().
Notes:
- To collect information about the activity of a mounted file system, you must be collecting SMF type 92 subtype 5 (unmount) records at the time the file system is mounted and at the time the file system is unmounted.
- To collect information on the activity of a specific file, you must be collecting SMF type 92 subtype 11 (close) records at the time the file is opened and at the time the file is closed.
The subtypes are:
- Subtype 1 — contains information written when a file system is mounted.
- Subtype 2 — contains information written after the file system is quiesced (or suspended).
- Subtype 4 — contains information written after the file system is unquiesced (or resumed).
- Subtype 5 — contains information written when the file system is unmounted.
- Subtype 6 — contains information written when the file system is remounted.
- Subtype 7 — contains information written when the file system is moved.
- Subtype 10 — contains information written when a file is opened.
- Subtype 11 — contains information written when a file is closed.
- Subtype 12 — contains MMAP subtype information.
- Subtype 13 — contains MUNMAP subtype information.
- Subtype 14 — contains information written when a file or file directory is deleted or renamed.
- Subtype 15 — contains information written when a file's security attributes for APF authorized, program control, or shared library are changed.
- Subtype 16 — contains information written
when a
socket, character special file, pipe, or fifo
is
closed. - Subtype 17 — contains information about how many times a file is accessed throughout the life of an open and is written on the SMF global recording interval.