545
BIM-ALERT/VSE VSE External Resource Security Manager Auditing and Report Writing Guide Release 5.1 BIM-ALERT/VSE™ allows you to control user access to datasets, programs, libraries, sublibraries, JCL keywords, ICCF pseudo partitions, and other resources without changes to JCL. • Advantages of using BIM-ALERT/VSE™ include low overhead with no penalties for operation, comprehensive z/VSE resource security, security system auditability, and ease of use. • BIM-ALERT/VSE™ is unsurpassed in operating efficiency and ease of use for non-technical auditors, security administrators, and other personnel. BIM-ALERT/VSE™ provides comprehensive security for your z/VSE batch environment BIM-ALERT/CICS CICS Security Manager BIM-ALERT/CICS™ facilities are easy to use, even for non-technical personnel—no need to write programs, change JCL, or learn a “rules” language. • BIM-ALERT/CICS™ requires a minimum of memory and DASD, and was written with attention to minimizing the number of security- checking cycles. Your system does not bog down with BIM-ALERT/CICS, so your users won’t be slowed down, either. BIM-ALERT/CICS™ provides online, menu-driven screens for defining security at all levels—for each user, department, and section. BIM-ALERT/CICS™ provides comprehensive security for CICS transactions, programs, files, and maps

BIM-ALERT™ 5.1 Auditing and Report Writing Guide VSE External Resource Security Manager Auditing and Report Writing Guide Release 5.1 • BIM-ALERT/VSE allows you to control user

Embed Size (px)

Citation preview

BIM-ALERT/VSE™VSE External Resource Security Manager

Auditing and Report Writing Guide

Release 5.1

• BIM-ALERT/VSE™ allows you to control user access to datasets, programs, libraries, sublibraries, JCL keywords, ICCF pseudo partitions, and other resources without changes to JCL.

• Advantages of using BIM-ALERT/VSE™ include low overhead with no penalties for operation, comprehensive z/VSE resource security, security system auditability, and ease of use.

• BIM-ALERT/VSE™ is unsurpassed in operating efficiency and ease of use for non-technical auditors, security administrators, and other personnel.

BIM-ALERT/VSE™ provides comprehensive security for your z/VSE batch environment

BIM-ALERT/CICS™CICS Security Manager

• BIM-ALERT/CICS™ facilities are easy to use, even for non-technical personnel—no need to write programs, change JCL, or learn a “rules” language.

• BIM-ALERT/CICS™ requires a minimum of memory and DASD, and was written with attention to minimizing the number of security-checking cycles. Your system does not bog down with

BIM-ALERT/CICS, so your users won’t be slowed down, either.

• BIM-ALERT/CICS™ provides online, menu-driven screens for defining security at all levels—for each user, department, and section.

BIM-ALERT/CICS™ provides comprehensive security for CICS transactions, programs, files, and maps

This documentation applies to Release 5.1 of the program product BIM-ALERT.

Original Printing .................03/14/2000 Last Revised .......................03/23/2001

iii

Contents

Trademark Information .......................................................................................... ix Related Publications ................................................................................................ x

Chapter 1 Using the BIM-ALERT Batch Report Writer ........................................ 1-1

About This Chapter .................................................................................................. 1-2 About the Batch Report Writer .................................................................................. 1-3

Introduction .......................................................................................................... 1-3 Installation ........................................................................................................... 1-4 Execution ............................................................................................................. 1-5 Input ..................................................................................................................... 1-8 Processing .......................................................................................................... 1-10 Output Reports ................................................................................................... 1-11

Sample Commands Page ................................................................................ 1-11 Sample Header Page....................................................................................... 1-12 Sample Detail Page Header ............................................................................ 1-13 Detail Page Lines ........................................................................................... 1-13

Chapter 2 Commands ............................................................................................... 2-1

Introduction .............................................................................................................. 2-2 About This Chapter .............................................................................................. 2-2 Conventions.......................................................................................................... 2-3 Syntax Rules ......................................................................................................... 2-4 Order of Commands ............................................................................................. 2-7

Command Descriptions ............................................................................................. 2-8 HELP Command .................................................................................................. 2-8

Input ................................................................................................................ 2-8 Output .............................................................................................................. 2-8

OPTIONS Command .......................................................................................... 2-11 XFORM Command ............................................................................................ 2-14 REPORT Command ........................................................................................... 2-18 TITLES Command ............................................................................................. 2-23 SUBTITLE Command ........................................................................................ 2-25 FIELDS Command ............................................................................................. 2-32 FIELD Command ............................................................................................... 2-34 FILEDUMP Command ....................................................................................... 2-38

Output ............................................................................................................ 2-39 SELECT IF Command ....................................................................................... 2-40 RUN Command .................................................................................................. 2-46

Chapter 3 ALRTVCSC Security File Report (CICS) .............................................. 3-1

Introduction .............................................................................................................. 3-3 General Information ............................................................................................. 3-3 Sample JCL .......................................................................................................... 3-3 Input Record Description ...................................................................................... 3-4

Map Field Information (Type 04010000) .......................................................... 3-4 ALERT-Transaction Information (Type 06010000) .......................................... 3-4 Terminal Schedule Information (Type 06020000) ............................................ 3-5 Authorized Transaction Information (Type 06030000) ..................................... 3-5

iv Auditing and Report Writing Guide

Authorized Program Information (Type 06040000) .......................................... 3-5 Authorized File Information (Type 06050000) ................................................. 3-5 Restricted Map Information (Type 06060000) .................................................. 3-5 ALERT-Transaction Information (Type 07010000).......................................... 3-6 Operator Schedule Information (Type 07020000) ............................................. 3-6 Authorized Transaction Information (Type 07030000) ..................................... 3-6 Authorized Program Information (Type 07040000) .......................................... 3-6 Authorized File Information (Type 07050000) ................................................. 3-6 Authorized Map Information (Type 07060000) ................................................ 3-6 Authorized Field Resource Information (Type 07070000) ................................ 3-7 Field Segment Information (Type 08010000) ................................................... 3-7 Field Segment Information (Type 09010000) ................................................... 3-7 Group Alert-Transaction Information (Type 0A010000) .................................. 3-7 Group Authorized Transaction Information (Type 0A030000) ......................... 3-8 Group Authorized Program Information (Type 0A040000) .............................. 3-8 Group Authorized File Information (Type 0A050000)...................................... 3-8 Group Authorized Map Information (Type 0A060000) .................................... 3-8 Group Authorized Field Information (Type 0A070000) .................................... 3-8 User Group Names Information (Type 0B010000) ........................................... 3-8 User Group Authorized Transaction Information (Type 0B020000) ................. 3-9 User Group Authorized Program Information (Type 0B030000) ...................... 3-9 User Group Authorized File Information (Type 0B040000) .............................. 3-9 User Group Authorized Map Information (Type 0B050000) ............................. 3-9 User Group Authorized Field Resource Information (Type 0B060000) ............. 3-9 User Group Excluded Transaction Information (Type 0B070000) .................. 3-10 User Group Excluded Program Information (Type 0B080000) ....................... 3-10 User Group Excluded File Information (Type 0B090000) ............................... 3-10 User Group Excluded Map Information (Type 0B0A0000) ............................. 3-10 User Group Excluded Field Resource Information (Type 0B0B0000) ............. 3-10

Field Information ............................................................................................... 3-11 Fieldname List ........................................................................................................ 3-13

Common Segment Fields .................................................................................... 3-13 Transaction Record Fields .................................................................................. 3-17 Program Record Fields ....................................................................................... 3-19 File Record Fields ............................................................................................... 3-21 Map Record Fields.............................................................................................. 3-24 Location Record Fields ....................................................................................... 3-27 Terminal Record Fields ...................................................................................... 3-30 Operator Record Fields ....................................................................................... 3-61 Field Resource Information Fields .................................................................... 3-110 Field Resource Security Information Fields ....................................................... 3-117 Group Security Information Fields .................................................................... 3-121 User Group Record Fields ................................................................................. 3-130 User Profile Record Fields ................................................................................ 3-134

Sample ALRTVCSC Reports ................................................................................ 3-138 Introduction ...................................................................................................... 3-138 S1B500 System Transaction Security Report .................................................... 3-138 S1B510 System Program Security Report ......................................................... 3-140 S1B520 System File Security Report ................................................................. 3-141 S1B530 System Map Display Security Report ................................................... 3-142 S1B540 Organizational Information Report ...................................................... 3-143

Related Publications v

Operator and Terminal Reports......................................................................... 3-144 Operator Security Report - Access Time Report ................................................ 3-145 Operator Authorization Report ......................................................................... 3-147 Operator Sign-On Report .................................................................................. 3-149

Chapter 4 ALRTVVSC Security File Report (VSE) ................................................ 4-1

Introduction .............................................................................................................. 4-2 General Information ............................................................................................. 4-2 Sample JCL .......................................................................................................... 4-2 Input Record Description ...................................................................................... 4-3

Task ID Build Information: Fields (Type 01010000) ....................................... 4-3 SECID Job Entry Source (Type 04010000) ....................................................... 4-3 SECID Job Entry Mode (Type 04020000) ........................................................ 4-3 SECID RJENODE Information (Type 04030000) ............................................. 4-3 SECID RJEUID Information (Type 04040000)................................................. 4-3

Fieldname List .......................................................................................................... 4-7 Common Segment Fields ...................................................................................... 4-7 User Record Fields .............................................................................................. 4-12 Jobmask Record Fields........................................................................................ 4-16 SECID Record Fields .......................................................................................... 4-18 DASD and Tape Dataset Record Fields ............................................................... 4-20 Resource Record Fields ....................................................................................... 4-26 Reference Record Field ....................................................................................... 4-29 Node Information Fields ..................................................................................... 4-30 Remote Submittal Information Fields .................................................................. 4-32 XPCC Submittal Information Fields ................................................................... 4-34

Sample ALRTVVSC Report ................................................................................... 4-35 Introduction ........................................................................................................ 4-35 Logical Table Ruleset Report .............................................................................. 4-35

Chapter 5 ALRTVCVI Violation Log File Report (CICS) ...................................... 5-1

Introduction .............................................................................................................. 5-2 General Information ............................................................................................. 5-2 Sample JCL .......................................................................................................... 5-3 Input Record Description ...................................................................................... 5-4 Field Information .................................................................................................. 5-5

Fieldname List .......................................................................................................... 5-7 Common Segment Fields ...................................................................................... 5-7 Initialization Record Field .................................................................................. 5-12 Sign-On and Sign-Off Record Fields................................................................... 5-13 Violation Record Fields ...................................................................................... 5-17

Sample ALRTVCVI Reports ................................................................................... 5-22 Introduction ........................................................................................................ 5-22 S1B190 Security Violation Report ...................................................................... 5-22 S1B192 Security Violation Report ...................................................................... 5-24

Chapter 6 ALRTVVVI Violation Log File Report (VSE) ........................................ 6-1

Introduction .............................................................................................................. 6-2 General Information ............................................................................................. 6-2 Sample JCL .......................................................................................................... 6-3 Input Record Description ...................................................................................... 6-4

vi Auditing and Report Writing Guide

Field Information ................................................................................................. 6-5 Fieldname List .......................................................................................................... 6-7

Common Segment Fields ...................................................................................... 6-7 Access Check Information .................................................................................. 6-11

Sample ALRTVVVI Reports .................................................................................. 6-32 Introduction ........................................................................................................ 6-32 Dataset Name Report .......................................................................................... 6-32 User Entry Report ............................................................................................... 6-34 Resource Class Report ........................................................................................ 6-35 SECID/User Dataset Summary Report ................................................................ 6-37 SECID/User Resource Summary Report ............................................................. 6-38

Chapter 7 ALRTVCAU Audit File Report (CICS).................................................. 7-1

Introduction .............................................................................................................. 7-3 General Information ............................................................................................. 7-3 Sample JCL .......................................................................................................... 7-3 Input Record Description ...................................................................................... 7-4

System Options Or Parameter Lists (Type 01010000) ...................................... 7-4 System Option Values (Type 01020000) .......................................................... 7-4 System Parameter Values (Type 01030000) ..................................................... 7-4 Terminal or Operator Parameter Values (Type 01040000) ............................... 7-4 Terminal Or Operator Data List (Type 02010000) ........................................... 7-4 Terminal Or Operator Data Fields (Type 02020000) ........................................ 7-4 User Profile Data Fields (Type 02030000) ........................................................ 7-5 Secured Resource Information List (Type 03010000) ....................................... 7-5 Secured Resource Field Values (Type 03020000) ............................................. 7-5 Restricted Map Field Information (Type 03030000) ......................................... 7-5 Field Resource Field Values for Files (Type 03040000) .................................... 7-5 Field Resource Segments for Files (Type 03040100) ........................................ 7-5 Field Resource Field Values for Maps (Type 03050000) ................................... 7-5 Field Resource Segments for Maps (Type 03050100) ....................................... 7-5 Secured Resource Authorization Lists (Type 04010000) ................................... 7-5 Activate Or Deactivate Data Fields (Type 05010000) ....................................... 7-5 Administrator Maintenance Information (Type 06010000) ............................... 7-6 Location ID Information List (Type 07010000) ................................................ 7-6 Location ID Field Values (Type 07020000) ...................................................... 7-6

Field Information ................................................................................................. 7-7 Fieldname List .......................................................................................................... 7-9

Common Segment Fields ...................................................................................... 7-9 System Options and Parameter Fields ................................................................. 7-15 Terminal and Operator Profile Fields.................................................................. 7-34 Secured Resource Fields ..................................................................................... 7-52 Secured Resource Authorization Fields ............................................................... 7-67 Activation and Deactivation Fields ..................................................................... 7-70 Administrator Maintenance Fields ...................................................................... 7-73 Location Information Fields................................................................................ 7-76 Password Change Field....................................................................................... 7-79 Program Refresh Fields ...................................................................................... 7-80 Optional Zap Fields ............................................................................................ 7-81 Record Dump Information .................................................................................. 7-82

Sample ALRTVCAU Reports ................................................................................. 7-83

Related Publications vii

Introduction ........................................................................................................ 7-83 System Options Update Report............................................................................ 7-83 System Parameter Change Report ....................................................................... 7-85 System Parameter Update Report ........................................................................ 7-86 Global Terminal/Operator Parameter Change Report .......................................... 7-88 Resource Name Update Report ............................................................................ 7-90 Resource Update Report ...................................................................................... 7-92 Resource Activation and Deactivation Report ..................................................... 7-94 Administrator Change Activity Report ................................................................ 7-95 Location Change Report ..................................................................................... 7-97 Operator Profile Change Report .......................................................................... 7-98

Chapter 8 ALRTVVAU Audit File Report (VSE) ................................................... 8-1

Introduction .............................................................................................................. 8-3 General Information ............................................................................................. 8-3 Sample JCL .......................................................................................................... 8-3 Input Record Description ...................................................................................... 8-4

User Information Data List (Type 01010000) ................................................... 8-4 User Information Data Values (Type 01020000)............................................... 8-4 User Information Task ID Build Parameters (Type 01030000) ......................... 8-4 Jobmask Data List (Type 03010000) ................................................................ 8-4 Jobmask Data Values (Type 03020000) ............................................................ 8-4 SECID Data List (Type 05010000) ................................................................... 8-5 SECID Data Values (Type 05020000) .............................................................. 8-5 DASD Dataset Data List (Type 06010000) ....................................................... 8-5 DASD Dataset Data Values (Type 06020000) .................................................. 8-5 Tape Dataset Data List (Type 07010000).......................................................... 8-5 Tape Dataset Data Values (Type 07020000) ..................................................... 8-5 Resource Data List (Type 08010000) ................................................................ 8-5 Resource Data Values (Type 08020000) ........................................................... 8-5 Library Data List (Type 09010000) .................................................................. 8-6 Library Data Values (Type 09020000) .............................................................. 8-6 Rules Table Maintenance Values (Type 0A010000) ......................................... 8-6 Rules Table Before/After Values (Type 0A020000) .......................................... 8-6 Control File Maintenance Values (Type 0B010000) ......................................... 8-6 Control File Before/After Values (Type 0B020000) .......................................... 8-6 Control File Monitor Parameters (Type 0B030000) .......................................... 8-6 Node Name Before/After Values (Type C0010000) .......................................... 8-6 Node Name Parameters (Type C0020000) ........................................................ 8-7 Remote Submittal Parameter Descriptions (Type C1010000) ............................ 8-7 Remote Submittal Parameters (Type C1020000)............................................... 8-7 Remote Submittal Parameters (Type C1030000)............................................... 8-7

Field Information .................................................................................................. 8-8 Fieldname List ........................................................................................................ 8-10

Common Segment Fields .................................................................................... 8-10 Extended User Fields .......................................................................................... 8-16 Jobmask Fields ................................................................................................... 8-21 SECID Maintenance Fields ................................................................................. 8-26 DASD Dataset Maintenance Fields ..................................................................... 8-31 Tape Dataset Maintenance Fields........................................................................ 8-35 Resource Maintenance Fields .............................................................................. 8-39

viii Auditing and Report Writing Guide

Library Maintenance Fields ................................................................................ 8-43 Rules Table Maintenance Fields ......................................................................... 8-47 Control File Maintenance Fields ......................................................................... 8-50 Node Information Fields ..................................................................................... 8-56 Remote Submittal Information Fields ................................................................. 8-58

Sample ALRTVVAU Reports ................................................................................. 8-60 Introduction ........................................................................................................ 8-60 DASD Dataset Change Report ............................................................................ 8-61 Resource Change Report ..................................................................................... 8-62 Control File Maintenance Report ........................................................................ 8-63

Appendix A Additional BIM-ALERT/VSE Reports .................................................. A-1

About This Appendix .......................................................................................... A-2 Log File Integrity Report ..................................................................................... A-3 Status Change Report .......................................................................................... A-4 Dataset Name Report ........................................................................................... A-7 User Entry Report .............................................................................................. A-10 Resource Class Report ....................................................................................... A-12 Program Execution Report ................................................................................. A-14 SECID/USER Job Summary Report ................................................................... A-15 Control Totals Reports ....................................................................................... A-16 SECID Authorized Resource Report .................................................................. A-17

Appendix B Additional BIM-ALERT/CICS Reports ................................................ B-1

Introduction ......................................................................................................... B-2 S1B100: Audit Trail Batch Report ...................................................................... B-3 S1B190: Violation, Sign-On, and Specification Reports ..................................... B-6 S1B192: Security Violation Query Report ..........................................................B-14 S1B500: System Transaction Security Report ....................................................B-15 S1B510: System Program Security Report .........................................................B-16 S1B520: System File Security Report .................................................................B-17 S1B530: System Map Security Report................................................................B-18 S1B540: Organizational Information Report ......................................................B-19 S1B550: Operator Security Information Report..................................................B-20 S1B560: Terminal Security Information Report .................................................B-22 S1B570/S1B571: Operator/Terminal Authorized Resources ..............................B-24

Index ................................................................................................................. Index-2

Related Publications ix

Trademark Information

This manual refers to the following brand or product names, registered trademarks, and trademarks which are listed according to their respective owners.

Computer Associates International, Inc.: CA-VOLLIE

International Business Machines Corporation: CICS/VSE CP DITTO IBM ICCF MSHP VM VSAM VSE/ESA VSE/SP VSE/POWER VTAM

x Auditing and Report Writing Guide

Related Publications

This section lists the documentation that deals with BIM-ALERT/VSE and BIM-ALERT/CICS. Your BIM Account Manager can order any of these documents for you.

Subject Manual

Installation The BIM-ALERT Installation and Operations Guide explains how to install and maintain BIM-ALERT/VSE.

Using BIM-ALERT

The BIM-ALERT/VSE Security Administrator's Guide explains how to use BIM-ALERT/VSE to set up and maintain security.

Reports The BIM-ALERT Auditing and Report Writing Guide explains how to use the BIM-ALERT batch report writer.

Messages The BIM-ALERT Messages Guide contains explanations of all messages issued by BIM-ALERT/VSE.

Subject Manual

Installation The BIM-ALERT Installation and Operations Guide explains how to install BIM-ALERT/CICS.

Using BIM-ALERT

The BIM-ALERT/CICS Security Administrator's Guide explains how to use BIM-ALERT/CICS to set up and maintain security.

Reports The BIM-ALERT Auditing and Report Writing Guide explains how to use the BIM-ALERT batch report writer.

Messages The BIM-ALERT Messages Guide contains explanations of all messages issued by BIM-ALERT/CICS.

Overview

BIM-ALERT/VSE

Manuals

BIM-ALERT/CICS

Manuals

1-1

1

Using the BIM-ALERT Batch Report Writer

This chapter describes how to use the BIM-ALERT batch report writer (ALRTVREP).

About This Chapter .................................................................................................. 1-2 About the Batch Report Writer .................................................................................. 1-3

Introduction .......................................................................................................... 1-3 Installation ........................................................................................................... 1-4 Execution ............................................................................................................. 1-5 Input ..................................................................................................................... 1-8 Processing .......................................................................................................... 1-10 Output Reports ................................................................................................... 1-11

About This Chapter

1-2 Auditing and Report Writing Guide

About This Chapter

This chapter describes how to use the BIM-ALERT batch report writer (ALRTVREP). It includes descriptions of the following:

Installation requirements

Sample JCL for producing reports

Lists of available commands and required commands

ALRTVREP processing, including

Sorting I/O to input files Output formatting Generation of multiple reports

Components of reports

About the Batch Report Writer Introduction

Chapter 1. Using the BIM-ALERT Batch Report Writer 1-3

About the Batch Report Writer

Introduction

The BIM-ALERT batch report writer provides comprehensive auditing and report writing capabilities. The BIM-ALERT batch report writer generates reports from data in the following files:

BIM-ALERT/CICS security database BIM-ALERT/VSE security database BIM-ALERT violation log file, which is common to BIM-ALERT/VSE and

BIM-ALERT/CICS BIM-ALERT audit file, which is common to BIM-ALERT/VSE and

BIM-ALERT/CICS

Previous releases of BIM-ALERT/VSE and BIM-ALERT/CICS included a number of separate batch auditing and report writing programs. These programs continue to be provided in the current release of BIM-ALERT. They are documented in Appendix A, "Additional BIM-ALERT/VSE Reports" and Appendix B, "Additional BIM-ALERT/CICS Reports"

Reports similar to those produced by many of these programs, however, can be produced by the BIM-ALERT batch report writer. The description of each such program includes a reference to the BIM-ALERT batch report writer report most similar to the program's output.

Description

Other Batch

Auditing and

Report Writing

Programs

Installation About the Batch Report Writer

1-4 Auditing and Report Writing Guide

Installation

The BIM-ALERT batch report writer is installed as part of the normal installation procedure. Refer to the BIM-ALERT Installation and Operations Guide for detailed instructions on installing the distribution tape. If you have successfully installed the distribution tape and executed the file conversions detailed in the installation procedures, the BIM-ALERT batch report writer is ready to use.

The BIM-ALERT batch report writer uses the BIM-ALERT/VSE and BIM-ALERT/CICS security, log, and audit files as input. These files must be converted to the version 5.1 format before the BIM-ALERT batch report writer can be used to generate reports.

WARNING!

Using files that have not been converted to version 5.1 format will cause unpredictable results. Refer to the BIM-ALERT Installation and Operations Guide for specific instructions about converting files.

No Additional

Installation Steps

Required

Release

Compatibility

About the Batch Report Writer Execution

Chapter 1. Using the BIM-ALERT Batch Report Writer 1-5

Execution

ALRTVREP is the driver program you execute to generate reports with the BIM-ALERT batch report writer. The following sample JCL can be customized to execute one or more reports from a batch job:

// JOB ALRTRPT BIM-ALERT 5.1 REPORT WRITER

// DLBL IJSYSUC,'BIM.USER.CATALOG',,VSAM

// DLBL S1SCTY,'ALERT.S1SCTY.V51',,VSAM

// DLBL S1SAUDT,'ALERT.S1SAUDT.V51',,VSAM

// DLBL ALERTXP,'ALERT.ALERTXP.V51',,VSAM

// DLBL AXPLOG1,'ALERT.AXPLOG1.V51',,VSAM

// DLBL AXPLOG3,'ALERT.AXPLOG3.V51',,VSAM

// LIBDEF PHASE,SEARCH=BIMLIB.ALERT

// EXEC ALRTVREP,SIZE=256K

REPORT ALRTVCVI /* Report BIM-ALERT/CICS Violation */

/* Log records. */

TITLE ('BIM-ALERT/CICS VIOLATION REPORT' -

'FOR JANUARY, 2000','BY TERMINAL ID')

FIELD TERMINAL SORTPRTY(1)

FIELDS OPERNUM OPERNAME SYSTEMID VIOLATEC DESCRIPT

SELECT IF EVENTYPE EQ X’02’ AND –

SYSDATE GE D'01/01/2000' AND -

SYSDATE LE D'01/31/2000'

RUN

/*

/&

Sample JCL

Execution About the Batch Report Writer

1-6 Auditing and Report Writing Guide

The statements in the preceding sample JCL are as follows:

Statement Meaning

// JOB ALRTRPT Standard VSE job card. This statement is required. The job name can be any name acceptable to VSE.

// DLBL IJSYSUC VSAM user catalog. This statement can be omitted in either of the following cases: The user catalog containing the BIM-ALERT/VSE or BIM-ALERT/CICS files to be

referenced by the job is defined as IJSYSUC in standard labels.

The DLBL statements for the files specify a CAT=xxxx.

// DLBL S1SCTY BIM-ALERT/CICS security database. This statement is necessary only when generating reports from the BIM-ALERT/CICS security file or log file. If the S1SCTY file is defined in either the partition standard labels or the system standard labels, this statement can be omitted from the jobstream.

// DLBL S1SAUDT BIM-ALERT/VSE and BIM-ALERT/CICS audit database. This statement is necessary only when generating reports from the audit file (ALRTVCAU and ALRTVVAU). If the S1SAUDT file is defined in either the partition standard labels or the system standard labels, this statement can be omitted from the jobstream.

// DLBL ALERTXP BIM-ALERT/VSE security database. This statement is necessary only when generating ALRTVVSC reports from the BIM-ALERT/VSE security file. If the ALERTXP file is defined in either the partition standard labels or the system standard labels, this statement can be omitted from the jobstream.

// DLBL AXPLOG1 BIM-ALERT/VSE and BIM-ALERT/CICS log file database. This statement is necessary only when generating ALRTVVVI or ALRTVCVI reports on the current log file. If the AXPLOG1 file is defined in either the partition standard labels or the system standard labels, this statement can be omitted from the jobstream.

// DLBL AXPLOG3 BIM-ALERT/VSE and BIM-ALERT/CICS archived log file database. This statement is necessary only when generating ALRTVVVI or ALRTVCVI reports that request information older than that contained in the current log file AXPLOG1. If the AXPLOG3 file is defined in either the partition standard labels or the system standard labels, this statement can be omitted from the jobstream.

You may receive an OPEN error message with error code 160 when using AXPLOG3 as input. The message can be disregarded. The report writer attempts to open input files first as keyed, which results in an error for a non-keyed file such as AXPLOG3. The report writer will automatically attempt another OPEN, this time with a non-keyed ACB.

(continued)

Explanation of

Sample JCL

About the Batch Report Writer Execution

Chapter 1. Using the BIM-ALERT Batch Report Writer 1-7

Statement Meaning

// LIBDEF PHASE VSE sublibrary information. This statement can be omitted if the library containing the BIM-ALERT batch report writer phases is defined in the partition permanent search chain.

// EXEC ALRTVREP,SIZE=256K

VSE EXEC statement and SIZE= parameter. Both the EXEC statement and the SIZE= parameter are required. ALRTVREP is the driver for the BIM-ALERT batch report writer. It should run in a partition of at least 768K.

Input About the Batch Report Writer

1-8 Auditing and Report Writing Guide

Input

Input to ALRTVREP is provided as a series of commands, keywords, and keyword values following the // EXEC ALRTVREP,SIZE=256K statement.

The following program commands are available:

Command Description

HELP Print various levels of help information.

OPTIONS Specify program execution options.

XFORM Define field transformation table.

REPORT Define the report type to be executed and specify report formatting options.

TITLES Define report titles.

SUBTITLE Define report subtitles.

FIELDS Define one or more fields to be included in the report.

FIELD Specify formatting or sort parameter options relating to a single data field to be included in the report.

FILEDUMP Generate a pre-defined list of SUBTITLE and FIELD commands to be used to dump individual physical input records.

SELECT IF Define selection criteria for the purpose of restricting report output.

RUN Specify that all input for this report has been processed and report execution is to begin.

For complete information about these commands, refer to Chapter 2, "Commands".

Introduction

Available

Commands

About the Batch Report Writer Input

Chapter 1. Using the BIM-ALERT Batch Report Writer 1-9

To generate a single report, you must include at least the following commands:

Required Command Explanation

REPORT The REPORT command must be specified to identify the type of report to be executed. OPTIONS and TITLES commands are not required. If they are specified, they can either precede or follow the first REPORT command.

FIELD or FIELDS At least one FIELD or FIELDS command must follow the REPORT command statement and specify one or more valid fieldnames. These commands tell the report writer which data fields are to be extracted from the input dataset for the report.

RUN The RUN command must follow the REPORT and FIELD commands. It initiates generation of the report.

Multiple reports can be produced in a single job step by repeating the RUN command statement. Each report can be directed to a separate output dataset or printer using the OUTFILE keyword on the REPORT command statement.

Titles, field names, and selection criteria can be modified between RUN commands.

For a list of the types of reports that can be generated, see the description of the REPORT command on page 2-18.

A simple example of input commands for a report is shown below. It includes all the required commands in their proper order. A TITLES command has been added so that the resulting report will include a meaningful label.

// EXEC ALRTVREP,SIZE=256K

TITLES 'Log File Activity Report'

REPORT ALRTVCVI

FIELDS RECTYPE SYSDATE SYSTIME

RUN

/*

Required

Commands

Generating

Multiple Reports

Sample Input

Processing About the Batch Report Writer

1-10 Auditing and Report Writing Guide

Processing

The ALRTVREP program first reads all commands and keywords provided as input from SYSIPT, until it encounters the special characters /* beginning in column 1.

Input syntax and keyword values are edited and validated until a RUN command is encountered. Then ALRTVREP will generate either the report or, if OPTIONS TEST has been specified, a report definition analysis. (The OPTIONS command is described on page 2-11.)

If field sorting has been specified on any FIELD or SUBTITLE command statement (by specifying the SORTPRTY keyword), your installed sort program will be called to perform the sorting operation.

Unless sorting is specified, no sorting will be performed.

All I/O to input files is performed in a standard E15 sort exit routine. This routine extracts the data fields specified in the SUBTITLE, FIELD, or FIELDS command statements from the physical input records, assembles the data fields into a logical record, applies any specified selection criteria, and passes the selected records to the sort routine. (For a complete description of how to select records, see the description of the SELECT IF command on page 2-40.)

Report output is formatted in a standard E35 sort exit routine. Each field is moved from the logical (sorted) record and formatted according to default or user-specified formatting options on the report output detail line.

Input Processing

Sorting

I/O to Input Files

Output Formatting

About the Batch Report Writer Output Reports

Chapter 1. Using the BIM-ALERT Batch Report Writer 1-11

Output Reports

Reports produced by the BIM-ALERT batch report writer are comprised of four kinds of pages, arranged in the following order:

A commands page A header page One or more detail pages A trailer page

Each of these kinds of report pages is explained below.

The first page of every report, the commands page, lists the user's report writer commands and diagnostic messages for any errors detected in those commands.

Sample Commands Page

The following is a sample report commands page for an ALRTVCSC report:

01/20/2000 08:50:58

************************************************************************************************************************************

* B I M - A L E R T R E P O R T W R I T E R *

************************************************************************************************************************************

======================================================== INPUT STATEMENTS ==========================================================

STMT 0001 ===> TITLES 'B I M - A L E R T' -

STMT 0002 ===> '* * OPERATOR REPORT * *'

STMT 0003 ===> REPORT ALRTVCSC

STMT 0004 ===> FIELD OPRNUMBR

STMT 0005 ===> FIELD OPRNAME

STMT 0006 ===> FIELD OPRADMNO

STMT 0007 ===> SELECT IF RECTYPE EQ C'OP'

STMT 0008 ===> RUN

======================================================= DIAGNOSTIC MESSAGES ========================================================

******** TITLES 'B I M - A L E R T'

'* * OPERATOR REPORT * *'

******** REPORT ALRTVCSC

******** FIELD OPRNUMBR

******** FIELD OPRNAME

******** FIELD OPRADMNO

******** SELECT IF RECTYPE

EQ

C 'OP'

******** RUN

ALRT204I NO DIAGNOSTIC ERRORS DETECTED

Components

Commands Page

Output Reports About the Batch Report Writer

1-12 Auditing and Report Writing Guide

The next page of the report, the header page, consists of an optional LOGO segment and an information box containing report definition specifications, including the report title and the date and time the report was generated.

The entire header page can be suppressed using the NOHDRPAGE keyword of the REPORT command. The REPORT command is described beginning on page 2-18.

Several forms of logos for the header page are available, including a user-defined custom logo. The logo can also be suppressed altogether. For more information about available logos and suppression of logos, refer to the explanation of the keyword LOGO in the discussion of the REPORT command, which begins on page 2-18.

Sample Header Page

The following is a sample report header page using the default BIM logo:

BBBBBBBBBBBBBBB IIIIIIIIIIIIIIII MMMMMMMMM MMMMMMMMM

BBBBBBBBBBBBBBBB IIIIIIIIIIIIIIII MMMMMMMMMM MMMMMMMMMM

BBB BBB III III MMM MM MM MMM

BBB BBB IIIIII IIIIII MMM M MMM

BBB BBB IIIIII IIIIII MMM MM MM MMM

BBB BBBBB III III MMM MMMM MMMM MMM

BBB BBB IIIIII IIIIII MMM MM M MM MMM

BBB BBB IIIIII IIIIII MMM MM MM MMM

BBB BBB III III MMM MM MM MMM

BBBBBBBBBBBBBBBB IIIIIIIIIIIIIIII MMMMMMMMM MMMMMMMMM

BBBBBBBBBBBBBBB IIIIIIIIIIIIIIII MMMMMMMMM MMMMMMMMM

COPYRIGHT 1999 - B I MOYLE ASSOCIATES, INC.

***************************************************************************

* BIM-ALERT/CICS *

* * * OPERATOR REPORT * * *

* 01/20/2000 08:50:58 *

* *

* REPORT TYPE: ALRTVCSC *

* INPUT FILE: S1SCTY *

* INPUT DATASET: ALERT.S1SCTY.V51 *

* OUTPUT FILE: SYSLST *

* JOB NAME: ALRTVREP *

* SECURITY-ID: SECADMIN *

* SORT PROGRAM: NOSORT *

* REQUIRED LINE LEN: 041 *

* FORMATTED LINE LEN: 133 *

* OUTPUT LINE LEN: 133 *

* *

* ------------------------- SELECTION CRITERIA -------------------------- *

* FIELD NAME COMP LITERAL (OR FIELD NAME) *

* RECTYPE (+000,002) EQ C'OP' *

* *

***************************************************************************

Header Page

About the Batch Report Writer Output Reports

Chapter 1. Using the BIM-ALERT Batch Report Writer 1-13

Following the header page is the body of the report, the detail pages.

Each detail page includes an optional detail page header segment, which contains the report date, page number, titles, subtitles, and field column labels. This segment will be printed at the top of every detail page in the body of the report. Any or all of the elements on the detail page header can be suppressed. You can do this by specifying keywords on the REPORT command statement and by omitting either or both of the TITLES and SUBTITLE command statements. For more information about these command statements, refer to Chapter 2,"Commands".

Sample Detail Page Header

The following illustrates a typical report detail page header:

DATE: 01/20/2000 09:10:28 PAGE: 000001

BIM-ALERT/CICS VIOLATION REPORT

FOR JANUARY, 2000

BY TERMINAL ID

CICS VIOL

TERM OPERATOR OPERATOR SYSTEM VIOL VIOLATION

ID NUMBER NAME ID CODE DESCRIPTION

---- -------- -------- ------ ---- -----------

Detail Page Lines

Following the detail page header lines are the actual report detail lines, comprised of the data fields specified on the FIELD and FIELDS command statements.

Each fieldname specified on the FIELD and FIELDS command statements is associated with a column of output on the detail page. The columns are positioned from left to right on the output page in the order the fieldnames are specified in the input command statements.

The width of each report column is determined by either the longest of three column labels (which have a maximum length of 16) or the field output length, whichever is greater. Each fieldname is defined with default labels and output length.

The user can override default length and label values associated with any fieldname by specifying new values on a FIELD command statement using the LENGTH and LABEL keywords (for a complete discussion of these keywords, see the discussion of the FIELD command on page 2-34).

Detail Pages

Output Reports About the Batch Report Writer

1-14 Auditing and Report Writing Guide

When all records have been processed and written to the report output file, a trailer page is written. This page contains an 'End of Report' heading and various messages detailing statistical information gathered during the report generation process.

The trailer page can be suppressed using the NOTRAILER keyword of the REPORT

command. The REPORT command is described beginning on page 2-18.

The following is an example of the information contained on a typical trailer page:

******** END OF REPORT *******

INPUT RECORDS READ............00002657

DETAIL RECORDS GENERATED......00002656

DETAIL RECORDS SELECTED.......00000554

000707 RECORDS WRITTEN TO SYSLST

A difference in the values indicated by "Input records read" and "Valid input records," as in the preceding example, does not necessarily indicate that the input file contains invalid records. Instead, the file may contain certain control records that are counted as input but that do not contain any information useful for reporting purposes.

Trailer Page

2-1

2

Commands

This chapter details the commands used to generate reports with the BIM-ALERT batch report writer (ALRTVREP).

Introduction .............................................................................................................. 2-2 About This Chapter .............................................................................................. 2-2 Conventions.......................................................................................................... 2-3 Syntax Rules ......................................................................................................... 2-4 Order of Commands ............................................................................................. 2-7

Command Descriptions ............................................................................................. 2-8 HELP Command .................................................................................................. 2-8 OPTIONS Command .......................................................................................... 2-11 XFORM Command ............................................................................................ 2-14 REPORT Command ........................................................................................... 2-18 TITLES Command ............................................................................................. 2-23 SUBTITLE Command ........................................................................................ 2-25 FIELDS Command ............................................................................................. 2-32 FILEDUMP Command ....................................................................................... 2-38 SELECT IF Command ....................................................................................... 2-40 RUN Command .................................................................................................. 2-46

About This Chapter Introduction

2-2 Auditing and Report Writing Guide

Introduction

About This Chapter

Input to ALRTVREP is provided as a series of command statements from SYSIPT. This chapter details the commands used to generate reports with the BIM-ALERT batch report writer (ALRTVREP). It includes a discussion of the general syntax rules that apply to all commands, followed by detailed information about each of the following commands. For information about how these statements are processed, refer to page 1-10.

HELP OPTIONS XFORM REPORT TITLES SUBTITLE FIELDS FIELD FILEDUMP SELECT IF RUN

Introduction Conventions

Chapter 2. Commands 2-3

Conventions

Throughout the discussion of the various commands, keywords, and keyword values in this manual, the following conventions will be followed in order to distinguish commands, keywords, and keyword values:

COMMANDS are shown in uppercase bold. KEYWORDS are shown in uppercase. Keyword values and fieldnames are shown in italics.

Parts of a command that are optional are enclosed in square brackets ([ ]).

Parentheses, when shown, are required input characters. All keyword values for a given keyword must be enclosed in parentheses.

Parts of a command that can be included more than once are followed by ellipses (...). The description of the command indicates which items can be repeated.

These conventions are illustrated in the following example:

COMMAND KEYWORD [(keywordvalue) ...]

Commands and

Their Parameters

Optional Input

Parentheses

Input that Can Be

Repeated

Conventions

Example

Syntax Rules Introduction

2-4 Auditing and Report Writing Guide

Syntax Rules

Commands, keywords, and keyword values can be placed in any input column from 1 to 72. Column positions 73 to 80 are ignored.

Leading and trailing blanks are ignored. The first non-blank character string encountered is assumed to be the first program command.

Commands can be followed by one or more keywords, which in turn can be further defined by keyword values.

All keyword values for a given keyword must be enclosed in parentheses.

Any keyword or keyword value that contains a special character (see below) must be enclosed in single quotes.

Multiple keywords or keyword values must be separated from each other by blanks or commas.

A set of keyword values can be separated from its keyword by blanks or commas.

The following characters have special meaning to ALRTVREP:

(blank) , (comma) - (hyphen) ( (left parenthesis) ) (right parenthesis) @ (at-sign) + (plus sign) * (asterisk) / (forward slash) = (equal sign) ¬ (logical not) < (less-than sign) > (greater-than sign) . (period) : (colon) ; (semi-colon) ' (single quote) " (double quote)

Any literal character string provided as input to ALRTVREP that contains one or more of these special characters must be enclosed in single quotes.

Input Columns

Leading and

Trailing Blanks

Parameters

Special Characters

Introduction Syntax Rules

Chapter 2. Commands 2-5

The single quote character (') is reserved as a string delimiter. Literal character strings provided as input to ALRTVREP, whether or not they are delimited by single quotes, may not include any single quotes.

The double quote character (") may be included in literal character strings.

A command statement can be continued to a subsequent line by ending the partial statement with a hyphen (-) and one or more blanks.

A command statement can be broken only at the beginning or end of a whole keyword or keyword value. Refer to the following examples:

Valid Continuation Invalid Continuation

COMMAND1 KEYWORD1(value1, - value2)

COMMAND1 KEYWORD1(value1, val - ue2)

COMMAND2 KEYWORD2 (value1) - KEYWORD3 (value2)

COMMAND2 KEYWORD2 (value1) KEY - WORD3 (value2)

CMD3 KEYWORD3( - 'string value 1')

COMMAND3 KEYWORD3('string - value 1')

All characters following a continuation indicator will be treated as comments and ignored by the program.

Bulk comment information can be inserted at any point, except that it can not begin in column 1. Signal the beginning of such comments with a slash followed by an asterisk (/*). Signal the end of the comments with an asterisk followed by a slash (*/).

This type of comment can extend over several input lines. All data following the initial /* will be ignored until the closing */ is encountered. At that point, if a continuation character follows the */, the preceding command statement, if any, will be resumed. If no continuation character follows the */, a new command statement will be expected.

WARNING!

Do not attempt to begin a comment in column 1. If the characters /* are encountered beginning in column 1, they are treated as signaling end of input.

Reserved

Character

Command

Statement

Continuation

Comments in Input

Syntax Rules Introduction

2-6 Auditing and Report Writing Guide

The following example of correct input syntax includes two input commands and comment information. Each command is followed by several keywords and keyword values.

// EXEC ALRTVREP,SIZE=256K

COMMAND1 'KEYWORD1' KEYWORD2 ( VALUE1,VALUE2 ) -

KEYWORD3 ( VALUE1 ( SUBVALUE ) ) - Comments after

continuation

KEYWORD4 ( VALUE1 (SUBVALUE1,'SUB VALUE2') VALUE2) -

/* These comments continue over more than one line.

Note

that no continuation indicator is required between

comment lines. The one that appears following the

block comment information is necessary only to

continue the COMMAND1 statement. */ -

KEYWORD5 ( VALUE1 )

COMMAND2 KEYWORD1,KEYWORD2,KEYWORD3(VALUE1)

/*

Example of Proper

Command Syntax

Introduction Order of Commands

Chapter 2. Commands 2-7

Order of Commands

The following sections detail each of the commands that can be used as input to the BIM-ALERT batch report writer (ALRTVREP). The commands are presented in their recommended order, the order in which they might logically be specified, rather than alphabetically.

The following restrictions apply to the order in which commands can be specified:

The REPORT command must precede any command that extracts data from the input dataset. Thus it must precede any SUBTITLES, FIELD, FIELDS, FILEDUMP, or SELECT IF command specified.

The RUN command must be the last command specified.

HELP Command Command Descriptions

2-8 Auditing and Report Writing Guide

Command Descriptions

HELP Command

Use the HELP command to print available program HELP information.

HELP [option[, option]]

The following table shows the valid options for the HELP command. Specifying HELP with no options prints all available information.

Use One or More

Options (Optional)

Explanation

COMMANDS Print a brief summary of all program commands.

MESSAGES Print all ALRTVREP program error messages and a brief explanation of each.

command[, command ...] Print information about the specified command. Multiple commands can be specified, separated by commas.

report-type Print detailed information about all fields for the report-type specified.

report-type (*) Print a list of field names for the type of report specified, along with a brief, rather than detailed, description of each field.

report-type (fieldname, ...) Print detailed information about the report-type fieldnames specified. Multiple fieldnames can be specified, separated by commas.

Input

A sample of input syntax for the HELP command is shown below: // EXEC ALRTVREP,SIZE=256K

HELP COMMANDS ALRTVCSC (RECTYPE) HELP ALRTVCSC (*) /*

Output

The report on the following page is printed when the preceding HELP commands are used.

Purpose

Syntax

Options

Example

Command Descriptions HELP Command

Chapter 2. Commands 2-9

(continued)

HELP Command Command Descriptions

2-10 Auditing and Report Writing Guide

************************************************************************************************************************************

* B I M - A L E R T R E P O R T W R I T E R *

************************************************************************************************************************************

======================================================== INPUT STATEMENTS ==========================================================

STMT 0001 ===> HELP COMMANDS ALRTVCSC(RECTYPE)

STMT 0002 ===> HELP ALRTVCSC (*)

======================================================= DIAGNOSTIC MESSAGES ========================================================

******** HELP COMMANDS OPTIONS Specify program options.

XFORM Define transformation table.

TITLES Specify report title information.

SUBTITLE Specify report sub-title information.

REPORT Specify report-type and formatting parameters.

FIELDS Specify field names to be included in the report

FIELD Specify a single field name and sort/formatting parameters.

SELECT Specify selection criteria to be used when report output is being generated.

FILEDUMP Specify to generate dump of input records using pre-defined field list.

RUN Generate report output.

HELP Print program HELP information for all valid input commands.

---------------------------------------------------------------------------

ALRTVCSC field information:

RECTYPE Descr: Record type

Labels: 'RECORD' 'TYPE'

Field type: 00000000 - Common segment information

Data length: 002, format: C - Character

Output length: 012, format: T - Transformed

Transformation: C'TX' = TRANSACT-PFX

C'TR' = TRANSACTION

C'PX' = PROGRAM-PFX

C'PR' = PROGRAM

C'FX' = FILE-PFX

C'FL' = FILE

C'MX' = MAP-PFX

C'MP' = MAP

C'LO' = LOCATION

C'DV' = TERMINAL

C'OP' = OPERATOR

******** HELP ALRTVCSC report - Field name list:

- FIELD KEY - 00000000 INPUT RECORD KEY

- FIELD RECLEN - 00000000 INPUT RECORD LENGTH

- FIELD DSNAME - 00000000 INPUT FILE DATASET NAME

- FIELD RECTYPE - 00000000 RECORD TYPE

- FIELD INFOTYPE - 00000000 FIELD/RECORD INFORMATION TYPE

- FIELD FILEVEL - 00000000 BIM-ALERT/CICS/VSE PRODUCT LEVEL

- FIELD SEQNUM - 00000000 OUTPUT REPORT LINE NUMBER

- FIELD INRECNUM - 00000000 INPUT RECORD NUMBER

- FIELD TRANSID - 01000000 TRANSACTION CODE

- FIELD TRANNBR - 01000000 ALERT TRANSACTION NUMBER

- FIELD TRANSEQ - 01000000 ALERT TRANSACTION SEQUENCE NUMBER

- FIELD TRFRTIME - 01000000 SCHEDULED TRANSACTION FROM-TIME

- FIELD TRTOTIME - 01000000 SCHEDULED TRANSACTION TO-TIME

- FIELD TRSTATUS - 01000000 TRANSACTION STATUS

- FIELD TRDESCR - 01000000 TRANSACTION DESCRIPTION

- FIELD PROGNAME - 02000000 PROGRAM NAME

- FIELD PROGNUM - 02000000 ALERT PROGRAM NUMBER

- FIELD PROGSEQ - 02000000 ALERT PROGRAM SEQUENCE NUMBER

- FIELD PROGFTIM - 02000000 SCHEDULED PROGRAM FROM-TIME

- FIELD PROGTTIM - 02000000 SCHEDULED PROGRAM TO-TIME

- FIELD PROGSTAT - 02000000 PROGRAM STATUS

- FIELD PROGDESC - 02000000 PROGRAM DESCRIPTION

- FIELD FILENAME - 03000000 FILE NAME

- FIELD FILENUM - 03000000 ALERT FILE NUMBER

- FIELD FILESEQ - 03000000 ALERT FILE SEQUENCE NUMBER

- FIELD FILEFTIM - 03000000 SCHEDULED FILE FROM-TIME

- FIELD FILETTIM - 03000000 SCHEDULED FILE TO-TIME

- FIELD FILESTAT - 03000000 FILE STATUS

- FIELD FILEPROC - 03000000 FILE ACCESS TYPE

- FIELD FILEDESC - 03000000 FILE DESCRIPTION

- FIELD MAPNAME - 04000000 MAP NAME

- FIELD MAPNUM - 04000000 ALERT MAP REFERENCE NUMBER

- FIELD MAPSEQ - 04000000 ALERT MAP SEQUENCE NUMBER

- FIELD MAPSET - 04000000 MAPSET NAME

- FIELD MAPTITLE - 04000000 MAP TITLE

- FIELD MAPSTAT - 04000000 MAP STATUS

- FIELD MAPFDNUM - 04010000 MAP FIELD NUMBER

- FIELD MAPFDISP - 04010000 MAP FIELD DISPLAY INDICATOR

- FIELD MAPFDSCR - 04010000 MAP FIELD DESCRIPTION

Command Descriptions OPTIONS Command

Chapter 2. Commands 2-11

OPTIONS Command

Use the OPTIONS command to specify certain global report formatting parameters.

The OPTIONS command has the following format:

OPTIONS option[, option ...]

Use One or More

Options

Explanation

Default

UPPERCASE

NOUPPERCASE

Force all output to uppercase format only.

Print all output as is, without translating to uppercase.

NOUPPERCASE

DATEFORM (date-format) The format in which to print all dates. Valid values are detailed on page 2-12.

MM,/,DD,/,YYYY

TIMEFORM (time-format) The format in which to print all time values. Valid values are detailed on page 2-12.

HH,:,MM

SORTNAME ( xxxxxxxx ) The name of the sort program to be used to drive the report generation process. The program specified must be locatable in one of the sublibraries in the partition's LIBDEF search chain.

SORT

PAGELEN ( nnn ) The number of lines per page to be used in formatting the report output. Valid values are numbers from 16 to 255.

55

LINELEN ( nnn ) The number of character positions to be used in formatting report output. This number must be in the range 16 to 133 and large enough to contain all output field information, as determined by the FIELD and FIELDS command statements.

133

TEST

NOTEST

Specify during the design phase of a new report to cause all report commands to be processed, but no report to be generated. Instead, a sample report output page, formatted based on the command statements processed, will be produced.

Specify to turn off a previously specified TEST option.

NOTEST

Purpose

Syntax

Options

OPTIONS Command Command Descriptions

2-12 Auditing and Report Writing Guide

Values for the DATEFORM and TIMEFORM keywords can consist of any combination of character strings and keywords. The maximum date or time format length can not exceed 32 characters. This length is calculated by adding together the number of characters in all string values and keywords specified.

The valid values for each of these parameters is given below.

The following table shows the valid values for the date-format parameter of the DATEFORM keyword.

The default value is MM,/,DD,/,YYYY.

Use One or More Values Description

MM Two-character numeric month.

MMM Three-character month name abbreviation.

DD Two-character numeric day of the month.

DDD Three-character day of the week abbreviation.

YY Two-character year value.

YYYY Four-character year value.

string A string value up to eight characters in length. If it includes any special characters (see page 2-4), the string must be enclosed in single quotes.

The following table shows the valid values for the time-format parameter of the TIMEFORM keyword.

The default value is HH,:,MM.

Use One or More Values Description

HH Two-character numeric hour value (24-hour clock).

MM Two-character numeric minute value.

SS Two-character numeric value representing seconds.

HH12 Two-character numeric hour value (12-hour clock).

AMPM Two-character string, either AM or PM.

string A string value up to eight characters in length. If it includes any special characters (see page 2-4), the string must be enclosed in single quotes.

DATEFORM and

TIMEFORM Values

DATEFORM Values

TIMEFORM Values

Command Descriptions OPTIONS Command

Chapter 2. Commands 2-13

The following sample OPTIONS command will cause the report to be executed in a test mode, printed in uppercase format, using a page length of 75 lines per page and an 80-column width format. The default date and time formats (MM/DD/YYYY and HH:SS) are replaced with alternate formats.

// EXEC ALRTVREP,SIZE=256K

OPTIONS TEST UPPERCASE -

LINELEN (80) PAGELEN (75) -

DATEFORM ( YYYY,/,MM,/,DD ) -

TIMEFORM ( HH,:,MM,:,SS )

.

.

/*

Example

XFORM Command Command Descriptions

2-14 Auditing and Report Writing Guide

XFORM Command

Use the XFORM command to define one or more transformation tables to be used to format report data fields named on subsequent SUBTITLE or FIELD command statements.

XFORM table-name [(value-pair, ...)] ...

Certain report data fields are transformed automatically using default transformation tables internal to BIM-ALERT. These fields include the DATE, TIME, ACTION, and STATUS fields. For specific information about which fields are transformed by default and which transformation tables are used for each, refer to the chapter detailing the particular type of report to be run.

The table-name specifies a transformation table to be used to format report data fields named on subsequent SUBTITLE or FIELD command statements.

Specify a one- to eight-character string value to establish the name of the table you want to define. The name can contain any combination of printable characters except special characters (see page 2-4).

Multiple table-names can be specified on a single XFORM command statement. At least one must be specified.

Each table-name can be followed by a series of one or more value-pairs enclosed in parentheses.

If included, these value-pairs define the table.

If no value-pairs are included, the table-name specified is assumed to refer to a pre-defined user transformation table, which must have already been assembled, link-edited, and placed in a library available at job execution time. Refer to the example showing omitting the value-pairs on page 2-17.

(continued)

Purpose

Syntax

Usage Notes

Table-Name

Value-Pair

Command Descriptions XFORM Command

Chapter 2. Commands 2-15

Each value-pair consists of two values:

Specify BOTH

Values

(Optional)

Explanation

a'value1' The first of the paired string values can be any of the following: A 1- to 32-character value specified as C'value1'.

A 1- to 4-byte hexadecimal value specified as X'value1'. (A hexadecimal string must contain an even number of valid hexadecimal characters.)

The literal ELSE. This parameter is explained below. If a value is specified (rather than ELSE), it will be compared against the corresponding data in the input record data field.

If the string value matches the input data value, the second value in the value-pair will be displayed on the report detail line.

If the value is shorter than the input data value, the values will be compared using the shorter length.

If the value is longer than the input data value, the values will be assumed not to match.

T'value2' The second transformation value can be any 1- to 32-character string to be displayed in the report column or report subtitle line whenever the first table value matches the corresponding value in the input data field.

Any number of paired values can be specified for a given table-name.

ELSE can be specified in the final pair of table parameters to specify a transformation value to be used when no previous table value is matched.

If specified, the ELSE parameter should be the last value in the transformation table. No values listed after the ELSE parameter will be tested or used during the transformation process.

The following example illustrates the proper use of ELSE as the last value1 parameter.

ELSE Parameter

XFORM Command Command Descriptions

2-16 Auditing and Report Writing Guide

The following example illustrates the use of the XFORM command to define a transformation table to be used to represent the days of the week. It includes the ELSE parameter, properly specified. Assume that the input data field is a single-byte character value ranging from 1 to 7.

// EXEC ALRTVREP,SIZE=256K

.

.

XFORM WEEKDAYS ( C'1' T'SUNDAY' -

C'2' T'MONDAY' -

C'3' T'TUESDAY' -

C'4' T'WEDNESDAY' -

C'5' T'THURSDAY' -

C'6' T'FRIDAY' -

C'7' T'SATURDAY' -

ELSE T'UNDEFINED')

FIELD OPSCHDAY XFORM (WEEKDAYS)

.

.

/*

Example 1: Use of

ELSE Parameter

Command Descriptions XFORM Command

Chapter 2. Commands 2-17

The same transformation table can be pre-defined by assembling and link-editing a phase using the following JCL and input statements. Pre-defining a table in this way allows it to be used by report command statements without being recoded.

// JOB WEEKDAYT

// OPTION CATAL

PHASE WEEKDAYS,S,NOAUTO

// EXEC ASSEMBLY

WEEKDAYS CSECT

END EQU 0

INLEN EQU 1

ELSE EQU X'FF'

DC AL1(INLEN,C'1',L'T1)

T1 DC C'SUNDAY'

DC AL1(INLEN,C'2',L'T2)

T2 DC C'MONDAY'

DC AL1(INLEN,C'3',L'T3)

T3 DC C'TUESDAY'

DC AL1(INLEN,C'4',L'T4)

T4 DC C'WEDNESDAY'

DC AL1(INLEN,C'5',L'T5)

T5 DC C'THURSDAY'

DC AL1(INLEN,C'6',L'T6)

T6 DC C'FRIDAY'

DC AL1(INLEN,C'7',L'T7)

T7 DC C'SATURDAY'

DC AL1(ELSE,L'T8)

T8 DC C'UNDEFINED'

DC AL1(END)

END WEEKDAYS

/*

// EXEC LNKEDT,SIZE=128K

/&

All value1 and value2 parameters must be immediately preceded by a one-byte length field. The ELSE parameter is represented by a single character with a value of X'FF'.

When pre-defined tables are used, the XFORM command statement can simply specify a list of table names without the table-defining value-pair values. A sample command specifying three pre-defined transformation table names is shown below:

// EXEC ALRTVREP,SIZE=256K

.

XFORM USERTAB1 USERTAB2 USERTAB3

.

.

/*

Example 2:

Alternative Method

Example 3:

Omitting the Value-

Pairs

REPORT Command Command Descriptions

2-18 Auditing and Report Writing Guide

REPORT Command

Use the REPORT command to identify the type of report to be generated and to define various report formatting options to customize the report output.

REPORT report-type [option] ...

The report-type parameter specifies the type of report to be generated. The following report types can be specified:

Report

Type

Report Name

Default Input Dataset

ALRTVCSC BIM-ALERT/CICS Security File Report S1SCTY

ALRTVVSC BIM-ALERT/VSE Security File Report ALERTXP

ALRTVCVI BIM-ALERT/CICS Violation Log File Report AXPLOG1

ALRTVVVI BIM-ALERT/VSE Violation Log File Report AXPLOG1

ALRTVCAU BIM-ALERT/CICS Audit File Report S1SAUDT

ALRTVVAU BIM-ALERT/VSE Audit File Report S1SAUDT

Purpose

Syntax

Report-Type

Command Descriptions REPORT Command

Chapter 2. Commands 2-19

Immediately following the report type, any of the following optional parameters can be specified. Specifying these parameters on the REPORT command statement overrides the current report formatting and processing settings, whether they are default values or values specified on the OPTIONS command statement.

Specify One or More

Options (Optional)

Explanation

INFILE (filename) An input dataset to be used instead of the default dataset. The default dataset is determined by the type of report specified (see page 2-18). The filename specified must

appear as a JCL statement in the ALRTVREP jobstep. If the INFILE keyword is specified, the FILETYPE keyword (below) must also be specified.

FILETYPE (type, blksiz) The type and block size of the input dataset. Specify this only if a non-VSAM file is being used as input. ALRTVREP assumes that the appropriate VSAM file (depending on the type of report being run) is to be read as input. If a sequential disk or tape copy of one of these VSAM datasets will be used as input, specify FILETYPE(DISK) or FILETYPE(TAPE). If such an alternate type of input file is specified, the optional blksiz

parameter can be specified. If blksiz is not specified, it defaults to 8000 for all reports except ALRTVVVI, for which it defaults to 4096. The record format must be variable-blocked for a sequential file. If the FILETYPE keyword is specified, the INFILE keyword must also be specified.

NOHDRPAGE Suppress printing of the report header page. For a description of the header page, see page 1-12.

NOSTMTS Suppress printing of report writer input statements and diagnostic messages.

NOHDRDATE Suppress printing of the current date and time on the first line of each report page.

NOPAGENUM Suppress printing of the page number on the first line of each report page.

NOLABELS Suppress printing of all field column labels in the page header segment of each report detail page.

NOTRAILER Suppress printing of the trailer page information following the last detail page of the report. For a description of the trailer page, see page 1-14.

LOGO ( xxxxxxxx ) The logo, if any, to be included on the header page of the report. Valid options are detailed on page 2-21.

DATEFORM (date-format) The format in which to print all dates in the report. Valid values are detailed on page 2-12.

TIMEFORM (time-format) The format in which to print all time values in the report. Valid values are detailed on page 2-12.

PAGELEN ( xxx ) The number of lines per page to be used in formatting the report. Valid values are numbers from 16 to 255.

(continued)

Options

REPORT Command Command Descriptions

2-20 Auditing and Report Writing Guide

Specify One or More

Options (Optional)

Explanation

NOCC Suppress the use of carriage control in the report. When carriage control is used, the first print position in each output line will be

reserved for the ANSI carriage control character.

When carriage control is suppressed, blank lines are inserted between report detail lines to achieve the requested report formatting.

LINESPC ( x ) Report detail line spacing. Valid values are as follows:

1 Single spaced 2 Double spaced 3 Triple spaced

The default value is 1.

OUTFILE ( filename ) A sequential disk file to which to direct report output instead of SYSLST. This option is valid only when used in conjunction with the EXTRACT keyword to build a flat file with no formatting of data. If specified, the filename must appear as a JCL statement in the ALRTVREP jobstep.

EXTRACT Generate an output dataset containing unformatted fields extracted from input dataset records. When EXTRACT is specified, no header or trailer page is written, page header information is suppressed, and line spacing and carriage control options are ignored. Only detail records will be written to the output dataset.

The output of the extraction process is directed to a dataset allocated to the DLBL filename specified on the OUTFILE keyword. This data might then be used as input to a report writing program other than the BIM-ALERT batch report writer, or for some other purpose.

Command Descriptions REPORT Command

Chapter 2. Commands 2-21

The following table shows the valid values for the LOGO keyword. If no logo is specified, BIMLOGO will be loaded and used. If it is not available, a default logo will be generated by ALRTVREP.

If a logo is specified, the library in which it is located must be in the LIBDEF phase search string for the partition in which ALRTVREP is running.

Use One Value Description

JOBNAME Causes the batch job name to be printed in 12x12 banner format on the header page.

NONE Causes the header page to be produced with no logo.

string A character string (eight byte maximum) that is one of the following: The name of a user-created logo. The library containing the

logo must be in the LIBDEF phase search string for the partition in which ALRTVREP is running. (For instructions on generating logos using the ALRTLOGO macro, see the BIM-

ALERT/CICS Security Administrator's Guide. If the string specified does not name a logo created using the ALRTLOGO macro, the character string itself will be formatted as a logo.

The string to be formatted as a logo. If the string contains any special characters (see page 2-4), it must be enclosed in single quotes.

The following example illustrates the use of the REPORT command to produce an BIM-ALERT/CICS violation activity report with header and trailer information and single-spaced detail lines using default ANSI carriage control. A page length of 75 is specified.

Default page header information will be printed at the top of each output page and will include the report execution date and time, page numbers, report titles and field column labels.

// EXEC ALRTVREP,SIZE=256K

OPTIONS TEST -

DATEFORM(MM,/,DD,/,YYYY) -

TIMEFORM(HH,:,MM,:,SS)

REPORT ALRTVCVI -

PAGELEN(75) LOGO(JOBNAME)

TITLES ('B I M - A L E R T / C I C S' -

'VIOLATION REPORT FOR JANUARY 2000' -

'BY TERMINAL ID')

SUBTITLE TERMINAL LINE(2) JUSTIFY(C) -

LABEL(TERMINAL:) SORTPRTY(1) -

CTLBREAK(P)

.

.

/*

LOGO Values

Example

REPORT Command Command Descriptions

2-22 Auditing and Report Writing Guide

Command Descriptions TITLES Command

Chapter 2. Commands 2-23

TITLES Command

Use the TITLES command to define title information to be printed in the report header page and at the top of each detail page of the report.

The TITLES command statement is optional.

TITLES string[, string...]

The TITLES command requires specification of one or more literal strings to be printed in the report header page and at the top of each detail page. Each title string will be centered on a separate output line.

String values must conform to the following rules:

If the string includes any special characters (see page 2-4), it must be enclosed in single quotes.

A maximum of five lines of information can be specified, each with a maximum length of 64 characters.

Multiple title strings must be separated by at least one blank or comma.

The TITLES command statement is optional. If it is not specified, a default two-line title, consisting of the product ID on the first line and a description of the report type on the second line, will be printed.

Purpose

Syntax

Strings

Usage Notes

TITLES Command Command Descriptions

2-24 Auditing and Report Writing Guide

Input

The TITLES command statement shown below will produce three lines of text at the top of every detail page of the report.

// EXEC ALRTVREP,SIZE=256K

OPTIONS TEST -

DATEFORM(MM,/,DD,/,YYYY) -

TIMEFORM(HH,:,MM,:,SS)

REPORT ALRTVCVI -

PAGELEN(75) LOGO(JOBNAME)

TITLES ('B I M - A L E R T / C I C S' -

'VIOLATION REPORT FOR JANUARY 2000' -

'BY TERMINAL ID')

SUBTITLE TERMINAL LINE(2) JUSTIFY(C) -

LABEL(TERMINAL:) SORTPRTY(1) -

CTLBREAK(P)

.

.

/*

Output

The TITLES command statement shown in the preceding figure will be formatted in the report page header as shown below:

DATE: 02/01/2000 12:40:39 PAGE: 000001

B I M - A L E R T / C I C S

VIOLATION REPORT FOR JANUARY 2000

BY TERMINAL ID

DATE TIME TERMINAL TELEPHONE USER ID USER NAME VIOLATION DESCR

---- ---- -------- --------- ------- --------- ---------------

01/21/2000 09:27:34 BC22 (612) 933-2885 JACK FROST, JACK OPERATOR UNAUTHORIZED TRANSACTION - SCTY

01/28/2000 14:41:25 BC22 (612) 933-2885 JACK FROST, JACK INCORRECT OPERATOR SECURITY CODE ENTERED

01/29/2000 13:52:34 BC22 (612) 933-2885 JACK FROST, JACK - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

Example

Command Descriptions SUBTITLE Command

Chapter 2. Commands 2-25

SUBTITLE Command

Use the SUBTITLE command to define additional information to be printed immediately following the title information.

SUBTITLE fieldname [option, ...]

If a SUBTITLE command statement is specified, up to five lines of output can be added to the page header information printed at the top of each report detail page.

By using the TITLES command and multiple SUBTITLE command statements, up to ten page header lines can be defined (five title lines and five subtitle lines).

The following table shows the valid fieldname values for the SUBTITLE command statement:

Specify One or

More Fieldnames

Description

LITERAL (string) A literal string up to 32 characters long to be used as a subtitle. If the string includes any special characters (see page 2-4), it must be enclosed in single quotes.

fieldname [label] The fieldname to be extracted from the next input record whenever a control break requires a new page header to be printed, optionally followed by single literal label to accompany the data extracted. If a label is specified, it will be printed first, followed immediately by a single blank and the data field. The label May consist of a maximum of 16 characters

Must be enclosed in single quotes if it includes any special characters (see page 2-4)

Purpose

Syntax

Usage Notes

Fieldname

SUBTITLE Command Command Descriptions

2-26 Auditing and Report Writing Guide

The following options can be used on the SUBTITLE command statement to customize report output:

Use One or More

Options (Optional)

Description

FORMAT ( x ) One of the following four types of formatting for the subtitle field. For an example showing how to use these values, refer to page 2-30.

Specify

One

Value

Explanation

'C' Character. Data is moved directly from the input record to the page header detail line. Each non-displayable character is translated to a period (.).

'X' Hexadecimal. Data is converted to displayable hexadecimal format. Two character positions on the output line are required for each character in the input field.

'Z' Zoned-decimal. Up to four bytes of input data is converted to its displayable EBCDIC zoned-decimal equivalent and displayed on the output line. Zoned-decimal output fields are displayed in zero-suppressed format. If the input field is longer than four bytes, byte positions past the fourth are ignored.

Data fields whose binary values are negative are displayed with a minus sign before the numeric value, except one-character fields, which display as their corresponding numeric values from 0 to 255.

'T' Transformed. Some input data fields can be transformed using internal transformation routines or tables associated with each field name. Date and time values are typically transformed using special routines. If a transformation routine is available for the fieldname

specified, it will always be performed by default unless overridden by an alternate formatting option. If you specify FORMAT(T) for a fieldname that cannot be transformed, a warning message will appear when the command statement is being processed, and the default output format will be substituted.

(continued)

Options

Command Descriptions SUBTITLE Command

Chapter 2. Commands 2-27

Use One or More

Options (Optional)

Description

LABEL (value) A single label printed in the page header area immediately before the data field identified by the fieldname specified on the SUBTITLE command statement. No label is printed with the fieldname specified unless the LABEL parameter is also specified. Valid values are as follows:

Specify One Value Explanation

F (or FIELD) Causes the specified fieldname to be used as the label.

string A literal string of up to 16 characters to be used as the label. If it includes a special character (see page 2-4), the string must be enclosed in single quotes.

LENGTH ( xxx ) The number of character positions to be reserved for the field data in the report page header line. Restrictions on the value are as follows: The LENGTH specified can not exceed the LINELEN value specified on a preceding

OPTIONS or REPORT command statement. If LINELEN has not been specified, the maximum LENGTH value is 133.

If you specify a LENGTH that exceeds the amount of data to be displayed, the default fill character value of blanks will be printed following the data (to specify a different fill character, use the FILLCHAR keyword described on page 2-35).

If you specify a LENGTH that is less than the amount of character positions to be displayed, the data is truncated to the length specified.

JUSTIFY ( x ) A value indicating how displayable data (i.e., the label and the data field) is to be positioned on the page header line. Valid values are as follows:

L Left (default) C Centered R Right

LINE ( x ) The line in the page header area where the subtitle information is to appear. Valid values are the numbers 1 to 5, which denote the five lines of the page header area reserved for subtitle information. For example, specifying a value of 2 causes a blank line to appear between the last title line and the subtitle information.

The default value is 1. This value causes the subtitle information to appear on the line immediately following the last title line.

(continued)

SUBTITLE Command Command Descriptions

2-28 Auditing and Report Writing Guide

Use One or More

Options (Optional)

Description

SORTPRTY ( nn ) The priority of the data field in the sort process. The value specified is subject to the following restrictions: Valid values are numbers from 1 to 99; the value 1 causes the field to be given the highest

priority.

Fields assigned equal SORTPRTY values will be given priority relative to the order in which the SUBTITLE commands are processed.

The SORTPRTY can also be specified on the FIELD command statement (for a complete description of the FIELD command, refer to page 2-34).

If equal SORTPRTY values are assigned on FIELD and SUBTITLE command statements, the fieldname specified on the SUBTITLE command statement will be given priority.

If no SORTPRTY keyword is specified on either a FIELD or SUBTITLE command statement, no sorting of data will be performed.

SORTSEQ ( xx ) The sequence in which the data field is to be sorted. Unless the SORTPRTY keyword is also

specified, SORTSEQ will have no effect on the order in which output is presented. Valid values are as follows:

AS Ascending DE Descending

CTLBREAK ( x ) Cause a control break condition to be recognized and the specified action to be performed whenever the displayable data extracted from the input record changes. Valid values are as follows: P Skip to new page.

S Insert a blank line between output detail lines.

Y No space. This causes a control-break condition to be recognized, but no detail line spacing will be affected. Instead, this option will have the effect of overriding any REPCHAR specification on columns containing data matching the data printed in the previous output line (see the description of the REPCHAR keyword on page 2-36).

All report column data will be printed on the first line of the control break with no column information replaced by the REPCHAR character.

It is advisable that you specify the SORTPRTY keyword on all command statements on which you specify CTLBREAK, but it is not required. If the field is not part of the sort sequence, the input data field should already be in some logical sequence or a control-break condition can occur on every detail line.

(continued)

Command Descriptions SUBTITLE Command

Chapter 2. Commands 2-29

Use One or More

Options (Optional)

Description

FILLCHAR ( 'x' ) A single displayable character to be used as filler in the space reserved for the field information on the subtitle line. (The amount of space reserved is determined either by the default field length or by the value specified on the LENGTH keyword.) If the length of displayable information is less than the reserved space on the line, the FILLCHAR value will be displayed in all print positions to the right. If no FILLCHAR value is specified, a blank will be used.

MISSCHAR ( 'x' ) A printable character to appear in the subtitle line whenever there is no data available to be displayed. This character will appear in the detail page header in the position reserved for the subtitle field information whenever the displayable data field is blank, or if the field name is not contained in the record being printed. If no MISSCHAR value is specified, a period (.) will be used.

XFORM (table-name) The name of a transformation table to be used to represent the data field in the report. The table-name specified must have been defined on a preceding XFORM command. If the input data field value does not match any of the values in the transformation table, the default transformation table, if one exists, will be used. For more information about default transformation tables, see the description of the XFORM command on page 2-14.

NOTRUNC Suppress truncation of leading and trailing blanks when character format fields are displayed and cause leading zeroes to be printed in zoned-decimal fields. Specifying the NOTRUNC keyword causes the following actions: When character format fields are being displayed (that is, FORMAT(C) is specified or

assumed), leading and trailing blanks are truncated before the data is positioned in the report column.

When NOTRUNC is specified on the FIELD command statement, leading and trailing blanks will be treated as displayable characters and may appear to cause data being printed to be shifted to the left or right in the output report column.

When zoned-decimal output format is used (that is, FORMAT(Z) is specified or assumed), leading zeroes are normally suppressed. When NOTRUNC is specified for a zoned decimal formatted field, leading zeroes will be printed. The number of zeroes printed will be based on the specified or assumed field length (refer to the description of the LENGTH keyword on page 2-27).

When NOTRUNC is not specified, data fields containing all blanks will be represented by the "missing character" (refer to the description of the MISSCHAR keyword on page 2-35).

Specifying NOTRUNC will cause blank data fields to be printed as blanks.

SUBTITLE Command Command Descriptions

2-30 Auditing and Report Writing Guide

FORMAT Keyword Example

The following example illustrates the same field transformed into the four different formats. The field displayed (OPRTMLT) is the operator's inactive time limit, which is maintained in the record as a four-byte binary time-of-day value. For this example, we will assume that the inactive time limit is 30 minutes.

// EXEC ALRTVREP,SIZE=256K

.

.

SUBTITLE OPRTMLT FORMAT(C) -

JUSTIFY(C) LINE(1)

SUBTITLE OPRTMLT FORMAT(X) -

JUSTIFY(C) LINE(2)

SUBTITLE OPRTMLT FORMAT(Z) -

JUSTIFY(C) LINE(3) NOTRUNC

SUBTITLE OPRTMLT FORMAT(T) -

JUSTIFY(C) LINE(4)

.

.

The preceding commands would produce four lines of output as follows:

....

0002BF20

00180000

00:30

(continued)

Examples

Command Descriptions SUBTITLE Command

Chapter 2. Commands 2-31

General Example

The following example illustrates several options for the SUBTITLE command. Use of the LINE keyword with a value of 2 (LINE(2)) on the first SUBTITLE command statement will cause the subtitle information to appear on subtitle line 2 and a single blank line to appear in the page header following the title information (subtitle line 1).

In addition, the specification of the SORTPRTY and CTLBREAK keywords will cause the report to be sorted by TERMINAL and a new-page control break to be recognized when the terminal name changes.

// EXEC ALRTVREP,SIZE=256K

OPTIONS DATEFORM(MM,/,DD,/,YYYY) -

TIMEFORM(HH,:,MM,:,SS)

REPORT ALRTVCVI -

PAGELEN(75) LOGO(JOBNAME)

TITLES ('B I M - A L E R T / C I C S' -

'VIOLATION REPORT FOR JANUARY 2000' -

'BY TERMINAL ID')

SUBTITLE LITERAL ('******************') JUSTIFY(C) LINE(2)

SUBTITLE LITERAL ('* *') JUSTIFY(C) LINE(3)

SUBTITLE LITERAL ('******************') JUSTIFY(C) LINE(4)

SUBTITLE TERMINAL LINE(3) JUSTIFY(C) -

LABEL('TERMINAL:') SORTPRTY(1) -

CTLBREAK(P)

.

.

/*

The following report output was generated by commands similar to the preceding ones:

DATE: 02/01/2000 12:59:30 PAGE: 000004

B I M - A L E R T / C I C S

VIOLATION REPORT FOR JANUARY 2000

BY TERMINAL ID

******************

* TERMINAL: BC22 *

******************

DATE TIME TERMINAL TELEPHONE USER ID USER NAME VIOLATION DESCR

---- ---- -------- --------- ------- --------- ---------------

01/02/2000 10:02:40 BC22 (612) 933-2885 JACK FROST ,JACK - OPERATOR NOT SIGNED ON -

01/02/2000 10:43:18 BC22 (612) 933-2885 JACK FROST ,JACK - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

01/06/2000 06:22:26 BC22 (612) 933-2885 JACK FROST ,JACK OPERATOR UNAUTHORIZED TRANSACTION - CEMT

01/06/2000 07:14:44 BC22 (612) 933-2885 JACK FROST ,JACK - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

FIELDS Command Command Descriptions

2-32 Auditing and Report Writing Guide

FIELDS Command

Use the FIELDS command to identify data elements to be extracted from the input dataset, formatted using default options, and printed on the report output detail line.

FIELDS fieldname1[, fieldname2 ...]

One or more valid fieldnames must be specified on the FIELDS command statement.

The fieldnames that can be specified are determined by the type of report specified on the preceding REPORT command statement. Refer to the fieldnames listed in the chapter for each report type.

Multiple fieldnames can be specified, separated by commas. At least one fieldname must be specified.

When the FIELDS command is specified, default formatting options will be used for all fieldnames specified. This includes output format and length, report column labels, and output justification.

To customize report output (for example, to change or eliminate the column label printed for the field, change the column width assigned to the field data, or change the justification within the report column of the data being printed) you must use a FIELD command for each fieldname, rather than a FIELDS command. Refer to the description of the FIELD

command on page 2-34 for complete information about customizing report output.

Both FIELD and FIELDS commands can be specified for the same report, as illustrated by the example on page 2-37.

The following sample input illustrates the use of the FIELDS command statement: // EXEC ALRTVREP,SIZE=256K OPTIONS DATEFORM(MM,/,DD,/,YYYY) - TIMEFORM(HH,:,MM,:,SS) REPORT ALRTVCVI - PAGELEN(75) LOGO(JOBNAME) TITLES ('B I M - A L E R T / C I C S' - 'VIOLATION REPORT FOR JANUARY 2000' -

'BY TERMINAL ID') SUBTITLE TERMINAL LINE(2) JUSTIFY(C) - LABEL('TERMINAL:') SORTPRTY(1) - CTLBREAK(P) FIELDS SEQNUM RECTYPE SYSDATE - SYSTIME OPERNAME DESCRIPT .

Purpose

Syntax

Fieldnames

Usage Notes

Example

Command Descriptions FIELDS Command

Chapter 2. Commands 2-33

. /*

FIELD Command Command Descriptions

2-34 Auditing and Report Writing Guide

FIELD Command

Use the FIELD command to identify a single data element to be extracted from the input dataset, formatted, and printed on the output report detail line.

FIELD fieldname [, option ...]

Unlike the FIELDS command, the FIELD command allows you to override default formatting options for the fieldname specified and thereby customize report output.

The following table shows the valid values for the fieldname parameter:

Specify One Value Description

fieldname The data element to be extracted from the input dataset, formatted, and printed on the output report detail line. Valid fieldnames are determined by the type of report specified on the preceding REPORT command statement. Refer to the fieldnames listed in the chapter for each report type.

LITERAL (string) A literal string to be included on each detail line. Although the string is not actually contained in any record, it can be useful for clarifying report data. The literal string specified will appear on each detail line relative to the position it is assigned in the FIELD command. See page 2-37 for an example of the use of LITERAL.

The string can be no longer than 48 characters. If it includes any special characters (see page 2-4), it must be enclosed in single quotes.

No column headers will appear above any column of literal data. If a given FIELD command specifies LITERAL (string), it can not include the LABEL keyword to specify column headings. (The LABEL keyword is detailed on page 2-36).

Purpose

Syntax

Usage Notes

Fieldname

Command Descriptions FIELD Command

Chapter 2. Commands 2-35

The options shown in the following table can be used on the FIELD command statement to override default field formatting options, specify sorting requirements, and define report column formatting, labeling, width, and justification specifications.

Specify One or More

Options (Optional)

Description

FORMAT ( x ) One of the four valid types of formatting for the report field. Valid values are detailed on page 2-26.

LABEL ( xxx ) A label to be used instead of the default column header labels associated with the fieldname.

Field labels appear by default in the page header at the head of the report output column associated with the field. Valid values are detailed on page 2-36.

LENGTH ( xxx ) The number of character positions to be reserved for the field data in the report page header line. Restrictions on the value are detailed on page 2-27.

JUSTIFY ( x ) A value indicating how displayable data is to be positioned in the output column. Valid values are L Left C Centered R Right

By default, all data is centered within its output column, with the exception of fields defined as zoned-decimal display (FORMAT(Z)), which are zero-suppressed and right-justified.

SORTPRTY ( nn ) The priority of the data field in the sort process. Valid values are detailed on page 2-28.

SORTSEQ ( xx ) The sequence in which the data field is to be sorted. Unless the SORTPRTY keyword is also specified, SORTSEQ will have no effect on the order in which output is presented. Valid values are AS (ascending) and DE (descending).

FILLCHAR ( 'x' ) A single displayable character to be used as filler in the column reserved for the fieldname

information on the detail line. (The amount of space reserved is determined by either the default field length or the value specified on the LENGTH keyword.)

If the length of displayable information is less than the report column width, the FILLCHAR value will be displayed in all print positions to the left and to the right of displayable field information.

If no FILLCHAR value is specified, a blank will be used.

MISSCHAR ( 'x' ) A printable character to appear in the output detail line whenever there is no data available to be displayed. It will be positioned in the report column based on the value of the JUSTIFY keyword specified for the fieldname.

This character will appear in the output column whenever either the displayable data fieldname is blank or the fieldname is not contained in the record being printed.

If no MISSCHAR value is specified, a period (.) will be used.

(continued)

Options

FIELD Command Command Descriptions

2-36 Auditing and Report Writing Guide

Specify One or More

Options (Optional)

Description

REPCHAR ( 'x' ) A replacement character to appear in the output detail line whenever the fieldname output matches the data printed on the preceding detail line. The replacement character will continue to be printed on each detail line until either the display value changes, a control-break occurs (see CTLBREAK keyword, below), or a new-page condition occurs.

The replacement character is positioned in the report column based on the justification option designated for the fieldname (refer to the description of the JUSTIFY keyword on page 2-35).

CTLBREAK ( x ) Cause a control break condition to be recognized and the specified action to be taken whenever the displayable information in the report column changes. Valid values are detailed on page 2-28.

XFORM (table-name) The name of a transformation table to be used to represent the data field in the report. The table-name specified must have been defined on a preceding XFORM command.

If the input data field value does not match any of the values in the transformation table, the default transformation table, if one exists, will be used. For more information about default transformation tables, see the description of the XFORM command on page 2-14.

NOTRUNC Suppress truncation of leading and trailing blanks when character format fields are displayed and cause leading zeroes to be printed in zoned-decimal fields. Details about the NOTRUNC keyword are provided on page 2-29.

The LABEL value defines the label to appear in the page header at the head of the report output column associated with the field. The LABEL value can be any of the following:

Specify One Value Explanation

F (or FIELD) Replace the default column headers with the fieldname.

N (or NO) Eliminate the column header labels for this fieldname.

'label1'[,'label2','label3'] Literal strings to be used as column header labels. A maximum of three literals can be assigned to any fieldname; they will be placed one above the other in the page header segment of the detail page of the report. Each label can be up to 16 characters in length and must be enclosed in single quotes if it includes any special characters (see page 2-4).

By default, labels are centered over the report column. To left- or right-justify labels, use a greater-than or less-than sign (> or <) as the first character in the label string. This sign will not appear in the output report. Refer to the following example:

LABEL('<L-justified-Label','>R-justified-

Label')

LABEL Keyword

Command Descriptions FIELD Command

Chapter 2. Commands 2-37

The following sample input syntax illustrates the use of various FIELD command statements. Note the combined use of the FIELD and FIELDS commands.

// EXEC ALRTVREP,SIZE=256K

OPTIONS DATEFORM(MM,/,DD,/,YYYY) -

TIMEFORM(HH,:,MM,:,SS)

REPORT ALRTVCVI -

PAGELEN(75) LOGO(JOBNAME)

TITLES ('B I M - A L E R T / C I C S' -

'VIOLATION REPORT FOR JANUARY 2000' -

'BY TERMINAL ID')

SUBTITLE TERMINAL LINE(2) JUSTIFY(C) -

LABEL('TERMINAL:') SORTPRTY(1) -

CTLBREAK(P)

FIELD LITERAL ('RECORD TYPE:') REPCHAR(' ')

FIELD RECTYPE REPCHAR(' ')

FIELDS SYSDATE SYSTIEM OPERNAME DESCRIPT

.

.

/*

Example

FILEDUMP Command Command Descriptions

2-38 Auditing and Report Writing Guide

FILEDUMP Command

Use the FILEDUMP command following any REPORT command to generate a series of pre-defined SUBTITLE and FIELD command statements, which, when followed by a RUN command, will cause the output report to consist of a character and hexadecimal dump of the physical input records.

FILEDUMP

The following input statements will be generated and processed by specifying the FILEDUMP command:

SUBTITLE KEY LABEL(KEY:) FORMAT(C) NOTRUNC

SUBTITLE KEY LABEL(' ') LINE(2) FORMAT(X)

SUBTITLE INRECNUM LABEL(REC:) LINE(3) LENGTH(6) NOTRUNC CTLBREAK(P)

SUBTITLE RECLEN LABEL(LEN:) LINE(4) NOTRUNC

FIELD OFFSET

FIELD RECORD LABEL(NO) JUSTIFY(L)

FIELD RECORD FILLCHAR(*) FORMAT(C) LENGTH(32) NOTRUNC

The records dumped can be restricted by inserting a SELECT IF command statement prior to the RUN command.

Purpose

Syntax

Commands

Generated

Usage Notes

Command Descriptions FILEDUMP Command

Chapter 2. Commands 2-39

Input

The following input syntax illustrates the correct use and placement of the FILEDUMP command in the sequence of input commands:

// EXEC ALRTVREP,SIZE=256K

REPORT ALRTVCVI

TITLES 'RECORD DUMP'

FILEDUMP

SELECT IF KEY EQ C'3'

RUN

/*

Output

The following sample report page will be generated when the FILEDUMP command is used as shown in the previous commands:

DATE: 01/20/2000 13:44:14 PAGE: 000001

RECORD DUMP

KEY: 3

F3

REC: 002104

LEN: 000150

----------------------------------

0000 F3AF55C1 DB000000 00012423 1FC2C3F3 F3C6D3D3 40404040 4040F0F0 F0F0F0F0 *3..A.........BC33FLL 000000*

0020 F0F0F0F0 F0F0F0F0 F0F0F0F0 F0F0F0F0 F0F0F0F0 5C5C5C5C 00000000 00404040 *00000000000000000000****..... *

0040 40404040 40404040 40404040 40404040 40124040 40404040 40404040 406040D6 * . - O*

0060 D7C5D9C1 E3D6D940 D5D6E340 E2C9C7D5 C5C440D6 D5406040 40404040 40404040 *PERATOR NOT SIGNED ON - *

0080 40404040 E3C5E2E3 00000000 00000000 00000000 0000 * TEST.............. *

Example

SELECT IF Command Command Descriptions

2-40 Auditing and Report Writing Guide

SELECT IF Command

Use the SELECT IF command to limit the amount of data displayed in the report output.

A SELECT IF command statement is not required to execute a report. If specified, the SELECT IF command must be placed in the command input somewhere after the REPORT command and before the RUN command.

Only one SELECT IF command statement can be specified per report.

The selection criteria specified on the SELECT IF command statement are applied during the E15 sort exit processing, after the logical record has been assembled from the available field input data, and before the record is passed to the sort.

SELECT IF fieldname[(+dsp,len)] [comparator -

operand2[(+dsp,len)]] [connector ...]

Purpose

Usage Notes

Syntax

Command Descriptions SELECT IF Command

Chapter 2. Commands 2-41

The following table shows the parameters for the SELECT IF command:

Parameter Description

fieldname The first comparison operand. This parameter is required. Valid values are determined by the report-type being executed. Refer to the chapter that details the specified report-type.

(+dsp,len) An optional displacement value and compare length, enclosed in parentheses, for the fieldname specified. This parameter is explained further through examples provided below. The displacement value defaults to +0 (the first character position).

comparator An optional comparison to be made between fieldname and operand2, the result of which determines which records will be selected. Valid values are as follows:

EQ Equal LT Less than LE Less than or equal to NE Not equal GT Greater than GE Greater than or equal to

For example, specifying GT selects all records in which fieldname is greater than operand2.

operand2 The second operand for the optional comparison. Valid values are detailed on page 2-42.

connector A connector value, required if more than one comparison is to be made. Valid values are detailed on page 2-43.

To select output based on the second and third characters in the INITMESG field being equal to AB, specify the following command:

SELECT IF INITMESG(+1,2) EQ C'AB'

To specify a length value with a default displacement value, use a command similar to the following:

SELECT IF INITMESG(2) EQ C'AB'

This command statement will be interpreted as requiring that the first two character positions of the INITMESG field be equal to AB.

Parameters

(+dsp,len)

Parameter

SELECT IF Command Command Descriptions

2-42 Auditing and Report Writing Guide

The value of the operand2 parameter can be either another fieldname or one of several literal types. These values are described in the following table:

Specify one

Value

Description

fieldname A fieldname, which can be specified with displacement and length values (+dsp,len), as described on page 2-41.

C'cccc' Data in character format. A string of up to 32 characters can be specified within the single quotes.

N'nnnn' Numeric data, which will be converted to the proper format for a valid compare (packed, binary, and so on) automatically. This format is governed by how the data is stored in the record. A string of up to 16 numeric characters can be specified within the single quotes.

X'xxxx' A hexadecimal value. The maximum string length enclosed in the single quotes is eight bytes (representing four data bytes). Each string must be composed of an even number of hexadecimal character values (i.e., 0-9, A-F).

T'tttt' A transformed value. The input data represented by fieldname is to be transformed into its displayable form before the comparison is made. A string of up to 32 characters can be contained in the single quotes.

If the fieldname cannot be transformed, the comparison is made to the unmodified contents of the data represented by the fieldname.

D'mm/dd/yyyy' A date value. If fieldname contains date information, it can be compared to the literal value enclosed in the single quotes.

Each date value is transformed internally to a binary value before comparisons are performed. This value represents a date in the range January 01, 1900 to December 31, 2041. Dates that fall outside this range are assigned one of those extreme values.

The format used to designate a date value must match the date format assigned to the report itself (see the description of the DATEFORM keyword on page 2-12). If you have not specified a DATEFORM to be used, the default MM/DD/YYYY format should be used.

yy values 42 - 99 are taken to represent the years 1942 to 1999. yy values 00 - 41 are taken to represent the years 2000 to 2041.

Example: To select records whose SYSDATE field falls in the month of January, 2000, use the following command: SELECT IF SYSDATE GE D'01/01/2000' AND SYSDATE LE D'01/31/2000'

(continued)

Operand2 Values

Command Descriptions SELECT IF Command

Chapter 2. Commands 2-43

Specify One

Value

Description

H'hh:mm' A time value. If fieldname contains time information, it may be compared to the literal time value enclosed in the single quotes.

Each time value is transformed internally to a binary value representing the number of seconds since the preceding midnight before comparisons are performed. Time value literals are based on a 24-hour clock time.

The format you use to designate a time value must match the time format assigned to the report itself (see the description of the TIMEFORM keyword on page 2-12). If you have not specified a TIMEFORM to be used, the default HH:MM format should be used.

Example: To select records whose SYSTIME field is in the range 11:00 a.m. to 2:00 p.m., use the following command: SELECT IF SYSTIME GE H'11:00' AND SYSTIME LE H'14:00'

The two valid connector values are the following:

Field Meaning

AND Select the record if both the preceding and the following comparisons are true.

OR Select the record if either the preceding or the following comparison is true (or if both are true).

Boolean syntax rules apply to all comparisons linked by connector values. Note the following rules:

Expressions linked by AND are evaluated as a group before expressions linked by OR.

You can override this default priority by enclosing one or more expressions in parentheses. Expressions enclosed in parentheses are evaluated first.

Parentheses can not be nested.

Connector Values

SELECT IF Command Command Descriptions

2-44 Auditing and Report Writing Guide

For example, suppose the fieldnames of a record have the following values:

FIELD1 C'1' FIELD2 C'2' FIELD3 C'A'

Given these values, the following SELECT IF statements would have the specified results:

SELECT IF Statement Result and Explanation

SELECT IF FIELD1 EQ C'1' AND -

FIELD2 EQ C'2' AND -

FIELD3 EQ C'Z'

The record will NOT be selected. All three comparisons must be true for the record to be selected. Since it is false that FIELD3=Z, the record will not be selected.

SELECT IF FIELD1 EQ C'1' OR -

FIELD2 EQ C'9' OR -

FIELD3 EQ C'Z'

The record will be selected. Only one of the comparisons must be true for the record to be selected. Since FIELD1=1, the record will be selected.

SELECT IF FIELD1 EQ C'1' OR -

(FIELD2 EQ C'9' OR -

FIELD3 EQ C'Z')

The record will be selected. Although the parentheses cause the second OR to be evaluated first, only one of the comparisons need be true for the record to be selected, as in the previous example. Since FIELD1=1, the record will be selected.

SELECT IF FIELD1 EQ C'9' AND -

FIELD2 EQ C'9' OR FIELD3 EQ

C'A'

The record will be selected. Although it is false that both FIELD1=9 and FIELD2=9, it is true that FIELD3=A. Therefore the comparison is true.

SELECT IF FIELD1 EQ C'9' AND -

(FIELD2 EQ C'9' OR -

FIELD3 EQ C'A')

The record will NOT be selected. Although it is true that either FIELD2=9 or FIELD3=A (because FIELD3=A), it is false that FIELD1=9. Therefore the comparison is false.

Sample Boolean

Comparisons

Command Descriptions SELECT IF Command

Chapter 2. Commands 2-45

The following sample input illustrates the use of a SELECT IF command statement:

// EXEC ALRTVREP,SIZE=256K

OPTIONS DATEFORM(MM,/,DD,/,YYYY) -

TIMEFORM(HH,:,MM,:,SS)

REPORT ALRTVCVI -

PAGELEN(75) LOGO(JOBNAME)

TITLES ('B I M - A L E R T / C I C S' -

'VIOLATION REPORT FOR JANUARY 2000' -

'BY TERMINAL ID')

SUBTITLE TERMINAL LINE(2) JUSTIFY(C) -

LABEL(TERMINAL:) SORTPRTY(1) -

CTLBREAK(P)

FIELD LITERAL ('RECORD TYPE:') REPCHAR(' ')

FIELD RECTYPE REPCHAR(' ')

FIELDS SYSDATE SYSTIME OPERNAME DESCRIPT

SELECT IF RECTYPE EQ C'3' AND -

SYSDATE GE D'01/01/2000' AND -

SYSDATE LE D'01/31/2000'

.

.

/*

Note that the format of the date defined in the OPTIONS command statement matches the format of the date literal value shown on the SELECT IF command statement.

Example

RUN Command Command Descriptions

2-46 Auditing and Report Writing Guide

RUN Command

Use the RUN command to initiate the report generation process.

The RUN command is required.

RUN

The RUN command must be placed on a line by itself with no accompanying keywords or keyword values.

Place the RUN command after the REPORT command that identifies the report to be executed, and also after any OPTIONS, TITLES, FIELD, FIELDS, and SELECT IF

commands used to define and customize the report.

Whenever a RUN command is encountered, all OPTIONS, REPORT, TITLES, FIELD,

FIELDS, and SELECT IF command information processed up to that point is combined to make up a report definition, which is then passed to the report generation program for execution.

If OPTIONS TEST has been specified, the report generation process is not invoked, and no input dataset is opened for processing. Rather, a detailed report definition analysis is formatted and displayed as output, along with a sample of how such a report might appear.

Multiple RUN command statements can be specified to generate more than one report. By placing TITLES, FIELD, FIELDS, or SELECT IF command statements between the RUN

commands, some or all of the information relating to the preceding report can be replaced before the next report is generated.

Purpose

Syntax

Usage Notes

Command Descriptions RUN Command

Chapter 2. Commands 2-47

Input

The following example shows the generation of two similar reports by repeating the RUN

command without respecifying all command statements:

// EXEC ALRTVREP,SIZE=256K

OPTIONS DATEFORM(MM,/,DD,/,YYYY) -

TIMEFORM(HH,:,MM,:,SS)

REPORT ALRTVCVI -

PAGELEN(75) LOGO(JOBNAME)

TITLES ('B I M - A L E R T / C I C S' -

'VIOLATION REPORT FOR JANUARY 2000' -

'BY TERMINAL ID')

SUBTITLE TERMINAL LINE(2) JUSTIFY(C) -

LABEL(TERMINAL:) SORTPRTY(1) -

CTLBREAK(P)

FIELD LITERAL ('RECORD TYPE:') REPCHAR(' ')

FIELD RECTYPE REPCHAR(' ')

FIELDS SYSDATE SYSTIME OPERNAME DESCRIPT

SELECT IF RECTYPE EQ C'3' AND -

SYSDATE GE D'01/01/2000' AND -

SYSDATE LE D'01/31/2000'

RUN

TITLES ('B I M - A L E R T / C I C S' -

'VIOLATION REPORT FOR FEBRUARY 2000' -

'BY TERMINAL ID')

SELECT IF RECTYPE EQ C'3' AND -

SYSDATE GE D'02/01/2000' AND -

SYSDATE LE D'02/29/2000'

RUN

/*

Output

The following report shows sample output from the second report that would be generated from such a sequence of input command statements:

B I M - A L E R T / C I C S

VIOLATION REPORT FOR FEBRUARY 2000

BY TERMINAL ID

TERMINAL: BC31

SYSTEM

RECORD CREATION LOG OPERATOR VIOLATION

TYPE DATE TIME NAME DESCRIPTION

------ -------- ------ -------- -----------

RECORD TYPE: VIOLATION 02/25/2000 11:53:41 FROST, JACK OPERATOR UNAUTHORIZED TRANSACTION - CEMT

02/28/2000 14:44:12 FROST, JACK INCORRECT OPERATOR SECURITY CODE ENTERED

02/28/2000 14:49:53 FROST, JACK OPERATOR UNAUTHORIZED TRANSACTION - CSMT

Example

3-1

3

ALRTVCSC Security File Report (CICS)

This chapter describes the ALRTVCSC security file report, which you can use to select and display information from the BIM-ALERT/CICS security file. (User profile information from both BIM-ALERT/CICS and BIM-ALERT/VSE is available.)

Introduction .............................................................................................................. 3-3 General Information ............................................................................................. 3-3 Sample JCL .......................................................................................................... 3-3 Input Record Description ...................................................................................... 3-4 Field Information ................................................................................................ 3-11

Fieldname List ........................................................................................................ 3-13 Common Segment Fields .................................................................................... 3-13 Transaction Record Fields .................................................................................. 3-17 Program Record Fields ....................................................................................... 3-19 File Record Fields ............................................................................................... 3-21 Map Record Fields .............................................................................................. 3-24 Location Record Fields ....................................................................................... 3-27 Terminal Record Fields ...................................................................................... 3-30 Operator Record Fields ....................................................................................... 3-61 Field Resource Information Fields .................................................................... 3-110 Field Resource Security Information Fields ....................................................... 3-117 Group Security Information Fields .................................................................... 3-121 User Group Record Fields ................................................................................. 3-130 User Profile Record Fields ................................................................................ 3-134

Sample ALRTVCSC Reports ................................................................................ 3-138 Introduction ...................................................................................................... 3-138

3-2 Auditing and Report Writing Guide

S1B500 System Transaction Security Report .................................................... 3-138 S1B510 System Program Security Report ......................................................... 3-140 S1B520 System File Security Report ................................................................. 3-141 S1B530 System Map Display Security Report ................................................... 3-142 S1B540 Organizational Information Report ...................................................... 3-143 Operator and Terminal Reports ........................................................................ 3-144 Operator Security Report - Access Time Report ................................................ 3-145 Operator Authorization Report ......................................................................... 3-147 Operator Sign-On Report .................................................................................. 3-149

Introduction General Information

Chapter 3. ALRTVCSC Security File Report (CICS) 3-3

Introduction

General Information

Security information contained in the BIM-ALERT/CICS security file is available for selection and display in the ALRTVCSC report type. User profile information is available from both BIM-ALERT/CICS and BIM-ALERT/VSE.

This report type requires the BIM-ALERT/CICS security file, or a VSAM copy of the file, as input.

The phase ALRTVCSC is loaded by ALRTVREP when this report type is specified on a REPORT command statement. ALRTVCSC reads the input file and formats the data for the report.

Sample JCL

The following sample JCL can be used to execute any ALRTVCSC report:

// JOB ALRTVCSC BIM-ALERT/CICS security file report

// LIBDEF PHASE,SEARCH=.... <== optional

// DLBL IJSYSUC,'user.catalog.name',,VSAM <== optional

// DLBL SORTWK1,'SORTWK1.SYS001.WORKFILE',0000,VSAM, <== optional

DISP=(,DELETE),RECORDS=2000,RECSIZE=4096 <== optional

// DLBL S1SCTY,'ALERT.S1SCTY.V51',,VSAM

// EXEC ALRTVREP,SIZE=256K

.

.

/*

/&

Report Description

Input Dataset

I/O Module Name

Input Record Description Introduction

3-4 Auditing and Report Writing Guide

Input Record Description

Each BIM-ALERT/CICS security file record contains a 50-byte record key and one of several subordinate information field types (segments), determined by the contents of the RECTYPE field in the record key.

The transaction security record defines a single CICS transaction and a 30-character description of the transaction.

The program security record defines a single CICS program name and a 30-character description of the program.

The file security record defines a single CICS file name and a 30-character description of the file.

The map security record defines a single CICS map name and related security information.

Map Field Information (Type 04010000)

This segment, contained in the type 04 map security information record, identifies the various map field elements required to secure individual fields within a map.

The 04010000 segment is a variable-occurrence segment. In other words, the segment can occur several times within the parent map information record.

When a fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every occurrence of the segment in the input record.

See the individual fieldname definitions for more information.

The location security record defines a single user-defined location and related security information.

The terminal security record defines a single CICS terminal name and related security information. See the corresponding fieldname definitions for more information.

ALERT-Transaction Information (Type 06010000)

Introduction

Transaction

Security

Information (Type

01000000)

Program Security

Information (Type

02000000)

File Security

Information (Type

03000000)

Map Security

Information (Type

04000000)

Location Security

Information (Type

05000000)

Terminal Security

Information (Type

06000000)

Introduction Input Record Description

Chapter 3. ALRTVCSC Security File Report (CICS) 3-5

This segment defines the CICS transaction IDs for which automatic log records will be generated when entered from this terminal. It is a variable-occurrence segment. The fieldnames defined within this segment can occur up to six times within the parent terminal information record (once for each CICS transaction ID defined).

When the fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every CICS transaction ID so defined.

Terminal Schedule Information (Type 06020000)

This segment defines the scheduled dates and times during which the terminal can be used. It is a multiple-occurrence segment. The fieldnames defined within this segment occur seven times within the parent terminal information record (once for each day of the week).

When a fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every occurrence of the segment in the input record.

Authorized Transaction Information (Type 06030000)

This segment defines the CICS transactions that can be entered from this terminal. It is a variable-occurrence segment. The fieldname defined within this segment type occurs once for each CICS transaction ID authorized for this terminal.

When the fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every CICS transaction ID authorized.

Authorized Program Information (Type 06040000)

This segment defines the CICS programs that can be accessed from this terminal. It is a variable-occurrence segment. The fieldname defined within this segment type occurs once for each CICS program name authorized for this terminal. When the fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every CICS program name authorized.

Authorized File Information (Type 06050000)

This segment defines the CICS file names that can be accessed from this terminal. It is a variable-occurrence segment. The fieldname defined within this segment type occurs once for each CICS file name authorized for this terminal.

When the fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every CICS file name authorized.

Restricted Map Information (Type 06060000)

This segment defines the CICS map names that can be accessed from this terminal. It is a variable-occurrence segment. The fieldname defined within this segment type occurs once for each CICS map name restricted for this terminal.

When the fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every CICS map name restricted.

Input Record Description Introduction

3-6 Auditing and Report Writing Guide

The operator security record defines a single CICS operator and related security information. See the corresponding fieldname definitions for more information.

ALERT-Transaction Information (Type 07010000)

This segment defines the CICS transaction IDs for which automatic log records will be generated whenever executed by this operator. It is a variable-occurrence segment. The fieldname defined within this segment can occur up to six times within the parent operator information record (once for each CICS transaction ID defined).

When the fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every CICS transaction ID so defined.

Operator Schedule Information (Type 07020000)

This segment defines the scheduled dates and times during which the operator can sign on to the CICS system. It is a multiple-occurrence segment. The fieldnames defined within this segment occur seven times within the parent operator information record (once for each day of the week).

When a fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every occurrence of the segment in the input record.

Authorized Transaction Information (Type 07030000)

This segment defines the CICS transactions that this operator can execute. It is a variable-occurrence segment. The fieldname defined within this segment type occurs once for each CICS transaction ID authorized for this operator.

When the fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every CICS transaction ID authorized.

Authorized Program Information (Type 07040000)

This segment defines the CICS programs that are authorized for this operator. It is a variable-occurrence segment. The fieldname defined within this segment type occurs once for each CICS program name authorized for this operator.

When the fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every CICS program name authorized.

Authorized File Information (Type 07050000)

This segment defines the CICS file names that are authorized for this operator. It is a variable-occurrence segment. The fieldname defined within this segment type occurs once for each CICS file name authorized for this operator.

When the fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every CICS file name authorized.

Authorized Map Information (Type 07060000)

Operator Security

Information (Type

07000000)

Introduction Input Record Description

Chapter 3. ALRTVCSC Security File Report (CICS) 3-7

This segment defines the CICS map names that are restricted for this operator. It is a variable-occurrence segment. The fieldname defined within this segment type occurs once for each CICS map name restricted for this operator.

When the fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every CICS map name restricted.

Authorized Field Resource Information (Type 07070000)

This segment defines the field-level resources that are authorized for this operator. It is a variable-occurrence segment. The fieldname defined within this segment type occurs once for each field resource authorized for this operator. When the fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every field resource authorized.

The field resource security record defines a single resource based upon the value for VSAM files of a field (or fields) within a VSAM record.

Field Segment Information (Type 08010000)

This segment identifies the various data fields that define a field resource for VSAM files. It is a variable-occurrence segment. The fieldnames defined within this segment may occur up to five times. When a fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every occurrence of the segment in the input record.

The field resource security record defines a single resource based upon the value for BMS maps of a field (or fields) within a BMS map.

Field Segment Information (Type 09010000)

This segment identifies the various data fields that define a field resource for BMS maps. It is a variable-occurrence segment. The fieldnames defined within this segment may occur up to five times. When a fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every occurrence of the segment in the input record.

The group security record defines a way to treat several resources (transactions, maps, etc.) as a single resource. Thus, an operator who is authorized to have access to a group is authorized to have access to any resource within that group.

Group Alert-Transaction Information (Type 0A010000)

This segment defines the CICS transaction IDs that exist in the group. These transaction IDs will be automatically logged to the violation file whenever this operator executes them. The 0A010000 segment is a variable-occurrence segment. The fieldnames defined within this segment may occur up to six times within the parent group record. When a fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every occurrence of the segment in the input record. See the 0A010000 fieldname definitions for more information.

Field Resource

Information for

VSAM Files (Type

08000000)

Field Resource

Security

Information (Type

09000000)

Group Security

Information (Type

0A000000)

Input Record Description Introduction

3-8 Auditing and Report Writing Guide

Group Authorized Transaction Information (Type 0A030000)

This segment defines the CICS transactions that exist in the group. These transactions may be executed by an operator who is authorized access to the group. The 0A030000 segment is a variable occurrence segment. The fieldnames defined within this segment type occur once for each transaction defined within this group. When a fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every occurrence of the segment in the input record. See the 0A030000 fieldname definitions for more information.

Group Authorized Program Information (Type 0A040000)

This segment defines the CICS programs that exist in the group. These programs may be executed by an operator who is authorized access to the group. The 0A040000 segment is a variable occurrence segment. The fieldnames defined within this segment type occur once for each program defined within this group. When a fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every occurrence of the segment in the input record. See the 0A040000 fieldname definitions for more information.

Group Authorized File Information (Type 0A050000)

This segment defines the CICS files that exist in the group. These files may be executed by an operator who is authorized access to the group. The 0A050000 segment is a variable occurrence segment. The fieldnames defined within this segment type occur once for each file defined within this group. When a fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every occurrence of the segment in the input record. See the 0A050000 fieldname definitions for more information.

Group Authorized Map Information (Type 0A060000)

This segment defines the CICS map names that exist in the group. These maps are restricted for the operator who is authorized access to the group. The 0A060000 segment is a variable occurrence segment. The fieldnames defined within this segment type occur once for each BMS map defined within this group. When a fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every occurrence of the segment in the input record. See the 0A060000 fieldname definitions for more information.

Group Authorized Field Information (Type 0A070000)

This segment defines the field resources that exist in the group. These field resources may be accessed by an operator who is authorized access to the group. The 0A070000 segment is a variable occurrence segment. The fieldnames defined within this segment type occur once for each field resource defined within this group. When a fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every occurrence of the segment in the input record. See the 0A070000 fieldname definitions for more information.

The User Group record contains the group information that exists at the userid and terminal levels. It holds the group names that have been assigned to a userid or terminal. It is also used to keep track of “exceptions” – the resources that have been added to or deleted from a userid or terminal that participates in grouping. User Group Names Information (Type 0B010000)

User Group Record

Information (Type

0B000000)

Introduction Input Record Description

Chapter 3. ALRTVCSC Security File Report (CICS) 3-9

This segment defines the group names that have been assigned to a userid or terminal. The 0B010000 segment is a variable occurrence segment. The fieldnames defined within this segment type occur once for each group that the userid or terminal is authorized for. When a fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every occurrence of the segment in the input record. See the 0B010000 fieldname definitions for more information.

User Group Authorized Transaction Information (Type 0B020000)

This segment defines the CICS transactions that have been assigned to a userid or terminal, in addition to the groups that he is authorized to use. The 0B020000 segment is a variable occurrence segment. The fieldnames defined within this segment type occur once for each transaction that is defined. When a fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every occurrence of the segment in the input record. See the 0B020000 fieldname definitions for more information.

User Group Authorized Program Information (Type 0B030000)

This segment defines the CICS programs that have been assigned to a userid or terminal, in addition to the groups that he is authorized to use. The 0B030000 segment is a variable occurrence segment. The fieldnames defined within this segment type occur once for each program that is defined. When a fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every occurrence of the segment in the input record. See the 0B030000 fieldname definitions for more information.

User Group Authorized File Information (Type 0B040000)

This segment defines the CICS files that have been assigned to a userid or terminal, in addition to the groups that he is authorized to use. The 0B040000 segment is a variable occurrence segment. The fieldnames defined within this segment type occur once for each file that is defined. When a fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every occurrence of the segment in the input record. See the 0B040000 fieldname definitions for more information.

User Group Authorized Map Information (Type 0B050000)

This segment defines the CICS maps that have been assigned to a userid or terminal, in addition to the groups that he is authorized to use. The 0B050000 segment is a variable occurrence segment. The fieldnames defined within this segment type occur once for each map that is defined. When a fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every occurrence of the segment in the input record. See the 0B050000 fieldname definitions for more information.

User Group Authorized Field Resource Information (Type 0B060000)

This segment defines the CICS field resources that have been assigned to a userid or terminal, in addition to the groups that he is authorized to use. The 0B060000 segment is a variable occurrence segment. The fieldnames defined within this segment type occur once for each field resource that is defined. When a fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every occurrence of the segment in the input record. See the 0B060000 fieldname definitions for more information.

Input Record Description Introduction

3-10 Auditing and Report Writing Guide

User Group Excluded Transaction Information (Type 0B070000)

This segment defines the CICS transactions that have been deleted from a userid or terminal, thus overriding the groups that he is authorized to use. The 0B070000 segment is a variable occurrence segment. The fieldnames defined within this segment type occur once for each transaction that is deleted. When a fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every occurrence of the segment in the input record. See the 0B070000 fieldname definitions for more information.

User Group Excluded Program Information (Type 0B080000)

This segment defines the CICS programs that have been deleted from a userid or terminal, thus overriding the groups that he is authorized to use. The 0B080000 segment is a variable occurrence segment. The fieldnames defined within this segment type occur once for each program that is deleted. When a fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every occurrence of the segment in the input record. See the 0B080000 fieldname definitions for more information.

User Group Excluded File Information (Type 0B090000)

This segment defines the CICS files that have been deleted from a userid or terminal, thus overriding the groups that he is authorized to use. The 0B090000 segment is a variable occurrence segment. The fieldnames defined within this segment type occur once for each file that is deleted. When a fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every occurrence of the segment in the input record. See the 0B090000 fieldname definitions for more information.

User Group Excluded Map Information (Type 0B0A0000)

This segment defines the CICS maps that have been deleted from a userid or terminal, thus overriding the groups that he is authorized to use. The 0B0A0000 segment is a variable occurrence segment. The fieldnames defined within this segment type occur once for each map that is deleted. When a fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every occurrence of the segment in the input record. See the 0B0A0000 fieldname definitions for more information.

User Group Excluded Field Resource Information (Type 0B0B0000)

This segment defines the CICS field resources that have been deleted from a userid or terminal, thus overriding the groups that he is authorized to use. The 0B0B0000 segment is a variable occurrence segment. The fieldnames defined within this segment type occur once for each field resource that is deleted. When a fieldname defined within this segment is included in a FIELD or FIELDS command statement, one report output detail line will be generated for every occurrence of the segment in the input record. See the 0B0B0000 fieldname definitions for more information.

Introduction Field Information

Chapter 3. ALRTVCSC Security File Report (CICS) 3-11

Field Information

Report output is comprised of one or more data fields extracted from an input dataset and formatted according to default or user specifications. Each data field is selected from a pre-defined list of ALRTVCSC fieldnames.

At report generation time, each fieldname specified is assigned a report column, positioned from left to right across the report page in the order in which the fieldnames were specified.

Data corresponding to each selected fieldname is located, extracted from the physical input record by the ALRTVCSC I/O module, and moved to, or transformed into, the appropriate output report column, using either the default values described in the fieldname entries or those specified by the user in a FIELD command statement.

The following information is provided for each ALRTVCSC fieldname (if applicable):

Heading Description

Group Field: YES Indicates that the fieldname being defined is a fieldname containing several individual fieldnames within the group. The individual fieldnames are listed. If the fieldname is specified in a SUBTITLE, FIELD, or FIELDS command statement, input

data represented by all individual fieldnames within the group will be printed as a single field.

If the individual fieldnames are specified in a command statement, each fieldname is assigned its own column in the report output detail line.

Field type Each fieldname is defined as a particular field type. By definition, type 00000000 information is present in every input record. Following the type 00000000 common segment information, ALRTVCSC records will contain one subordinate type of field information, type 01000000 to 07000000, containing information as indicated by the RECTYPE field.

Default label-n Default label information is positioned in the output report, if requested, at the top of each page of output. Up to three labels can be specified for each field; they will be placed above the report column reserved for the fieldname.

Occurrences: variable

Indicates that the field is defined within a variable-occurrence segment. This fieldname, if included on any FIELD or FIELDS command statement, will generate a report detail line for every occurrence of the information in the record.

Belongs to group Indicates a higher level group fieldname, which can be included on any SUBTITLE, FIELD, or FIELDS command statement to display the data represented by this fieldname.

(continued)

Field Information Introduction

3-12 Auditing and Report Writing Guide

Heading Description

Input data length Represents the defined length of the data in the input record corresponding to the fieldname. If the length is indicated as variable, then the length of the data field has no pre-defined length, and the amount of data present is defined in each individual input record.

Input data format Indicates that the data in the input record is in one of the following formats:

X Hexadecimal or binary C Printable characters P Packed-decimal

Default output length

This numeric value is the default value used to determine the number of character positions to be reserved in the output report detail line for the column in which the data will be positioned. This value can be increased or decreased by the use of the LENGTH keyword on a FIELD command statement.

Default output format

One of the following output formats is assigned by default for each fieldname; it determines how the data will appear in the output report:

C Character. The input data is simply moved from the input record to the report detail line. Each non-printable character is translated to a period (.).

X Hexadecimal. Each byte or character in the input field is translated to its two-character hexadecimal equivalent.

Z Zoned-decimal. The input data field, up to a length of four, is treated as a binary number and converted to its decimal equivalent. By default, zoned-decimal formatted output fields are zero-suppressed and right-justified in the report column. Users can override the field justification value by using the JUSTIFY keyword on the FIELD command statement. Zero-suppression can be overridden by specifying NOTRUNC on the FIELD or SUBTITLE command statement.

T Transformed. The input data field is replaced by an alternate value, either as set forth in the transformation table shown, or as determined by some other programmed transformation algorithm, such as that performed on BIM-ALERT/CICS TERMPHON field.

Users can override the field output format value by using the FORMAT keyword on the FIELD

command statement.

Fieldname List Common Segment Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-13

Fieldname List

Common Segment Fields

The following fieldnames can be included in any ALRTVCSC report SUBTITLE, FIELD, or FIELDS command statements. These fieldnames are contained in the common segment of all input records and will be printed on all detail lines when appropriate.

Field Description

KEY Input record key.

Field type: 00000000 - Common segment information

Default label-1: RECORD KEY Input data length: 18 Input data format: Hexadecimal (X) Default output data length: 36 Default output data format: Hexadecimal (X)

RECLEN Input record length.

Field type: 00000000 - Common segment information

Default label-1: INPUT Default label-2: RECORD Default label-3: LENGTH Input data length: 2

Input data format: Hexadecimal (X) Default output data length: 6 Default output data format: Zoned-decimal (Z)

DSNAME Input file dataset name.

Field type: 00000000 - Common segment information

Default label-1: INPUT DSNAME Input data length: 44

Input data format: Character (C) Default output data length: 44 Default output data format: Character (C)

(continued)

Common Segment Fields Fieldname List

3-14 Auditing and Report Writing Guide

Field Description

RECTYPE Input record type, which indicates what type of security information is contained in the security file record.

Field type: 00000000 - Common segment information

Default label-1: RECORD Default label-2: TYPE Input data length: 2

Input data format: Character (C) Default output length: 11

Default output format: Transformed (T) C'TX'...........T'TRANSACT-PFX'

C'TR'...........T'TRANSACTION'

C'PX'...........T'PROGRAM-PFX'

C'PR'...........T'PROGRAM'

C'FX'...........T'FILE-PFX'

C'FL'...........T'FILE'

C'MX'...........T'MAP-PFX'

C'MP'...........T'MAP'

C'LO'...........T'LOCATION'

C'DV'...........T'TERMINAL'

C'OP'...........T'OPERATOR'

C'SC'...........T'PASSWD-HIST'

C'RX'...........T'FIELD-RES-PFX'

C'RS'...........T'FLD RESOURCE'

C'UG'...........T'USER GROUP'

C'GR'...........T'GROUP RESOURCE'

C'UP'...........T'USER PROFILE'

(continued)

Fieldname List Common Segment Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-15

Field Description

INFOTYPE Information type. This describes the type of information contained in the field or record.

Field type: 00000000 - Common segment information

Default label-1: INFO Default label-2: TYPE Input data length: 4

Input data format: Hexadecimal (X) Default output length: 23

Default output format: Transformed (T) X'00000000'.....T'Common segment information'

X'01000000'.....T'Transaction information'

X'02000000'.....T'Program information'

X'03000000'.....T'File information'

X'04000000'.....T'Map information'

X'04010000'.....T'Map field information'

X'05000000'.....T'Location information'

X'06000000'.....T'Terminal information'

X'06010000'.....T'Terminal Alert-transaction information'

X'06020000'.....T'Terminal Schedule information'

X'06030000'.....T'Terminal Tranid auth information'

X'06040000'.....T'Terminal Program auth information'

X'06050000'.....T'Terminal File autho information'

X'06060000'.....T'Terminal Map auth information'

X'07000000'.....T'Operator information'

X'07010000'.....T'Operator Alert-transaction information'

X'07020000'.....T'Operator Schedule information'

X'07030000'.....T'Operator Transaction ID auth information'

X'07040000'.....T'Operator Program auth information'

X'07050000'.....T'Operator File auth information'

X'07060000'.....T'Operator Map auth information'

X'07070000'.....T'Operator Field auth information'

X'08000000'.....T'Field information'

X'08010000'.....T'Field segment information'

X'09000000'.....T'Field information'

X'09010000'.....T'Operator Map auth information'

X'0A000000'.....T'Group information'

X'0A010000'.....T'Group Alert-transaction information'

X'0A030000'.....T'Group Transaction auth information'

X'0A040000'.....T'Group Program auth information'

X'0A050000'.....T'Group File auth information'

X'0A060000'.....T'Group Map auth information'

X'0A070000'.....T'Group Field auth information'

X'0B000000'.....T'User-Group auth information'

X'0B010000'.....T'User-Group Alert-tran auth information'

X'0B020000'.....T'User-Group Transaction auth information'

X'0C000000'.....T'User-Profile information'

(continued)

Common Segment Fields Fieldname List

3-16 Auditing and Report Writing Guide

Field Description

SEQNUM Output detail line sequence number.

Field type: 00000000 - Common segment information

Default label-1: none Input data length: 4

Input data format: Hexadecimal (X) - Binary fullword

Default output length: 4

Default output format: Zoned-decimal (Z)

INRECNUM Physical input record sequence number, assigned by the ALRTVCSC I/O module when the input record is read.

Field type: 00000000 - Common segment information

Default label-1: INPT Default label-2: RECD Default label-3: NMBR Input data length: 4

Input data format: Hexadecimal (X) - Binary fullword

Default output length: 4

Default output format: Zoned-decimal (Z)

Fieldname List Transaction Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-17

Transaction Record Fields

The following fieldnames can be included in any ALRTVCSC report SUBTITLE, FIELD, or FIELDS command statements. These fieldnames are contained in the ALRTVCSC input file transaction records (RECTYPE EQ C'TR', segment X'01000000'). These fields will be printed only on report detail lines with other transaction record and common segment fieldnames.

Field Description

TRANSID Transaction ID being secured.

Field type: 01000000 - Transaction information

Default label-1: TRAN

Default label-2: CODE

Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

TRANNBR Transaction number, used internally by BIM-ALERT/CICS.

Default label-1: TRANSACTN Default label-2: NUMBER Field type: 01000000 - Transaction information Input data length: 4

Input data format: Packed decimal (P) Default output length: 7

Default output format: Zoned-decimal (Z)

TRANSEQ Transaction sequence number, used internally by BIM-ALERT/CICS.

Default label-1: TRANSACTN Default label-2: SEQUENCE Default label-3: NUMBER Field type: 01000000 - Transaction information Input data length: 4

Input data format: Packed decimal (P) Default output length: 7

Default output format: Zoned-decimal (Z)

(continued)

Transaction Record Fields Fieldname List

3-18 Auditing and Report Writing Guide

Field Description

TRFRTIME Transaction's scheduled "from" time.

Default label-1: TRANSACTN Default label-2: FROM Default label-3: TIME Field type: 01000000 - Transaction information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

TRTOTIME Transaction's scheduled "to" time.

Default label-1: TRANSACTN Default label-2: TO Default label-3: TIME Field type: 01000000 - Transaction information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

TRSTATUS Transaction status.

Default label-1: TRANSACTN Default label-2: STATUS Field type: 01000000 - Transaction information Input data length: 1

Input data format: Character (C) Default output length: 9

Default output format: Transformed (T)

C'A'............T'ACTIVE'

C'D'............T'DISABLED'

C'M'............T'MONITOR'

C'S'............T'SAFE'

C'P'............T'PRELOADED'

TRDESCR Transaction description.

Default label-1: TRANSACTN Default label-2: DESCRIPTION Field type: 01000000 - Transaction information Input data length: 30

Input data format: Character (C) Default output length: 30

Default output format: Character (C)

Fieldname List Program Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-19

Program Record Fields

The following fieldnames can be included in any ALRTVCSC report SUBTITLE, FIELD, or FIELDS command statements. These fieldnames are contained in the ALRTVCSC input file program records (RECTYPE EQ C'PR', segment X'02000000'). These fields will be printed only on report detail lines with other program record and common segment fieldnames.

Field Description

PROGNAME Program name.

Default label-1: PROGRAM Default label-2: NAME Field type: 02000000 - Program information Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

PROGNUM Program number, used internally by BIM-ALERT/CICS.

Default label-1: PROGRAM Default label-2: NUMBER Field type: 02000000 - Program information Input data length: 4

Input data format: Packed decimal (P) Default output length: 7

Default output format: Zoned-decimal (Z)

PROGSEQ Program sequence number, used internally by BIM-ALERT/CICS.

Default label-1: PROGRAM Default label-2: SEQUENCE Default label-3: NUMBER Field type: 02000000 - Program information Input data length: 4

Input data format: Packed decimal (P) Default output length: 7

Default output format: Zoned-decimal (Z)

(continued)

Program Record Fields Fieldname List

3-20 Auditing and Report Writing Guide

Field Description

PROGFTIM Program's scheduled "from" time.

Default label-1: PROGRAM Default label-2: FROM Default label-3: TIME Field type: 02000000 - Program information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

PROGTTIM Program's scheduled "to" time.

Default label-1: PROGRAM Default label-2: TO Default label-3: TIME Field type: 02000000 - Program information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

PROGSTAT Program's status.

Default label-1: PROGRAM

Default label-2: STATUS

Field type: 02000000 - Program information

Input data length: 1

Input data format: Character (C) Default output length: 9

Default output format: Transformed (T)

C'A'............T'ACTIVE'

C'D'............T'DISABLED'

C'M'............T'MONITOR'

C'P'............T'PRELOADED'

PROGDESC Program description.

Default label-1: PROGRAM Default label-2: DESCRIPTION Field type: 02000000 - Program information Input data length: 30

Input data format: Character (C) Default output length: 30

Default output format: Character (C)

Fieldname List File Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-21

File Record Fields

The following fieldnames can be included in any ALRTVCSC report SUBTITLE, FIELD, or FIELDS command statements. These fieldnames are contained in the file records of the ALRTVCSC input file (RECTYPE EQ C'FL', segment X'03000000'). These fields will be printed only on report detail lines with other file record and common segment fieldnames.

Field Description

FILENAME File name.

Default label-1: FILE Default label-2: NAME Field type: 03000000 - File information Input data length: 8 Input data format: Character (C) Default output length: 8

Default output format: Character (C)

FILENUM File number, used internally by BIM-ALERT/CICS.

Default label-1: FILE Default label-2: NUMBER Field type: 03000000 - File information Input data length: 4

Input data format: Packed decimal (P) Default output length: 7

Default output format: Zoned-decimal (Z)

FILESEQ File sequence number, used internally by BIM-ALERT/CICS.

Default label-1: FILE Default label-2: SEQUENCE Default label-3: NUMBER Field type: 03000000 - File information Input data length: 4

Input data format: Packed decimal (P) Default output length: 7

Default output format: Zoned-decimal (Z)

FILEFTIM File's scheduled "from" time.

Default label-1: FILE Default label-2: FROM Default label-3: TIME Field type: 03000000 - File information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

File Record Fields Fieldname List

3-22 Auditing and Report Writing Guide

(continued)

Fieldname List File Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-23

Field Description

FILETTIM File's scheduled "to" time.

Default label-1: FILE Default label-2: TO Default label-3: TIME Field type: 03000000 - File information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

FILESTAT File's status.

Default label-1: FILE Default label-2: STATUS Field type: 03000000 - File information Input data length: 1

Input data format: Character (C) Default output length: 9

Default output format: Transformed (T)

C'A'............T'ACTIVE'

C'D'............T'DISABLED'

C'M'............T'MONITOR'

C'P'............T'PRELOADED'

FILEPROC File process type.

Default label-1: FILE Default label-2: PROCESS Default label-3: TYPE Field type: 03000000 - File information Input data length: 1

Input data format: Character (C) Default output length: 7

Default output format: Transformed (T)

C'U'............T'UPDATE'

C'I'............T'INQUIRY'

FILEDESC File description.

Default label-1: FILE Default label-2: DESCRIPTION Field type: 03000000 - File information Input data length: 30

Input data format: Character (C) Default output length: 30

Default output format: Character (C)

Map Record Fields Fieldname List

3-24 Auditing and Report Writing Guide

Map Record Fields

The following fieldnames can be included in any ALRTVCSC report SUBTITLE, FIELD, or FIELDS command statements. These fieldnames are contained in the ALRTVCSC input file map records (RECTYPE EQ C'MP', segment X'04000000'). These fields will be printed only on report detail lines with other map record and common segment fieldnames.

Field Description

MAPNAME Map name.

Default label-1: MAP Default label-2: NAME Field type: 04000000 - Map information Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

MAPNUM Map number, used internally by BIM-ALERT/CICS.

Default label-1: MAP Default label-2: NUMBER Field type: 04000000 - Map information Input data length: 4

Input data format: Packed decimal (P) Default output length: 7

Default output format: Zoned-decimal (Z)

MAPSEQ Map sequence number, used internally by BIM-ALERT/CICS.

Default label-1: MAP Default label-2: SEQUENCE Default label-3: NUMBER Field type: 04000000 - Map information Input data length: 4

Input data format: Packed decimal (P) Default output length: 7

Default output format: Zoned-decimal (Z)

(continued)

Fieldname List Map Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-25

Field Description

MAPSET Mapset name.

Default label-1: MAPSET Default label-2: NAME Field type: 04000000 - Map information Input data length: 7

Input data format: Character (C) Default output length: 7

Default output format: Character (C)

MAPTITLE Map description.

Default label-1: MAP Default label-2: TITLE Field type: 04000000 - Map information Input data length: 20

Input data format: Character (C) Default output length: 20

Default output format: Character (C)

MAPSTAT Map's status.

Default label-1: MAP Default label-2: STATUS Field type: 04000000 - Map information Input data length: 1

Input data format: Character (C) Default output length: 9

Default output format: Transformed (T)

C'A'............T'ACTIVE'

C'D'............T'DISABLED'

MAPFDNUM Map restricted field number.

Default label-1: MAP Default label-2: FLD Default label-3: NUM Occurrences: Variable Field type: 04010000 - Map field information Input data length: 2

Input data format: Packed-decimal (P) Default output length: 3

Default output format: Zoned-decimal (Z)

(continued)

Map Record Fields Fieldname List

3-26 Auditing and Report Writing Guide

Field Description

MAPFDISP Map restricted field display indicator.

Default label-1: MAP Default label-2: FLD Default label-3: DSPL Occurrences: Variable Field type: 04010000 - Map field information Input data length: 1

Input data format: Character (C) Default output length: 3

Default output format: Transformed (T)

C'Y'............T'YES'

C'N'............T'NO'

MAPFDSCR Map restricted field description.

Default label-1: MAP Default label-2: FIELD Default label-3: DESCRIPTION Occurrences: Variable Field type: 04010000 - Map field information Input data length: 20

Input data format: Character (C) Default output length: 20

Default output format: Character (C)

Fieldname List Location Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-27

Location Record Fields

The following fieldnames can be included in any ALRTVCSC report SUBTITLE, FIELD, or FIELDS command statements. These fieldnames are contained in the ALRTVCSC input file location records (RECTYPE EQ C'LO', segment X'05000000'). These fields will be printed only on report detail lines with other location record and common segment fieldnames.

Field Description

LOCATION Location code.

Group Field: YES - Input data represented by the following fieldnames will be printed under the LOCATION column heading:

COMPANY DIVISION DEPARTMT SECTION

Data represented by these fieldnames can be printed in separate report columns by including the individual fieldnames instead of the group fieldname in the SUBTITLE, FIELD or FIELDS command statement.

Default label-1: LOCATION Field type: 05000000 - Location information Input data length: 16

Input data format: Character (C) Default output length: 16

Default output format: Character (C)

COMPANY Company number.

Belongs to group: LOCATION

Default label-1: COMP Default label-2: NUM Field type: 05000000 - Location information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

COMPNAME Company name.

Default label-1: COMPANY NAME Field type: 05000000 - Location information Input data length: 4

Input data format: Character (C) Default output length: 35

Default output format: Transformed (T)

(continued)

Location Record Fields Fieldname List

3-28 Auditing and Report Writing Guide

Field Description

DIVISION Division number.

Belongs to group: LOCATION

Default label-1: DIV. Default label-2: NUM Field type: 05000000 - Location information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

DIVNAME Division name.

Default label-1: DIVISION NAME Field type: 05000000 - Location information Input data length: 8

Input data format: Character (C) Default output length: 35

Default output format: Transformed (T)

DEPARTMT Department number.

Belongs to group: LOCATION

Default label-1: DEPT Default label-2: NUM Field type: 05000000 - Location information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

DEPTNAME Department name.

Default label-1: DEPARTMENT NAME Field type: 05000000 - Location information Input data length: 12

Input data format: Character (C) Default output length: 35

Default output format: Transformed (T)

SECTION Section number.

Belongs to group: LOCATION

Default label-1: SECT Default label-2: NUM Field type: 05000000 - Location information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

(continued)

Fieldname List Location Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-29

Field Description

SECTNAME Section name.

Default label-1: SECTION NAME Field type: 05000000 - Location information Input data length: 16

Input data format: Character (C) Default output length: 35

Default output format: Transformed (T)

LOCSTAT Location status.

Default label-1: LOC Default label-2: STATUS Field type: 05000000 - Location information Input data length: 1

Input data format: Character (C) Default output length: 9

Default output format: Transformed (T)

C'A'............T'ACTIVE'

C'D'............T'DISABLED'

LOCNAME Location name.

Default label-1: LOCATION Default label-2: NAME Field type: 05000000 - Location information Input data length: 35

Input data format: Character (C) Default output length: 35

Default output format: Character (C)

Terminal Record Fields Fieldname List

3-30 Auditing and Report Writing Guide

Terminal Record Fields

The following fieldnames can be included in any ALRTVCSC report SUBTITLE, FIELD, or FIELDS command statements. These fieldnames are contained in the ALRTVCSC input file terminal records (RECTYPE EQ C'DV', segment X'06000000'). These fields will be printed only on report detail lines with other terminal record and common segment fieldnames.

Field Description

TERMID Terminal name.

Default label-1: TERM Default label-2: ID Field type: 06000000 - Terminal information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

TERMMODL Terminal after which this terminal was modeled.

Default label-1: TERM Default label-2: MODEL Field type: 06000000 - Terminal information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

TERMPHON Phone number to be called if violations are detected at this terminal.

Default label-1: TERM Default label-2: PHONE Default label-3: NUMBER Field type: 06000000 - Terminal information Input data length: 10 Input data format: Character (C) Default output length: 14 Default output format: Transformed (T) C''............T'(612)933-2885'

(continued)

Fieldname List Terminal Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-31

Field Description

TRMLOCTN Company, division, department, and section where this terminal is located.

Group Field: YES - Input data represented by the following fieldnames will be printed under the TRMLOCTN column heading:

TERMCOMP TERMDIV TERMDEPT TERMSECT

Data represented by these fieldnames can be printed in separate report columns by including the individual fieldnames instead of the group fieldname in the FIELD or FIELDS command statement.

Default label-1: TERMINAL Default label-2: LOCATION Field type: 06000000 - Terminal information Input data length: 16

Input data format: Character (C) Default output length: 16

Default output format: Character (C)

TERMCOMP Company number where this terminal is located.

Belongs to group: TRMLOCTN

Default label-1: TERM Default label-2: COMP Field type: 06000000 - Terminal information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

TERMDIV Division number where this terminal is located.

Belongs to group: TRMLOCTN

Default label-1: TERM Default label-2: DIV. Field type: 06000000 - Terminal information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

(continued)

Terminal Record Fields Fieldname List

3-32 Auditing and Report Writing Guide

Field Description

TERMDEPT Department number where this terminal is located.

Belongs to group: TRMLOCTN

Default label-1: TERM

Default label-2: DEPT

Field type: 06000000 - Terminal information

Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

TERMSECT Section number where this terminal is located.

Belongs to group: TRMLOCTN

Default label-1: TERM Default label-2: SECT Field type: 06000000 - Terminal information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

TRMCNAME Company name where this terminal is located.

Default label-1: COMPANY NAME Field type: 06000000 - Terminal information Input data length: 4

Input data format: Character (C) Default output length: 35

Default output format: Transformed (T)

TRMVNAME Division name where this terminal is located.

Default label-1: DIVISION NAME Field type: 06000000 - Terminal information Input data length: 8

Input data format: Character (C) Default output length: 35

Default output format: Transformed (T)

TRMDNAME Department name where this terminal is located.

Default label-1: DEPARTMENT NAME Field type: 06000000 - Terminal information Input data length: 12

Input data format: Character (C) Default output length: 35

Default output format: Transformed (T)

(continued)

Fieldname List Terminal Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-33

Field Description

TRMSNAME Section name where this terminal is located.

Default label-1: SECTION NAME Field type: 06000000 - Terminal information Input data length: 16

Input data format: Character (C) Default output length: 35

Default output format: Transformed (T)

TERMSTAT Terminal status.

Default label-1: TERM Default label-2: STATUS Field type: 06000000 - Terminal information Input data length: 1

Input data format: Character (C) Default output length: 9

Default output format: Transformed (T)

C'A'............T'ACTIVE'

C'D'............T'DISABLED'

C'P'............T'PRELOADED'

C'V'............T'SUSPENDED'

TRMTIMLM Terminal inactive time limit.

Default label-1: TERMINAL

Default label-2: INACTIVE

Default label-3: TIME LMT

Field type: 06000000 - Terminal information

Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T)

TMOPSNEX Terminal operator sign-on status, which indicates whether the operator using the terminal is exempt from signing on.

Default label-1: TRM-OP Default label-2: SIGNON Default label-3: EXEMPT Field type: 06000000 - Terminal information Input data length: 1

Input data format: Character (C) Default output length: 3

Default output format: Transformed (T)

C'O'............T'OPT'

C'Y'............T'YES'

C'N'............T'NO'

(continued)

Terminal Record Fields Fieldname List

3-34 Auditing and Report Writing Guide

Field Description

TERMSNEX Terminal sign-on status, which indicates whether the terminal is exempt from sign-on procedures.

Default label-1: TERM Default label-2: SIGNON Default label-3: EXEMPT Field type: 06000000 - Terminal information Input data length: 1

Input data format: Character (C) Default output length: 3

Default output format: Transformed (T)

C'Y'............T'YES'

C'N'............T'NO'

TERMSCDT Date the terminal password was issued.

Default label-1: TERM Default label-2: SCTY-CODE Default label-3: DATE Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexidecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

TRMEFFDT New password effective date.

Default label-1: TERM Default label-2: NEW SCODE Default label-3: EFF. DATE Field type: 06000000 - Terminal information Input data length: 4

Input data format: hexidecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

(continued)

Fieldname List Terminal Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-35

Field Description

TRMVIORP Terminal ID of the terminal to be notified in real-time that a violation has been detected on this terminal.

Default label-1: VIOLATION Default label-2: REPORT Default label-3: TERMID Field type: 06000000 - Terminal information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

TRMPRINT Terminal ID of the printer to be notified in real-time that a violation has been detected on this terminal.

Default label-1: TERM Default label-2: ASSOC Default label-3: PRINTER Field type: 06000000 - Terminal information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

TERMGRP Name of the user-defined group to which this terminal belongs.

Default label-1: TERM Default label-2: GROUP Default label-3: ID Field type: 06000000 - Terminal information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

TERMPROC Terminal process type.

Default label-1: TERM Default label-2: PROC Default label-3: TYPE Field type: 06000000 - Terminal information Input data length: 1

Input data format: Character (C) Default output length: 7

Default output format: Transformed (T)

C'U'............T'UPDATE'

C'I'............T'INQUIRY'

(continued)

Terminal Record Fields Fieldname List

3-36 Auditing and Report Writing Guide

Field Description

TRMADMIN Administrator or subadministrator who owns the terminal profile.

Default label-1: TERM Default label-2: ADMIN Default label-3: NBR Field type: 06000000 - Terminal information Input data length: 9

Input data format: Character (C) Default output length: 9

Default output format: Character (C)

TRMTIMDF Time zone differential (number of hours, + or -) between the terminal location and that of the host CPU.

Default label-1: TERM Default label-2: TIME Default label-3: DIFF Field type: 06000000 - Terminal information Input data length: 2

Input data format: Character (C) Default output length: 2

Default output format: Character (C)

TRMUSRDA Terminal user defined data.

Default label-1: TERMINAL Default label-2: USER Default label-3: INFO Field type: 06000000 - Terminal information Input data length: 10

Input data format: Character (C) Default output length: 10

Default output format: Character (C)

TRMLOGO Terminal logo suffix ID.

Default label-1: TERM Default label-2: LOGO Default label-3: SUFX Field type: 06000000 - Terminal information Input data length: 2

Input data format: Character (C) Default output length: 2

Default output format: Character (C)

(continued)

Fieldname List Terminal Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-37

Field Description

TRMLANG Terminal message language suffix.

Default label-1: TERM Default label-2: MESG Default label-3: SUFX Field type: 06000000 - Terminal information Input data length: 2

Input data format: Character (C) Default output length: 2

Default output format: Character (C)

TRMALTRN Terminal alert transactions.

Group field: YES - Input data represented by the following fieldnames will be printed on one or more separate detail lines under the TRMALTRN column heading:

TRMALTR1 TRMALTR2 TRMALTR3 TRMALTR4 TRNALTR5

TRMALTR6

Data represented by these fieldnames can be printed in separate report columns by specifying the individual fieldnames instead of the group fieldname in the SUBTITLE, FIELD, or FIELDS command statement.

Default label-1: TERM Default label-2: ALERT Default label-3: TRAN Occurrences: Variable Field type: 06010000 - Terminal transaction information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

TRMALTR1 Terminal alert transaction 1.

Default label-1: TERM Default label-2: ALERT Default label-3: TRAN1

Belongs to group: TRMALTRN Field type: 06000000 - Terminal information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

(continued)

Terminal Record Fields Fieldname List

3-38 Auditing and Report Writing Guide

Field Description

TRMALTR2 Terminal alert transaction 2.

Default label-1: TERM Default label-2: ALERT Default label-3: TRAN2 Field type: 06000000 - Terminal information

Belongs to group: TRMALTRN Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

TRMALTR3 Terminal alert transaction 3.

Default label-1: TERM Default label-2: ALERT Default label-3: TRAN3

Belongs to group: TRMALTRN Field type: 06000000 - Terminal information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

TRMALTR4 Terminal alert transaction 4.

Default label-1: TERM Default label-2: ALERT Default label-3: TRAN4

Belongs to group: TRMALTRN Field type: 06000000 - Terminal information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

TRMALTR5 Terminal alert transaction 5.

Default label-1: TERM Default label-2: ALERT Default label-3: TRAN5

Belongs to group: TRMALTRN Field type: 06000000 - Terminal information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

(continued)

Fieldname List Terminal Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-39

Field Description

TRMALTR6 Terminal alert transaction 6.

Default label-1: TERM Default label-2: ALERT Default label-3: TRAN6

Belongs to group: TRMALTRN Field type: 06000000 - Terminal information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

TMSCHDAY Terminal schedule day.

Default label-1: TERM Default label-2: SCHED Default label-3: DAY Field type: 06020000 - Terminal schedule information Occurrences: Multiple - seven lines of output will be generated if this fieldname is specified, representing schedule restrictions assigned to each day of the week. Input data length: 1

Input data format: Character (C) Default output length: 9

Default output format: Transformed (T)

C'1'............T'SUNDAY'

C'2'............T'MONDAY'

C'3'............T'TUESDAY'

C'4'............T'WEDNESDAY'

C'5'............T'THURSDAY'

C'6'............T'FRIDAY'

C'7'............T'SATURDAY'

TMSCHFTM Terminal scheduled "from" time.

Default label-1: TERM Default label-2: SCHED Default label-3: FROM-TIME Field type: 06020000 - Terminal schedule information Occurrences: Multiple - seven lines of output will be generated if this fieldname is specified, representing schedule restrictions assigned to each day of the week. Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T)

X'00001770'.....T' 00:01 '

(continued)

Terminal Record Fields Fieldname List

3-40 Auditing and Report Writing Guide

Field Description

TMSCHTTM Terminal scheduled "to" time.

Default label-1: TERM Default label-2: SCHED Default label-3: TO-TIME Field type: 06020000 - Terminal schedule information Occurrences: Multiple - seven lines of output will be generated if this fieldname is specified, representing schedule restrictions assigned to each day of the week. Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

TMTMPFTM Terminal temporary "from" time.

Default label-1: TERM Default label-2: TEMP Default label-3: FROM-TIME Field type: 06020000 - Terminal schedule information Occurrences: Multiple - seven lines of output will be generated if this fieldname is specified, representing schedule restrictions assigned to each day of the week. Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

TMTMPTTM Terminal temporary "to" time.

Default label-1: TERM Default label-2: TEMP Default label-3: TO-TIME Field type: 06020000 - Terminal schedule information Occurrences: Multiple - seven lines of output will be generated if this fieldname is specified, representing schedule restrictions assigned to each day of the week. Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

(continued)

Fieldname List Terminal Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-41

Field Description

TMTMPEFD Terminal temporary schedule effective date.

Default label-1: TERM Default label-2: TEMP Default label-3: EFF DATE Field type: 06020000 - Terminal schedule information Occurrences: Multiple - seven lines of output will be generated if this fieldname is specified, representing schedule restrictions assigned to each day of the week. Input data length: 4

Input data format: Hexidecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

TMTMPEFX Terminal temporary schedule expiration date.

Default label-1: TERM Default label-2: TEMP Default label-3: EXP DATE Field type: 06020000 - Terminal schedule information Occurrences: Multiple - seven lines of output will be generated if this fieldname is specified, representing schedule restrictions assigned to each day of the week. Input data length: 4

Input data format: Hexidecimal (X) Default output length: 1

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

TMSFTMSU Sunday scheduled "from" time.

Default label-1: SUNDAY Default label-2: SCHED Default label-3: FROM-TIME Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

(continued)

Terminal Record Fields Fieldname List

3-42 Auditing and Report Writing Guide

Field Description

TMSTTMSU Sunday scheduled "to" time.

Default label-1: SUNDAY Default label-2: SCHED Default label-3: TO-TIME Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

TMTFTMSU Sunday temporary "from" time.

Default label-1: SUNDAY Default label-2: TEMP Default label-3: FROM-TIME Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

TMTTTMSU Sunday temporary "to" time.

Default label-1: SUNDAY Default label-2: TEMP Default label-3: TO-TIME Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

(continued)

Fieldname List Terminal Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-43

Field Description

TMTEFDSU Sunday temporary effective date.

Default label-1: SUNDAY Default label-2: TEMP Default label-3: EFF DATE Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

TMTEFXSU Sunday temporary expiration date.

Default label-1: SUNDAY Default label-2: TEMP Default label-3: EXP DATE Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

TMSFTMMO Monday scheduled "from" time.

Default label-1: MONDAY Default label-2: SCHED Default label-3: FROM-TIME Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

(continued)

Terminal Record Fields Fieldname List

3-44 Auditing and Report Writing Guide

Field Description

TMSTTMMO Monday scheduled "to" time.

Default label-1: MONDAY Default label-2: SCHED Default label-3: TO-TIME Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

TMTFTMMO Monday temporary "from" time.

Default label-1: MONDAY Default label-2: TEMP Default label-3: FROM-TIME Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

TMTTTMMO Monday temporary "to" time.

Default label-1: MONDAY Default label-2: TEMP Default label-3: TO-TIME Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

TMTEFDMO Monday temporary effective date.

Default label-1: MONDAY Default label-2: TEMP Default label-3: EFF DATE Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

(continued)

Fieldname List Terminal Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-45

Field Description

TMTEFXMO Monday temporary expiration date.

Default label-1: MONDAY Default label-2: TEMP Default label-3: EXP DATE Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

TMSFTMTU Tuesday scheduled "from" time.

Default label-1: TUESDAY Default label-2: SCHED Default label-3: FROM-TIME Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

TMSTTMST Tuesday scheduled "to" time.

Default label-1: TUESDAY Default label-2: SCHED Default label-3: TO-TIME Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

TMTFTMTU Tuesday temporary "from" time.

Default label-1: TUESDAY Default label-2: TEMP Default label-3: FROM-TIME Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

(continued)

Terminal Record Fields Fieldname List

3-46 Auditing and Report Writing Guide

Field Description

TMTTTMTU Tuesday temporary "to" time.

Default label-1: TUESDAY Default label-2: TEMP Default label-3: TO-TIME Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

TMTEFDTU Tuesday temporary effective date.

Default label-1: TUESDAY Default label-2: TEMP Default label-3: EFF DATE Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

TMTEFXTU Tuesday temporary expiration date.

Default label-1: TUESDAY Default label-2: TEMP Default label-3: EXP DATE Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

(continued)

Fieldname List Terminal Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-47

Field Description

TMSFTMWE Wednesday scheduled "from" time.

Default label-1: WEDNESDAY Default label-2: SCHED Default label-3: FROM-TIME Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

TMSTTMWE Wednesday scheduled "to" time.

Default label-1: WEDNESDAY Default label-2: SCHED Default label-3: TO-TIME Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

TMTFTMWE Wednesday temporary "from" time.

Default label-1: WEDNESDAY Default label-2: TEMP Default label-3: FROM-TIME Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

(continued)

Terminal Record Fields Fieldname List

3-48 Auditing and Report Writing Guide

Field Description

TMTTTMWE Wednesday temporary "to" time.

Default label-1: WEDNESDAY Default label-2: TEMP Default label-3: TO-TIME Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

TMTEFDWE Wednesday temporary effective date.

Default label-1: WEDNESDAY Default label-2: TEMP Default label-3: EFF DATE Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

TMTEFXWE Wednesday temporary expiration date.

Default label-1: WEDNESDAY Default label-2: TEMP Default label-3: EXP DATE Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

TMSFTMTH Thursday scheduled "from" time.

Default label-1: THURSDAY Default label-2: SCHED Default label-3: FROM-TIME Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

(continued)

Fieldname List Terminal Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-49

Field Description

TMSTTMTH Thursday scheduled "to" time.

Default label-1: THURSDAY Default label-2: SCHED Default label-3: TO-TIME Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

TMTFTMTH Thursday temporary "from" time.

Default label-1: THURSDAY Default label-2: TEMP Default label-3: FROM-TIME Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

TMTTTMTH Thursday temporary "to" time.

Default label-1: THURSDAY Default label-2: TEMP Default label-3: TO-TIME Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

TMTEFDTH Thursday temporary effective date.

Default label-1: THURSDAY Default label-2: TEMP Default label-3: EFF DATE Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

(continued)

Terminal Record Fields Fieldname List

3-50 Auditing and Report Writing Guide

Field Description

TMTEFXTH Thursday temporary expiration date.

Default label-1: THURSDAY Default label-2: TEMP Default label-3: EXP DATE Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

TMSFTMFR Friday scheduled "from" time.

Default label-1: FRIDAY Default label-2: SCHED Default label-3: FROM-TIME Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

TMSTTMFR Friday scheduled "to" time.

Default label-1: FRIDAY Default label-2: SCHED Default label-3: TO-TIME Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

(continued)

Fieldname List Terminal Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-51

Field Description

TMTFTMFR Friday temporary "from" time.

Default label-1: FRIDAY Default label-2: TEMP Default label-3: FROM-TIME Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

TMTTTMFR Friday temporary "to" time.

Default label-1: FRIDAY Default label-2: TEMP Default label-3: TO-TIME Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

TMTEFDFR Friday temporary effective date.

Default label-1: FRIDAY Default label-2: TEMP Default label-3: EFF DATE Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

TMTEFXFR Friday temporary expiration date. Default label-1: FRIDAY Default label-2: TEMP Default label-3: EXP DATE Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

(continued)

Terminal Record Fields Fieldname List

3-52 Auditing and Report Writing Guide

Field Description

TMSFTMSA Saturday scheduled "from" time.

Default label-1: SATURDAY Default label-2: SCHED Default label-3: FROM-TIME Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

TMSTTMSA Saturday scheduled "to" time.

Default label-1: SATURDAY Default label-2: SCHED Default label-3: TO-TIME Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

TMTFTMSA Saturday temporary "from" time.

Default label-1: SATURDAY Default label-2: TEMP Default label-3: FROM-TIME Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

(continued)

Fieldname List Terminal Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-53

Field Description

TMTTTMSA Saturday temporary "to" time.

Default label-1: SATURDAY Default label-2: TEMP Default label-3: TO-TIME Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

TMTEFDSA Saturday temporary effective date.

Default label-1: SATURDAY Default label-2: TEMP Default label-3: EFF DATE Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

TMTEFXSA Saturday temporary expiration date.

Default label-1: SATURDAY Default label-2: TEMP Default label-3: EXP DATE Field type: 06000000 - Terminal information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

(continued)

Terminal Record Fields Fieldname List

3-54 Auditing and Report Writing Guide

Field Description

TMTRAUTH Terminal transaction authority (ALL, YES, or NONE).

Default label-1: TERM Default label-2: TRAN Default label-3: AUTH Field type: 06000000 - Terminal information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

TMTRAUTL Terminal transaction authorization list.

Default label-1: TERM Default label-2: TRAN Default label-3: AUTH Field type: 06030000 - Terminal transaction information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every transaction authorized for this terminal. Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

TMTRAUTF Terminal authorized transaction "from" time.

Default label-1: TRAN Default label-2: SCHED Default label-3: FROM-TIME Field type: 06030000 - Terminal transaction information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every transaction authorized for this terminal. Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

(continued)

Fieldname List Terminal Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-55

Field Description

TMTRAUTT Terminal authorized transaction "to" time.

Default label-1: TRAN Default label-2: SCHED Default label-3: TO-TIME Field type: 06030000 - Terminal transaction information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every transaction authorized for this terminal. Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

TMTRAUTD Terminal authorized transaction description.

Default label-1: TRANSACTION Default label-2: DESCRIPTION Field type: 06030000 - Terminal transaction information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every transaction authorized for this terminal. Input data length: 30

Input data format: Character (C) Default output length: 30

Default output format: Character (C)

TMPRAUTH Terminal program authority (ALL, YES, or NONE).

Default label-1: TERM Default label-2: PROG Default label-3: AUTH Field type: 06000000 - Terminal information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

(continued)

Terminal Record Fields Fieldname List

3-56 Auditing and Report Writing Guide

Field Description

TMPRAUTL Terminal program authorization list.

Default label-1: TERM Default label-2: PROG Default label-3: AUTH Field type: 06040000 - Terminal program information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every program authorized for this terminal. Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

TMPRAUTF Terminal authorized program "from" time.

Default label-1: PROG Default label-2: SCHED Default label-3: FROM-TIME Field type: 06040000 - Terminal program information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every program authorized for this terminal. Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

TMPRAUTT Terminal authorized program "to" time.

Default label-1: PROG Default label-2: SCHED Default label-3: TO-TIME Field type: 06040000 - Terminal program information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every program authorized for this terminal. Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

(continued)

Fieldname List Terminal Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-57

Field Description

TMPRAUTD Terminal authorized program description.

Default label-1: PROGRAM Default label-2: DESCRIPTION Field type: 06040000 - Terminal program information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every program authorized for this terminal. Input data length: 30

Input data format: Character (C) Default output length: 30

Default output format: Character (C)

TMFLAUTH Terminal file authority (ALL, YES, or NONE).

Default label-1: TERM Default label-2: FILE Default label-3: AUTH Field type: 06000000 - Terminal information Input data length: 4

Input data format: Character (C) Default output length: 4

Output data format: Character (C)

TMFLAUTL Terminal file authorization list.

Default label-1: TERM Default label-2: FILE Default label-3: AUTH Field type: 06050000 - Terminal file information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every program authorized for this terminal. Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

(continued)

Terminal Record Fields Fieldname List

3-58 Auditing and Report Writing Guide

Field Description

TMFLAUTC Terminal file access authorization. Specify in conjunction with field TMFLAUTH, which names the file to which the terminal is granted or denied update access.

Default label-1: TERM Default label-2: FILE Default label-3: ACCESS Field type: 06050000 - Terminal file information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every program authorized for this terminal. Input data length: 1

Input data format: Character (C) Default output length: 3

Default output format: Transformed (T)

C'I'............T'INQUIRY'

C'N'............T'UPDATE'

TMFLAUTF Terminal authorized file scheduled "from" time.

Default label-1: FILE Default label-2: SCHED Default label-3: FROM-TIME Field type: 06050000 - Terminal file information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every program authorized for this terminal. Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

(continued)

Fieldname List Terminal Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-59

Field Description

TMFLAUTT Terminal authorized file scheduled "to" time.

Default label-1: FILE Default label-2: SCHED Default label-3: TO-TIME Field type: 06050000 - Terminal file information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every program authorized for this terminal. Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

X'AFCB46BC'.....T'01/01/1998'

TMFLAUTD Terminal authorized file description.

Default label-1: FILE Default label-2: DESCRIPTION Field type: 06050000 - Terminal file information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every program authorized for this terminal. Input data length: 30

Input data format: Character (C) Default output length: 30

Default output format: Character (C)

TMMPAUTH Terminal map restrictions (YES or NONE).

Default label-1: TERM Default label-2: MAP Default label-3: AUTH Field type: 06000000 - Terminal information Input data length: 4

Input data format: Character (C) Default output length: 4

Output data format: Character (C)

(continued)

Terminal Record Fields Fieldname List

3-60 Auditing and Report Writing Guide

Field Description

TMMPAUTL Terminal restricted map list.

Default label-1: TERM Default label-2: MAP Default label-3: AUTH Field type: 06060000 - Terminal map information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every program authorized for this terminal. Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

TMMPAUTM Terminal restricted mapset name.

Default label-1: MAPSET Default label-2: NAME Field type: 06060000 - Terminal map information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every program authorized for this terminal. Input data length: 7

Input data format: Character (C) Default output length: 7

Default output format: Character (C)

TMMPAUTD Terminal restricted map title.

Default label-1: MAP Default label-2: TITLE Field type: 06060000 - Terminal map information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every program authorized for this terminal. Input data length: 20

Input data format: Character (C) Default output length: 20

Default output format: Character (C)

Fieldname List Operator Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-61

Operator Record Fields

The following fieldnames can be included in any ALRTVCSC report SUBTITLE, FIELD,

or FIELDS command statement. These fieldnames are contained in the ALRTVCSC input operator records (RECTYPE EQ C'OP', segment X'07000000'). These fields will be printed only on report detail lines with other operator record and common segment fieldnames.

Field Description

OPRNUMBR User ID.

Default label-1: USERID Field type: 07000000 - Operator information Input data length: 9

Input data format: Character (C) Default output length: 9

Default output format: Character (C)

OPUSERID User ID.

Default label-1: USERID Field type: 07000000 - Operator information Input data length: 9

Input data format: Character (C) Default output length: 9

Default output format: Character (C)

OPRIUIID IUI User ID.

Default label-1: IUI Default label-2: USERID Field type: 07000000 - Operator information Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

OPROPID CICS OP-ID.

Default label-1: OPID Field type: 07000000 - Operator information Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

(continued)

Operator Record Fields Fieldname List

3-62 Auditing and Report Writing Guide

Field Description

OPRNAME User name.

Default label-1: USER NAME Field type: 07000000 - Operator information Input data length: 20

Input data format: Character (C) Default output length: 20

Default output format: Character (C)

OPRTYPE Operator type.

Default label-1: OPERATOR Default label-2: TYPE Field type: 07000000 - Operator information Input data length: 1

Input data format: Character (C) Default output length: 17

Default output format: Transformed (T)

C'R'............T'Regular UserID'

C'M'............T'Main Administrator'

C'T'............T'Sub Adm (Trm/Opr)'

C'O'............T'Sub Adm (Oper)'

OPEXTSEC Operator external security.

Default label-1: OPER Default label-2: EXT Default label-3: SCTY Field type: 07000000 - Operator information Input data length: 1

Input data format: Character (C) Default output length: 3

Default output format: Transformed (T)

C'Y'............T'Yes'

C'N'............T'No'

OPRMODEL The operator profile this operator is modeled after.

Default label-1: OPERATOR Default label-2: MODEL Field type: 07000000 - Operator information Input data length: 9

Input data format: Character (C) Default output length: 9

Default output format: Character (C)

(continued)

Fieldname List Operator Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-63

Field Description

OPRLOCTN Company, division, department, and section to which this operator belongs.

Group Field: YES - Input data represented by the following fieldnames will be printed under the OPRLOCTN column heading:

OPRCOMP OPRDIV OPRDEPT OPRSECT

Data represented by these fieldnames can be printed in separate report columns by including the individual fieldnames instead of the group fieldnames in the SUBTITLE, FIELD, or FIELDS command statement.

Default label-1: OPERATOR Default label-2: LOCATION Field type: 07000000 - Operator information Input data length: 16

Input data format: Character (C) Default output length: 16

Default output format: Character (C)

OPRCOMP Company number to which this operator belongs.

Belongs to group: OPRLOCTN

Default label-1: OPER Default label-2: COMP Field type: 07000000 - Operator information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

OPRDIV Division number to which this operator belongs.

Belongs to group: OPRLOCTN

Default label-1: OPER Default label-2: DIV. Field type: 07000000 - Operator information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

(continued)

Operator Record Fields Fieldname List

3-64 Auditing and Report Writing Guide

Field Description

OPRDEPT Department number to which this operator belongs.

Belongs to group: OPRLOCTN

Default label-1: OPER Default label-2: DEPT Field type: 07000000 - Operator information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

OPRSECT Section number to which this operator belongs.

Belongs to group: OPRLOCTN

Default label-1: OPER Default label-2: SECT Field type: 07000000 - Operator information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

OPRCNAME Company name to which this operator belongs.

Default label-1: COMPANY NAME Field type: 07000000 - Operator information Input data length: 4

Input data format: Character (C) Default output length: 35

Default output format: Transformed (T)

OPRVNAME Division name to which this operator belongs.

Default label-1: DIVISION NAME Field type: 07000000 - Operator information Input data length: 8

Input data format: Character (C) Default output length: 35

Default output format: Transformed (T)

OPRDNAME Department name to which this operator belongs.

Default label-1: DEPARTMENT NAME Field type: 07000000 - Operator information Input data length: 12

Input data format: Character (C) Default output length: 35

Default output format: Transformed (T)

(continued)

Fieldname List Operator Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-65

Field Description

OPRSNAME Section name to which this operator belongs.

Default label-1: SECTION NAME Field type: 07000000 - Operator information Input data length: 16

Input data format: Character (C) Default output length: 35

Default output format: Transformed (T)

OPRSTAT Operator status.

Default label-1: OPER Default label-2: STAT Field type: 07000000 - Operator information Input data length: 1

Input data format: Character (C) Default output length: 9

Default output format: Transformed (T)

C'A'............T'ACTIVE'

C'D'............T'DISABLED'

C'M'............T'MONITOR'

C'S'............T'SAFE'

C'P'............T'PRELOADED'

C'V'............T'SUSPENDED'

C'K'............T'KEEP'

OPRSECDT The date the operator’s password was issued.

Default label-1: OPER

Default label-2: PASSWORD

Default label-3: ISS. DATE

Field type: 07000000 - Operator information

Input data length: 4

Input data format: Hexidecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

(continued)

Operator Record Fields Fieldname List

3-66 Auditing and Report Writing Guide

Field Description

OPREFFDT Operator new password effective date.

Default label-1: OPER

Default label-2: NEW-PSWD

Default label-3: EFF. DATE

Field type: 07000000 - Operator information

Input data length: 4

Input data format: Hexidecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

OPRPRMT Operator primary terminal ID.

Default label-1: OPER

Default label-2: PRIMARY

Default label-3: TERMID

Field type: 07000000 - Operator information

Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

OPRALTM1 Alternate terminal or group of terminals available to this operator.

Default label-1: OPER Default label-2: ALTRNATE Default label-3: TERM1 Field type: 07000000 - Operator information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

OPRALTM2 Alternate terminal or group of terminals available to this operator.

Default label-1: OPER Default label-2: ALTERNATE Default label-3: TERM 2 Field type: 07000000 - Operator information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

(continued)

Fieldname List Operator Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-67

Field Description

OPRTMGRP Alterate group of terminals available to this operator.

Default label-1: OPER Default label-2: TERM Default label-3: GROUP Field type: 07000000 - Operator information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C) OPRPROC Operator processing type.

Default label-1: OPER Default label-2: PROC Default label-3: TYPE Field type: 07000000 - Operator information Input data length: 1

Input data format: Character (C) Default output length: 1

Default output format: Transformed (T)

C'U'............T'UPDATE'

C'I'............T'INQUIRY'

OPRTMLT Operator inactive time limit. Default label-1: OPER

Default label-2: INACTIVE

Default label-3: TIME LMT

Field type: 07000000 - Operator information

Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T)

OPRADMNO Administrator or subadministrator who owns this operator profile.

Default label-1: OPER Default label-2: ADMIN Default label-3: NUMBER Field type: 07000000 - Operator information Input data length: 9

Input data format: Character (C) Default output length: 9

Default output format: Character (C)

Operator Record Fields Fieldname List

3-68 Auditing and Report Writing Guide

Field Description

OPRUSRDA Operator user-defined data.

Default label-1: OPERATOR Default label-2: USER Default label-3: INFO Field type: 07000000 - Operator information Input data length: 10

Input data format: Character (C) Default output length: 10

Default output format: Character (C)

OPRLTERM Terminal ID on which this operator was last signed on.

Default label-1: OPER Default label-2: LAST Default label-3: TERM Field type: 07000000 - Operator information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

OPRLDATE Date of this operator's last sign-on.

Default label-1: OPER Default label-2: LAST Default label-3: SIGNON DATE Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexidecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

OPRLTIME Time of this operator's last sign-on.

Default label-1: OPER Default label-2: LAST Default label-3: SIGNON TIME Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexidecimal (X) Default output length: 8

Default output format: Transformed (T) P'0131415F'.....T' 13:14 ' (or user-defined TIMEFORM)

(continued)

Fieldname List Operator Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-69

Field Description

OPERLANG Operator message language suffix.

Default label-1: OPER Default label-2: MESG Default label-3: LANG Field type: 07000000 - Operator information Input data length: 2

Input data format: Character (C) Default output length: 2

Default output format: Character (C)

OPALTRAN Operator alert transactions.

Group field: YES - Input data represented by the following fieldnames will be printed on one or more separate detail lines under the OPALTRAN column heading:

OPALTRN1 OPALTRN2 OPALTRN3 OPALTRN4 OPALTRN5

OPALTRN6

Data represented by these fieldnames can be printed in separate report columns by specifying the individual fieldnames instead of the group fieldname in the SUBTITLE, FIELD or FIELDS command statement.

Default label-1: ALERT Default label-2: TRAN Default label-3: LIST Occurrences: Variable Field type: 07010000 - Operator transaction information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

OPALTRN1 Operator alert transaction 1.

Default label-1: ALERT Default label-2: TRAN Default label-3: ID-1

Belongs to group: OPALTRAN Field type: 07000000 - Operator information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

(continued)

Operator Record Fields Fieldname List

3-70 Auditing and Report Writing Guide

Field Description

OPALTRN2 Operator alert transaction 2.

Default label-1: ALERT Default label-2: TRAN Default label-3: ID-2 Field type: 07000000 - Operator information

Belongs to group: OPALTRAN Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

OPALTRN3 Operator alert transaction 3.

Default label-1: ALERT Default label-2: TRAN Default label-3: ID-3

Belongs to group: OPALTRAN Field type: 07000000 - Operator information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

OPALTRN4 Operator alert transaction 4.

Default label-1: ALERT Default label-2: TRAN Default label-3: ID-4

Belongs to group: OPALTRAN Field type: 07000000 - Operator information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

OPALTRN5 Operator alert transaction 5.

Default label-1: ALERT Default label-2: TRAN Default label-3: ID-5

Belongs to group: OPALTRAN Field type: 07000000 - Operator information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

(continued)

Fieldname List Operator Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-71

Field Description

OPALTRN6 Operator alert transaction 6.

Default label-1: ALERT Default label-2: TRAN Default label-3: ID-6

Belongs to group: OPMALTRN Field type: 07000000 - Operator information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

OPSCHDAY Operator schedule day.

Default label-1: OPER Default label-2: SCHED Default label-3: DAY Field type: 07020000 - Operator schedule information Occurrences: Multiple - seven lines of output will be generated if this fieldname is specified, representing schedule restrictions assigned to each day of the week. Input data length: 1

Input data format: Character (C) Default output length: 9

Default output format: Transformed (T)

C'1'............T'SUNDAY'

C'2'............T'MONDAY'

C'3'............T'TUESDAY'

C'4'............T'WEDNESDAY'

C'5'............T'THURSDAY'

C'6'............T'FRIDAY'

C'7'............T'SATURDAY'

OPSCHFTM Operator scheduled "from" time.

Default label-1: OPER Default label-2: SCHED Default label-3: FROM TIME Field type: 07020000 - Operator schedule information Occurrences: Multiple - seven lines of output will be generated if this fieldname is specified, representing schedule restrictions assigned to each day of the week. Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T)

X'00001770'.....T' 00:01 '

(continued)

Operator Record Fields Fieldname List

3-72 Auditing and Report Writing Guide

Field Description

OPSCHTTM Operator scheduled "to" time.

Default label-1: OPER Default label-2: SCHED Default label-3: TO TIME Field type: 07020000 - Operator schedule information Occurrences: Multiple - seven lines of output will be generated if this fieldname is specified, representing schedule restrictions assigned to each day of the week. Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

OPTMPFTM Operator temporary "from" time.

Default label-1: OPER Default label-2: TEMP Default label-3: FROM TIME Field type: 07020000 - Operator schedule information Occurrences: Multiple - seven lines of output will be generated if this fieldname is specified, representing schedule restrictions assigned to each day of the week. Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

OPTMPTTM Operator temporary "to" time.

Default label-1: OPER Default label-2: TEMP Default label-3: TO TIME Field type: 07020000 - Operator schedule information Occurrences: Multiple - seven lines of output will be generated if this fieldname is specified, representing schedule restrictions assigned to each day of the week. Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

(continued)

Fieldname List Operator Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-73

Field Description

OPTMPEFD Operator temporary schedule effective date.

Default label-1: OPER Default label-2: TEMP Default label-3: EFF DATE Field type: 07020000 - Operator schedule information Occurrences: Multiple - seven lines of output will be generated if this fieldname is specified, representing schedule restrictions assigned to each day of the week. Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

OPTMPEFX Operator temporary schedule expiration date.

Default label-1: OPER Default label-2: TEMP Default label-3: EXP DATE Field type: 07020000 - Operator schedule information Occurrences: Multiple - seven lines of output will be generated if this fieldname is specified, representing schedule restrictions assigned to each day of the week. Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

OPSFTMSU Sunday scheduled "from" time.

Default label-1: SUNDAY Default label-2: SCHED Default label-3: FROM-TIME Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

(continued)

Operator Record Fields Fieldname List

3-74 Auditing and Report Writing Guide

Field Description

OPSTTMSU Sunday scheduled "to" time.

Default label-1: SUNDAY Default label-2: SCHED Default label-3: TO-TIME Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

OPTFTMSU Sunday temporary "from" time.

Default label-1: SUNDAY Default label-2: TEMP Default label-3: FROM-TIME Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

OPTTTMSU Sunday temporary "to" time.

Default label-1: SUNDAY Default label-2: TEMP Default label-3: TO-TIME Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

(continued)

Fieldname List Operator Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-75

Field Description

OPTEFDSU Sunday temporary effective date.

Default label-1: SUNDAY Default label-2: TEMP Default label-3: EFF DATE Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

OPTEFXSU Sunday temporary expiration date.

Default label-1: SUNDAY Default label-2: TEMP Default label-3: EXP DATE Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

OPSFTMMO Monday scheduled "from" time.

Default label-1: MONDAY Default label-2: SCHED Default label-3: FROM-TIME Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

(continued)

Operator Record Fields Fieldname List

3-76 Auditing and Report Writing Guide

Field Description

OPSTTMMO Monday scheduled "to" time.

Default label-1: MONDAY Default label-2: SCHED Default label-3: TO-TIME Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

OPTFTMMO Monday temporary "from" time.

Default label-1: MONDAY Default label-2: TEMP Default label-3: FROM-TIME Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

OPTTTMMO Monday temporary "to" time.

Default label-1: MONDAY Default label-2: TEMP Default label-3: TO-TIME Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

(continued)

Fieldname List Operator Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-77

Field Description

OPTEFDMO Monday temporary effective date.

Default label-1: MONDAY Default label-2: TEMP Default label-3: EFF DATE Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

OPTEFXMO Monday temporary expiration date.

Default label-1: MONDAY Default label-2: TEMP Default label-3: EXP DATE Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

OPSFTMTU Tuesday scheduled "from" time.

Default label-1: TUESDAY Default label-2: SCHED Default label-3: FROM-TIME Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

(continued)

Operator Record Fields Fieldname List

3-78 Auditing and Report Writing Guide

Field Description

OPSTTMST Tuesday scheduled "to" time.

Default label-1: TUESDAY Default label-2: SCHED Default label-3: TO-TIME Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

OPTFTMTU Tuesday temporary "from" time.

Default label-1: TUESDAY Default label-2: TEMP Default label-3: FROM-TIME Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

OPTTTMTU Tuesday temporary "to" time.

Default label-1: TUESDAY Default label-2: TEMP Default label-3: TO-TIME Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

(continued)

Fieldname List Operator Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-79

Field Description

OPTEFDTU Tuesday temporary effective date.

Default label-1: TUESDAY Default label-2: TEMP Default label-3: EFF DATE Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

OPTEFXTU Tuesday temporary expiration date.

Default label-1: TUESDAY Default label-2: TEMP Default label-3: EXP DATE Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

OPSFTMWE Wednesday scheduled "from" time.

Default label-1: WEDNESDAY Default label-2: SCHED Default label-3: FROM-TIME Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

(continued)

Operator Record Fields Fieldname List

3-80 Auditing and Report Writing Guide

Field Description

OPSTTMWE Wednesday scheduled "to" time.

Default label-1: WEDNESDAY Default label-2: SCHED Default label-3: TO-TIME Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

OPTFTMWE Wednesday temporary "from" time.

Default label-1: WEDNESDAY Default label-2: TEMP Default label-3: FROM-TIME Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

OPTTTMWE Wednesday temporary "to" time.

Default label-1: WEDNESDAY Default label-2: TEMP Default label-3: TO-TIME Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

(continued)

Fieldname List Operator Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-81

Field Description

OPTEFDWE Wednesday temporary effective date.

Default label-1: WEDNESDAY Default label-2: TEMP Default label-3: EFF DATE Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

OPTEFXWE Wednesday temporary expiration date.

Default label-1: WEDNESDAY Default label-2: TEMP Default label-3: EXP DATE Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

OPSFTMTH Thursday scheduled "from" time.

Default label-1: THURSDAY Default label-2: SCHED Default label-3: FROM-TIME Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

(continued)

Operator Record Fields Fieldname List

3-82 Auditing and Report Writing Guide

Field Description

OPSTTMTH Thursday scheduled "to" time.

Default label-1: THURSDAY Default label-2: SCHED Default label-3: TO-TIME Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

OPTFTMTH Thursday temporary "from" time.

Default label-1: THURSDAY Default label-2: TEMP Default label-3: FROM-TIME Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

OPTTTMTH Thursday temporary "to" time.

Default label-1: THURSDAY Default label-2: TEMP Default label-3: TO-TIME Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

(continued)

Fieldname List Operator Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-83

Field Description

OPTEFDTH Thursday temporary effective date.

Default label-1: THURSDAY Default label-2: TEMP Default label-3: EFF DATE Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

OPTEFXTH Thursday temporary expiration date.

Default label-1: THURSDAY Default label-2: TEMP Default label-3: EXP DATE Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

OPSFTMFR Friday scheduled "from" time.

Default label-1: FRIDAY Default label-2: SCHED Default label-3: FROM-TIME Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

(continued)

Operator Record Fields Fieldname List

3-84 Auditing and Report Writing Guide

Field Description

OPSTTMFR Friday scheduled "to" time.

Default label-1: FRIDAY Default label-2: SCHED Default label-3: TO-TIME Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

OPTFTMFR Friday temporary "from" time.

Default label-1: FRIDAY Default label-2: TEMP Default label-3: FROM-TIME Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

OPTTTMFR Friday temporary "to" time.

Default label-1: FRIDAY Default label-2: TEMP Default label-3: TO-TIME Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

(continued)

Fieldname List Operator Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-85

Field Description

OPTEFDFR Friday temporary effective date.

Default label-1: FRIDAY Default label-2: TEMP Default label-3: EFF DATE Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

OPTEFXFR Friday temporary expiration date.

Default label-1: FRIDAY Default label-2: TEMP Default label-3: EXP DATE Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

OPSFTMSA Saturday scheduled "from" time.

Default label-1: SATURDAY Default label-2: SCHED Default label-3: FROM-TIME Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

(continued)

Operator Record Fields Fieldname List

3-86 Auditing and Report Writing Guide

Field Description

OPSTTMSA Saturday scheduled "to" time.

Default label-1: SATURDAY Default label-2: SCHED Default label-3: TO-TIME Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

OPTFTMSA Saturday temporary "from" time.

Default label-1: SATURDAY Default label-2: TEMP Default label-3: FROM-TIME Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

OPTTTMSA Saturday temporary "to" time.

Default label-1: SATURDAY Default label-2: TEMP Default label-3: TO-TIME Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

(continued)

Fieldname List Operator Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-87

Field Description

OPTEFDSA Saturday temporary effective date.

Default label-1: SATURDAY Default label-2: TEMP Default label-3: EFF DATE Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

OPTEFXSA Saturday temporary expiration date.

Default label-1: SATURDAY Default label-2: TEMP Default label-3: EXP DATE Field type: 07000000 - Operator information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

OPTRAUTH Operator transaction authority (ALL, YES, or NONE).

Default label-1: OPER Default label-2: TRAN Default label-3: AUTH Field type: 07000000 - Operator information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

OPTRMODL Operator transaction modeling (YES or NO).

Default label-1: OPER Default label-2: TRANS Default label-3: MODELLED Field type: 07000000 - Operator information Input data length: 3

Input data format: Character (C) Default output length: 3

Default output format: Character (C)

(continued)

Operator Record Fields Fieldname List

3-88 Auditing and Report Writing Guide

Field Description

OPTRAUTL Operator transaction authorization list.

Default label-1: TRAN Default label-2: AUTH Default label-3: LIST Field type: 07030000 - Operator transaction information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every program authorized for this operator. Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

OPTRAUTF Operator authorized transaction "from" time.

Default label-1: TRAN Default label-2: SCHED Default label-3: FROM-TIME Field type: 07030000 - Operator transaction information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every program authorized for this operator. Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

OPTRAUTT Operator authorized transaction "to" time.

Default label-1: TRAN Default label-2: SCHED Default label-3: TO-TIME Field type: 07030000 - Operator transaction information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every program authorized for this operator. Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

(continued)

Fieldname List Operator Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-89

Field Description

OPTRAUTD Operator authorized transaction description.

Default label-1: TRANSACTION Default label-2: DESCRIPTION Field type: 07030000 - Operator transaction information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every program authorized for this operator. Input data length: 30

Input data format: Character (C) Default output length: 30

Default output format: Character (C)

OPPRAUTH Operator program authority (ALL, YES, or NONE).

Default label-1: OPER Default label-2: PROG Default label-3: AUTH Field type: 07000000 - Operator information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

OPPRMODL Operator program modeling (YES or NO).

Default label-1: OPER Default label-2: PROGS Default label-3: MODELLED Field type: 07000000 - Operator information Input data length: 3

Input data format: Character (C) Default output length: 3

Default output format: Character (C)

OPPRAUTL Operator program authorization list.

Default label-1: PROGRAM Default label-2: AUTH Default label-3: LIST Field type: 07040000 - Operator program information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every program authorized for this operator. Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

(continued)

Operator Record Fields Fieldname List

3-90 Auditing and Report Writing Guide

Field Description

OPPRAUTF Operator authorized program "from" time.

Default label-1: PROG Default label-2: SCHED Default label-3: FROM-TIME Field type: 07040000 - Operator program information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every program authorized for this operator. Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined TIMEFORM)

OPPRAUTT Operator authorized program "to" time.

Default label-1: PROG Default label-2: SCHED Default label-3: TO-TIME Field type: 07040000 - Operator program information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every program authorized for this operator. Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

OPPRAUTD Operator authorized program description.

Default label-1: PROGRAM Default label-2: DESCRIPTION Field type: 07040000 - Operator program information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every program authorized for this operator. Input data length: 30

Input data format: Character (C) Default output length: 30

Default output format: Character (C)

(continued)

Fieldname List Operator Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-91

Field Description

OPFLAUTH Operator file authority (ALL, YES, or NONE).

Default label-1: OPER Default label-2: FILE Default label-3: AUTH Field type: 07000000 - Operator information Input data length: 4

Input data format: Character (C) Default output length: 4

Output data format: Character (C)

OPFLMODL Operator file modeling (YES or NO).

Default label-1: OPER Default label-2: FILES Default label-3: MODELLED Field type: 07000000 - Operator information Input data length: 3

Input data format: Character (C) Default output length: 3

Default output format: Character (C)

OPFLAUTL Operator file authorization list.

Default label-1: FILE Default label-2: AUTH Default label-3: LIST Field type: 07050000 - Operator file information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every program authorized for this operator. Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

(continued)

Operator Record Fields Fieldname List

3-92 Auditing and Report Writing Guide

Field Description

OPFLAUTC Operator file access authorization. Specify in conjunction with field OPFLAUTH, which names the file to which the operator is granted or denied update access. Default label-1: OPER Default label-2: FILE Default label-3: ACCESS Field type: 07050000 - Operator file information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every program authorized for this operator. Input data length: 1

Input data format: Character (C) Default output length: 3

Default output format: Transformed (T)

'I'............T'INQUIRY'

C'N'............T'UPDATE'

OPFLAUTF Operator authorized file scheduled "from" time.

Default label-1: FILE Default label-2: SCHED Default label-3: FROM-TIME Field type: 07050000 - Operator file information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every program authorized for this operator. Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'00001770'.....T' 00:01 ' (or user-defined

TIMEFORM)

(continued)

Fieldname List Operator Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-93

Field Description

OPFLAUTT Operator authorized file scheduled "to" time.

Default label-1: FILE Default label-2: SCHED Default label-3: TO-TIME Field type: 07050000 - Operator file information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every program authorized for this operator. Input data length: 4

Input data format: Hexadecimal (X) Default output length: 8

Default output format: Transformed (T) X'0083D600'.....T' 24:00 ' (or user-defined TIMEFORM)

OPFLAUTD Operator authorized file description.

Default label-1: FILE Default label-2: DESCRIPTION Field type: 07050000 - Operator file information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every program authorized for this operator. Input data length: 30

Input data format: Character (C) Default output length: 30

Default output format: Character (C)

OPMPAUTH Operator map restrictions (YES or NONE).

Default label-1: OPER Default label-2: MAP Default label-3: AUTH Field type: 07000000 - Operator information Input data length: 4

Input data format: Character (C) Default output length: 4

Output data format: Character (C)

(continued)

Operator Record Fields Fieldname List

3-94 Auditing and Report Writing Guide

Field Description

OPMPMODL Operator map modeling (YES or NO).

Default label-1: OPER Default label-2: MAPS Default label-3: MODELLED Field type: 07000000 - Operator information Input data length: 3

Input data format: Character (C) Default output length: 3

Default output format: Character (C)

OPMPAUTL Operator restricted map list.

Default label-1: MAP Default label-2: AUTH Default label-3: LIST Field type: 07060000 - Operator map information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every program authorized for this operator. Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

OPMPAUTM Operator restricted mapset name.

Default label-1: MAPSET Default label-2: NAME Field type: 07060000 - Operator map information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every program authorized for this operator. Input data length: 7

Input data format: Character (C) Default output length: 7

Default output format: Character (C)

(continued)

Fieldname List Operator Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-95

Field Description

OPMPAUTD Operator restricted map title.

Default label-1: MAP Default label-2: TITLE Field type: 07060000 - Operator map information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every program authorized for this operator. Input data length: 20

Input data format: Character (C) Default output length: 20

Default output format: Character (C)

OPFDAUTH Field authorization (YES, NONE, or ALL).

Default label-1: OPER Default label-2: FIELD Default label-3: AUTH Field type: 07000000 - Operator information Input data length: 004 Input data format: Character (C) Output length: 004 Default output format: Character (C)

OPFDMODL Operator field modeling (YES or NO).

Default label-1: OPER Default label-2: FIELDS Default label-3: MODELLED Field type: 07000000 - Operator information Input data length: 3

Input data format: Character (C) Default output length: 3

Default output format: Character (C)

OPFAUTL Operator authorized field resource name list.

Default label-1: FIELDRES Default label-2: AUTH Default label-3: LIST Field type: 07070000 - Operator field authorization information Occurrences: Variable - multiple lines of output will be generated if this fieldname is specified, representing every program authorized for this operator. Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

(continued)

Operator Record Fields Fieldname List

3-96 Auditing and Report Writing Guide

Field Description

OPUSRDA1 User defined data 1.

Default label-1: USER Default label-2: DATA1 Field type: 07070000 - Operator field authorization information Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

OPUSRDA2 User defined data 2.

Default label-1: USER Default label-2: DATA2 Field type: 07070000 - Operator field authorization information Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

OPBATUSR Batch user (YES or NO).

Default label-1: BAT Default label-2: USR Field type: 07070000 - Operator field authorization information Input data length: 1

Input data format: Character (C) Default output length: 3

Default output format: Transformed (T)

C'Y'...........T'YES'

C'N'...........T'NO'

OPCICUSR CICS user (YES or NO).

Default label-1: CIC Default label-2: USR Field type: 07070000 - Operator field authorization information Input data length: 1

Input data format: Character (C) Default output length: 3

Default output format: Transformed (T)

C'Y'...........T'YES'

C'N'...........T'NO'

(continued)

Fieldname List Operator Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-97

Field Description

OPPWSUSR PWS user (YES or NO)

Default label-1: PWS Default label-2: USR Field type: 07070000 - Operator field authorization information Input data length: 1

Input data format: Character (C) Default output length: 3

Default output format: Transformed (T)

C'Y'...........T'YES'

C'N'...........T'NO'

OPREMUSR Allowed to submit remote jobs (YES or NO).

Default label-1: REM Default label-2: USR Field type: 07070000 - Operator field authorization information Input data length: 1

Input data format: Character (C) Default output length: 3

Default output format: Transformed (T)

C'Y'...........T'YES'

C'N'...........T'NO'

OPBATACT Batch action to take for this user.

Default label-1: BATCH Default label-2: ACTION Field type: 07070000 - Operator field authorization information Input data length: 1

Input data format: Character (C) Default output length: 7

Default output format: Transformed (T)

C'*'...........T'NONE '

C'C'...........T'CANCEL '

C'L'...........T'LOG '

C'W'...........T'WTO/LOG'

(continued)

Operator Record Fields Fieldname List

3-98 Auditing and Report Writing Guide

Field Description

OPMONMOD Batch monitor/audit action.

Default label-1: MON/AUD Default label-2: ACTION Field type: 07070000 - Operator field authorization information Input data length: 1

Input data format: Character (C) Default output length: 7

Default output format: Transformed (T)

C'*'...........T'NONE '

C'C'...........T'CANCEL '

C'L'...........T'LOG '

C'W'...........T'WTO/LOG'

OPMASCON Master console user (YES or NO).

Default label-1: MON/AUD Default label-2: MODE Field type: 07070000 - Operator field authorization information Input data length: 1

Input data format: Character (C) Default output length: 3

Default output format: Transformed (T)

C'Y'...........T'YES'

C'N'...........T'NO'

OPCTLLIB Controlled library user (YES or NO).

Default label-1: CLB Default label-2: USR Field type: 07070000 - Operator field authorization information Input data length: 1

Input data format: Character (C) Default output length: 3

Default output format: Transformed (T)

C'Y'...........T'YES'

C'N'...........T'NO'

OPSECID1 Batch SECID 1.

Default label-1: SECID-1 Field type: 07070000 - Operator field authorization information Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

(continued)

Fieldname List Operator Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-99

Field Description

OPTABLE1 Batch table 1.

Default label-1: TABLE-1 Field type: 07070000 - Operator field authorization information Input data length: 2

Input data format: Character (C) Default output length: 2

Default output format: Character (C)

OPSECID2 Batch SECID 2.

Default label-1: SECID-2 Field type: 07070000 - Operator field authorization information Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

OPTABLE2 Batch table 2.

Default label-1: TABLE-2 Field type: 07070000 - Operator field authorization information Input data length: 2

Input data format: Character (C) Default output length: 2

Default output format: Character (C)

OPSECID3 Batch SECID 3.

Default label-1: SECID-3 Field type: 07070000 - Operator field authorization information Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

OPTABLE3 Batch table 3.

Default label-1: TABLE-3 Field type: 07070000 - Operator field authorization information Input data length: 2

Input data format: Character (C) Default output length: 2

Default output format: Character (C)

(continued)

Operator Record Fields Fieldname List

3-100 Auditing and Report Writing Guide

Field Description

OPSECID4 Batch SECID 4.

Default label-1: SECID-4 Field type: 07070000 - Operator field authorization information Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

OPTABLE4 Batch table 4.

Default label-1: TABLE-4 Field type: 07070000 - Operator field authorization information Input data length: 2

Input data format: Character (C) Default output length: 2

Default output format: Character (C)

OPSECID5 Batch SECID 5.

Default label-1: SECID-5 Field type: 07070000 - Operator field authorization information Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

OPTABLE5 Batch table 5.

Default label-1: TABLE-5 Field type: 07070000 - Operator field authorization information Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

OPEXPDAT Batch user expiration date.

Default label-1: EXPIRE Default label-2: DATE Field type: 07070000 - Operator field authorization information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

(continued)

Fieldname List Operator Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-101

Field Description

OPUSER1 Batch submit user ID 1.

Default label-1: SUBMIT Default label-2: USERID-1 Field type: 07070000 - Operator field authorization information Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

OPUSER2 Batch submit user ID 2.

Default label-1: SUBMIT Default label-2: USERID-2 Field type: 07070000 - Operator field authorization information Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

OPUSER3 Batch submit user ID 3.

Default label-1: SUBMIT Default label-2: USERID-3 Field type: 07070000 - Operator field authorization information Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

OPUS3SRC Batch submit user ID 3 logon source.

Default label-1: USERID-3 Default label-2: SOURCE Field type: 07070000 - Operator field authorization information Input data length: 1

Input data format: Character (C) Default output length: 13

Default output format: Transformed (T)

C'L'...........T'PUTSPOOL/XPCC'

C'S'...........T'ASI PROC'

OPEXTUSR External user ID.

Default label-1: EXTERNAL Default label-2: USERID Field type: 07070000 - Operator field authorization information Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

Operator Record Fields Fieldname List

3-102 Auditing and Report Writing Guide

(continued)

Fieldname List Operator Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-103

Field Description

IUIINIT IUI Initial Name

Default label-1: IUI Default label-2: INITIAL Default label-3: NAME Field type: 07000000 = Operator Information Input data length:: 8 Input data format:: Character (C) Default output length: 8 Default output format: Character (C)

IUIMODEL IUI Synonym Model

Default label-1: IUI Default label-2: SYNONYM Default label-3: MODEL Field type: 07000000 = Operator Information Input data length:: 8 Input data format:: Character (C) Default output length: 8 Default output format: Character (C)

IUICATLG IUI Default VSAM Catalog

Default label-1: IUI Default label-2: VSAM Default label-3: CATALOG Field type: 07000000 = Operator Information Input data length:: 7 Input data format:: Character (C) Default output length: 7 Default output format: Character (C)

IUILANG IUI Primary Language

Default label-1: IUI Default label-2: PRIMARY Default label-3: LANGUAGE Field type: 07000000 = Operator Information Input data length:: 1 Input data format:: Character (C) Default output length: 8 Default output format: Transformed (T)

C'E'...........T'ENGLISH ‘

C'J'...........T'JAPANESE’

(continued)

Operator Record Fields Fieldname List

3-104 Auditing and Report Writing Guide

Field Description

IUIPRI IUI User Priority

Default label-1: IUI Default label-2: USR Default label-3: PRI Field type: 07000000 = Operator Information Input data length:: 1 Input data format:: Hexadecimal (X) Default output length: 3 Default output format: Zoned Decimal (Z)

IUIXRF IUI XRF Sign-on

Default label-1: IUI Default label-2: XRF Default label-3: SGN Field type: 07000000 = Operator Information Input data length:: 1 Input data format:: Hexadecimal (X) Default output length: 3 Default output format: Transformed (T)

X’00'..........T'NO ’

X’01'..........T'YES’

IUIUTYP IUI User Type

Default label-1: IUI Default label-2: USER Default label-3: TYPE Field type: 07000000 = Operator Information Input data length:: 1 Input data format:: Hexadecimal (X) Default output length: 4 Default output format: Transformed (T)

X’80'..........T'ADMN’

X’40'..........T'PROG’

X’00'..........T'GEN ’

(continued)

Fieldname List Operator Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-105

Field Description

IUINTYP IUI Name Type

Default label-1: IUI Default label-2: NAME Default label-3: TYPE Field type: 07000000 = Operator Information Input data length:: 1 Input data format:: Hexadecimal (X) Default output length: 5 Default output format: Transformed (T)

X’10'..........T'PANEL’

X’00'..........T'APPL ’

IUINEWS IUI News

Default label-1: IUI Default label-2: NEWS Field type: 07000000 = Operator Information Input data length:: 1 Input data format:: Hexadecimal (X) Default output length: 3 Default output format: Transformed (T)

X’20'..........T'NO ’

X’00'..........T'YES’

IUIESC IUI Escape

Default label-1: IUI Default label-2: ESC Field type: 07000000 = Operator Information Input data length:: 1 Input data format:: Hexadecimal (X) Default output length: 3 Default output format: Transformed (T)

X’00'..........T'NO ’

X’40'..........T'YES’

(continued)

Operator Record Fields Fieldname List

3-106 Auditing and Report Writing Guide

Field Description

IUICONF IUI Confirm Delete

Default label-1: IUI Default label-2: CON Default label-3: DEL Field type: 07000000 = Operator Information Input data length:: 1 Input data format:: Hexadecimal (X) Default output length: 3 Default output format: Transformed (T)

X’00'..........T'NO ’

X’04'..........T'YES’

IUIPRIM IUI Primary Sublibrary

Default label-1: IUI Default label-2: PRI Default label-3: SUB Field type: 07000000 = Operator Information Input data length:: 1 Input data format:: Hexadecimal (X) Default output length: 3 Default output format: Transformed (T)

X’00'..........T'NO ’

X’02'..........T'YES’

IUISUBM IUI Submit to Batch

Default label-1: IUI Default label-2: SUB Default label-3: BAT Field type: 07000000 = Operator Information Input data length:: 1 Input data format:: Hexadecimal (X) Default output length: 3 Default output format: Transformed (T)

X’00'..........T'NO ’

X’04'..........T'YES’

(continued)

Fieldname List Operator Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-107

Field Description

IUIOLPD IUI OLPD Delete

Default label-1: IUI Default label-2: OLPD Default label-3: DEL Field type: 07000000 = Operator Information Input data length:: 1 Input data format:: Hexadecimal (X) Default output length: 3 Default output format: Transformed (T)

X’00'..........T'NO ’

X’02'..........T'YES’

IUICMDS IUI Console Commands

Default label-1: IUI Default label-2: CON Default label-3: CMD Field type: 07000000 = Operator Information Input data length:: 1 Input data format:: Hexadecimal (X) Default output length: 3 Default output format: Transformed (T)

X’00'..........T'NO ’

X’01'..........T'YES’

IUICONS IUI Console Output

Default label-1: IUI Default label-2: CON Default label-3: MSG Field type: 07000000 = Operator Information Input data length:: 1 Input data format:: Hexadecimal (X) Default output length: 3 Default output format: Transformed (T)

X’00'..........T'NO ’

X’04'..........T'YES’

(continued)

Operator Record Fields Fieldname List

3-108 Auditing and Report Writing Guide

Field Description

IUIBATQ IUI Batch Queues

Default label-1: IUI Default label-2: BAT Default label-3: QUE Field type: 07000000 = Operator Information Input data length:: 1 Input data format:: Hexadecimal (X) Default output length: 3 Default output format: Transformed (T)

X’00'..........T'NO ’

X’02'..........T'YES’

IUIAPRO IUI Modify Application Profiles

Default label-1: IUI Default label-2: APL Default label-3: PRO Field type: 07000000 = Operator Information Input data length:: 1 Input data format:: Hexadecimal (X) Default output length: 3 Default output format: Transformed (T)

X’00'..........T'NO ’

X’10'..........T'YES’

IUIPANL IUI Modify Panels

Default label-1: IUI Default label-2: MOD Default label-3: PAN Field type: 07000000 = Operator Information Input data length:: 1 Input data format:: Hexadecimal (X) Default output length: 3 Default output format: Transformed (T)

X’00'..........T'NO ’

X’04'..........T'YES’

(continued)

Fieldname List Operator Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-109

Field Description

IUIUPRO IUI Modify User Profiles

Default label-1: IUI Default label-2: USR Default label-3: PRO Field type: 07000000 = Operator Information Input data length:: 1 Input data format:: Hexadecimal (X) Default output length: 3 Default output format: Transformed (T)

X’00'..........T'NO ’

X’01'..........T'YES’

IUIVSFL IUI Define VSAM Files

Default label-1: IUI Default label-2: VSM Default label-3: FLS Field type: 07000000 = Operator Information Input data length:: 1 Input data format:: Hexadecimal (X) Default output length: 3 Default output format: Transformed (T)

X’00'..........T'NO ’

X’01'..........T'YES’

IUIVSCT IUI Alter VSAM Catalogs

Default label-1: IUI Default label-2: VSM Default label-3: CAT Field type: 07000000 = Operator Information Input data length:: 1 Input data format:: Hexadecimal (X) Default output length: 3 Default output format: Transformed (T)

X’00'..........T'NO ’

X’02'..........T'YES’

Field Resource Information Fields Fieldname List

3-110 Auditing and Report Writing Guide

Field Resource Information Fields

The following fieldnames can be included in any ALRTVCSC report SUBTITLE, FIELD,

or FIELDS command statement. These fieldnames are contained in the ALRTVCSC field resource information records (segment X'080x0000').

Field Description

RFLNAME Resource name.

Default label-1: RESOURCE Default label-2: NAME Field type: 08000000 - Field information Input data length: 008 Input data format: Character (C) Output length: 008 Default output format: Character (C)

RFLREAL Resource real name.

Default label-1: RESOURCE Default label-2: REAL Default label-3: NAME Field type: 08000000 - Field information Input data length: 008 Input data format: Character (C) Output length: 008 Default output format: Character (C)

RFLSEQNO Resource sequence number.

Default label-1: SEQUENCE Default label-2: NUMBER Field type: 08000000 - Field information Input data length: 004 Input data format: Packed decimal (P) Output length: 007 Default output format: Zoned decimal (Z)

RFLDESC Resource description.

Default label-1: RESOURCE Default label-2: DESCRIPTION Field type: 08000000 - Field information Input data length: 030 Input data format: Character (C) Output length: 030 Default output format: Character (C)

(continued)

Fieldname List Field Resource Information Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-111

Field Description

RFLSTAT Resource status.

Default label-1: RESOURCE Default label-2: STATUS Field type: 08000000 - Field information Input data length: 001 Input data format: Character (C) Output length: 009 Default output format: Transformed (T)

C'A' = ACTIVE

C'D' = DISABLED

C'M' = MONITOR

C'S' = SAFE

C'P' = PRELOADED

C'V' = SUSPENDED

C'K' = KEEP

RFLTYPE Resource type.

Default label-1: RESOURCE Default label-2: TYPE Field type: 08000000 - Field information Input data length: 001 Input data format: Character (C) Output length: 004 Default output format: Transformed (T)

C'D' = DL/1

C'F' = FILE

C'M' = MAP

RFLRCFM Record format.

Default label-1: RECORD Default label-2: FORMAT Field type: 08000000 - Field information Input data length: 001 Input data format: Character (C) Output length: 008 Default output format: Transformed (T)

C'F' = FIXED

C'V' = VARIABLE

(continued)

Field Resource Information Fields Fieldname List

3-112 Auditing and Report Writing Guide

Field Description

RFLAACT Add action.

Default label-1: ADD Default label-2: ACTION Field type: 08000000 - Field information Input data length: 001 Input data format: Character (C) Output length: 011 Default output format: Transformed (T)

C'A' = ALLOW

C'R' = RETURN CODE

C'V' = VIOLATION

RFLBACT Browse action.

Default label-1: BROWSE Default label-2: ACTION Field type: 08000000 - Field information Input data length: 001 Input data format: Character (C) Output length: 011 Default output format: Transformed (T)

C'A' = ALLOW

C'R' = RETURN CODE

C'V' = VIOLATION

RFLBRET Browse return code.

Default label-1: BROWSE Default label-2: RETURN Default label-3: CODE Field type: 08000000 - Field information Input data length: 001 Input data format: X - Hexadecimal Output length: 002 Default output format: Hexadecimal (X)

RFLBRPO Browse record position.

Default label-1: BROWSE Default label-2: RECORD Default label-3: POSITION Field type: 08000000 - Field information Input data length: 002 Input data format: X - Hexadecimal Output length: 005 Default output format: Zoned decimal (Z)

(continued)

Fieldname List Field Resource Information Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-113

Field Description

RFLDACT Delete action.

Default label-1: DELETE Default label-2: ACTION Field type: 08000000 - Field information Input data length: 001 Input data format: Character (C) Output length: 011 Default output format: Transformed (T)

C'A' = ALLOW

C'R' = RETURN CODE

C'V' = VIOLATION

RFLRACT Read action.

Default label-1: READ Default label-2: ACTION Field type: 08000000 - Field information Input data length: 001 Input data format: Character (C) Output length: 011 Default output format: Transformed (T)

C'A' = ALLOW

C'R' = RETURN CODE

C'V' = VIOLATION

RFLRRET Read return code.

Default label-1: READ Default label-2: RETURN Default label-3: CODE Field type: 08000000 - Field information Input data length: 001 Input data format: X - Hexadecimal Output length: 002 Default output format: Hexadecimal (X)

RFLRRPO Read record position.

Default label-1: READ Default label-2: RECORD Default label-3: POSITION Field type: 08000000 - Field information Input data length: 002 Input data format: X - Hexadecimal Output length: 005 Default output format: Zoned decimal (Z)

(continued)

Field Resource Information Fields Fieldname List

3-114 Auditing and Report Writing Guide

Field Description

RFLUACT Update action.

Default label-1: UPDATE Default label-2: ACTION Field type: 08000000 - Field information Input data length: 001 Input data format: Character (C) Output length: 011 Default output format: Transformed (T)

C'A' = ALLOW

C'R' = RETURN CODE

C'V' = VIOLATION

RFL#SEG Number of segments.

Default label-1: NUMBER Default label-2: OF Default label-3: SEGMENTS Field type: 08000000 - Field information Input data length: 001 Input data format: X - Hexadecimal Output length: 001 Default output format: Zoned decimal (Z)

RFLFDSC Field description.

Default label-1: FIELD Default label-2: DESCRIPTION Field type: 08010000 - Field segment information Input data length: 015 Input data format: Character (C) Output length: 015 Default output format: Character (C)

RFLDPOS Data position.

Default label-1: DATA Default label-2: POSITION Field type: 08010000 - Field segment information Input data length: 002 Input data format: X - Hexadecimal Output length: 005 Default output format: Zoned decimal (Z)

(continued)

Fieldname List Field Resource Information Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-115

Field Description

RFLDLEN Data length.

Default label-1: DATA Default label-2: LENGTH Field type: 08010000 - Field segment information Input data length: 002 Input data format: X - Hexadecimal Output length: 005 Default output format: Zoned decimal (Z)

RFLDFMT Data format.

Default label-1: DATA Default label-2: FORMAT Field type: 08010000 - Field segment information Input data length: 001 Input data format: Character (C) Output length: 011 Default output format: Transformed (T)

C'C' = CHARACTER

C'P' = PACKED

C'X' = HEXADECIMAL

RFLCOMP Compare operator.

Default label-1: COMPARE Default label-2: OPERATOR Field type: 08010000 - Field segment information Input data length: 001 Input data format: X - Hexadecimal Output length: 016 Default output format: Transformed (T)

X'02' = RANGE

X'04' = LESS OR EQUAL

X'08' = LESS THAN

X'10' = GREATER OR EQUAL

X'20' = GREATER THAN

X'40' = NOT EQUAL

X'80' = EQUAL

(continued)

Field Resource Information Fields Fieldname List

3-116 Auditing and Report Writing Guide

Field Description

RFLCONN Logical connector.

Default label-1: LOGICAL Default label-2: CONNECTOR Field type: 08010000 - Field segment information Input data length: 001 Input data format: X - Hexadecimal Output length: 003 Default output format: Transformed (T)

X'40' = OR

X'80' = AND

RFLVALU Data value.

Default label-1: DATA Default label-2: VALUE Field type: 08010000 - Field segment information Input data length: 001 Input data format: Character (C) Output length: 016 Default output format: Transformed (T)

RFLVAL2 Data value 2.

Default label-1: DATA Default label-2: VALUE 2 Field type: 08010000 - Field segment information Input data length: 001 Input data format: Character (C) Output length: 016 Default output format: Transformed (T)

Fieldname List Field Resource Security Information Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-117

Field Resource Security Information Fields

The following fieldnames can be included in any ALRTVCSC report SUBTITLE, FIELD,

or FIELDS command statement. These fieldnames are contained in the ALRTVCSC field resource security information records (segment X'090x0000').

Field Description

RMPNAME Resource name.

Labels: 'RESOURCE' 'NAME' Field type: 09000000 - Field information Input data length: 008 Input data format: Character (C) Output length: 008 Default output format: Character (C)

RMPREAL Resource real name.

Labels: 'RESOURCE' 'REAL' 'NAME' Field type: 09000000 - Field information Input data length: 008 Input data format: Character (C) Output length: 008 Default output format: Character (C)

RMPSEQNO Resource sequence number.

Labels: 'SEQUENCE' 'NUMBER' Field type: 09000000 - Field information Input data length: 004 Input data format: Packed decimal (P) Output length: 007 Default output format: Zoned decimal (Z)

RMPDESC Resource description.

Labels: 'RESOURCE' 'DESCRIPTION' Field type: 09000000 - Field information Input data length: 030 Input data format: Character (C) Output length: 030 Default output format: Character (C)

(continued)

Field Resource Security Information Fields Fieldname List

3-118 Auditing and Report Writing Guide

Field Description

RMPSTAT Resource status.

Labels: 'RESOURCE' 'STATUS' Field type: 09000000 - Field information Input data length: 001 Input data format: Character (C) Output length: 009 Default output format: Transformed (T)

C'A' = ACTIVE

C'D' = DISABLED

C'M' = MONITOR

C'S' = SAFE

C'P' = PRELOADED

C'V' = SUSPENDED

C'K' = KEEP

RMPTYPE Resource type.

Labels: 'RESOURCE' 'TYPE' Field type: 09000000 - Field information Input data length: 001 Input data format: Character (C) Output length: 004 Default output format: Transformed (T)

C'D' = DL/1

C'F' = FILE

C'M' = MAP

RMPRCFM Record format.

Labels: 'RECORD' 'FORMAT' Field type: 09000000 - Field information Input data length: 001 Input data format: Character (C) Output length: 008 Default output format: Transformed (T)

C'F' = FIXED

C'V' = VARIABLE

RMPMSET Mapset name.

Labels: 'MAPSET' 'NAME' Field type: 09000000 - Field information Input data length: 008 Input data format: Character (C) Output length: 008 Default output format: Character (C)

(continued)

Fieldname List Field Resource Security Information Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-119

Field Description

RMP#SEG Number of segments.

Labels: 'NUMBER' 'OF' 'SEGMENTS' Field type: 09000000 - Field information Input data length: 001 Input data format: X - Hexadecimal Output length: 001 Default output format: Zoned decimal (Z)

RMPFDSC Field description.

Labels: 'FIELD' 'DESCRIPTION' Field type: 09010000 - Field segment information Input data length: 015 Input data format: Character (C) Output length: 015 Default output format: Character (C)

RMPROW Map row.

Labels: 'MAP' 'ROW' Field type: 09010000 - Field segment information Input data length: 001 Input data format: X - Hexadecimal Output length: 003 Default output format: Zoned decimal (Z)

RMPCOL Map column.

Labels: 'MAP' 'COLUMN' Field type: 09010000 - Field segment information Input data length: 001 Input data format: X - Hexadecimal Output length: 003 Default output format: Zoned decimal (Z)

RMPDLEN Data length.

Labels: 'DATA' 'LENGTH' Field type: 09010000 - Field segment information Input data length: 002 Input data format: X - Hexadecimal Output length: 005 Default output format: Zoned decimal (Z)

(continued)

Field Resource Security Information Fields Fieldname List

3-120 Auditing and Report Writing Guide

Field Description

RMPCOMP Compare operator.

Labels: 'COMPARE' 'OPERATOR' Field type: 09010000 - Field segment information Input data length: 001 Input data format: X - Hexadecimal Output length: 016 Default output format: Transformed (T)

X'02' = RANGE

X'04' = LESS OR EQUAL

X'08' = LESS THAN

X'10' = GREATER OR EQUAL

X'20' = GREATER THAN

X'40' = NOT EQUAL

X'80' = EQUAL

RMPCONN Logical connector.

Labels: 'LOGICAL' 'CONNECTOR' Field type: 09010000 - Field segment information Input data length: 001 Input data format: X - Hexadecimal Output length: 003 Default output format: Transformed (T)

X'40' = OR

X'80' = AND

RMPVALU Data value.

Labels: 'DATA' 'VALUE' Field type: 09010000 - Field segment information Input data length: 001 Input data format: Character (C) Output length: 016 Default output format: Transformed (T)

RMPVAL2 Data value 2.

Labels: 'DATA' 'VALUE 2' Field type: 09010000 - Field segment information Input data length: 001 Input data format: Character (C) Output length: 016 Default output format: Transformed (T)

Fieldname List Group Security Information Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-121

Group Security Information Fields

The following fieldnames can be included in any ALRTVCSC report SUBTITLE, FIELD,

or FIELDS command statement. These fieldnames are contained in the ALRTVCSC group security records (segment X'0A0x0000').

Field Description

GRPNAME Group name.

Default label-1: GROUP Default label-2: NAME Field type: 0A000000 - Group information Input data length: 009 Input data format: Character (C) Output length: 009 Default output format: Character (C)

GRPDESC Group description.

Default label-1: GROUP Default label-2: DESCRIPTION Field type: 0A000000 - Group information Input data length: 030 Input data format: Character (C) Output length: 030 Default output format: Character (C)

GRPSTAT Group status.

Default label-1: GROUP Default label-2: STATUS Field type: 0A000000 - Group information Input data length: 001 Input data format: Character (C) Output length: 009 Default output format: Transformed (T)

C'A' = ACTIVE

C'D' = DISABLED

C'M' = MONITOR

C'S' = SAFE

C'P' = PRELOADED

C'V' = SUSPENDED

C'K' = KEEP

(continued)

Group Security Information Fields Fieldname List

3-122 Auditing and Report Writing Guide

Field Description

GRALTRAN Alert-status transactions list, or NONE.

Default label-1: ALERT

Default label-2: TRAN Default label-3: LIST Field type: 0A010000 - Group Alert-transaction info Input data length: 004 Input data format: Character (C) Output length: 004 Default output format: Character (C)

GRALTRN1 Alert status transaction ID 1.

Default label-1: ALERT Default label-2: TRAN Default label-3: ID-1 Field type: 0A000000 - Group information Input data length: 004 Input data format: Character (C) Output length: 004 Default output format: Character (C)

GRALTRN2 Alert status transaction ID 2.

Default label-1: ALERT Default label-2: TRAN Default label-3: ID-2 Field type: 0A000000 - Group information Input data length: 004 Input data format: Character (C) Output length: 004 Default output format: Character (C)

GRALTRN3 Alert status transaction ID 3.

Default label-1: ALERT Default label-2: TRAN Default label-3: ID-3 Field type: 0A000000 - Group information Input data length: 004 Input data format: Character (C) Output length: 004 Default output format: Character (C)

(continued)

Fieldname List Group Security Information Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-123

Field Description

GRALTRN4 Alert status transaction ID 4.

Default label-1: ALERT Default label-2: TRAN Default label-3: ID-4 Field type: 0A000000 - Group information Input data length: 004 Input data format: Character (C) Output length: 004 Default output format: Character (C)

GRALTRN5 Alert status transaction ID 5.

Default label-1: ALERT Default label-2: TRAN Default label-3: ID-5 Field type: 0A000000 - Group information Input data length: 004 Input data format: Character (C) Output length: 004 Default output format: Character (C)

GRALTRN6 Alert status transaction ID 6.

Default label-1: ALERT Default label-2: TRAN Default label-3: ID-6 Field type: 0A000000 - Group information Input data length: 004 Input data format: Character (C) Output length: 004 Default output format: Character (C)

GRTRAUTH Group authorization (YES, NONE, or ALL).

Default label-1: GROUP Default label-2: TRAN Default label-3: AUTH Field type: 0A000000 - Group information Input data length: 004 Input data format: Character (C) Output length: 004 Default output format: Character (C)

(continued)

Group Security Information Fields Fieldname List

3-124 Auditing and Report Writing Guide

Field Description

GRTRAUTL Authorized transactions (listed).

Default label-1: TRAN Default label-2: AUTH Default label-3: LIST Field type: 0A030000 - Group Tran authorization information Input data length: 004 Input data format: Character (C) Output length: 004 Default output format: Character (C)

GRTRAUTF Authorized transaction scheduled FROM-time.

Default label-1: TRAN Default label-2: SCHED Default label-3: FROM-TIME Field type: 0A030000 - Group Tran authorization information Input data length: 004 Input data format: X - Hexadecimal Output length: 008 Default output format: Transformed (T)

GRTRAUTT Authorized transaction scheduled TO-time.

Default label-1: TRAN Default label-2: SCHED Default label-3: TO-TIME Field type: 0A030000 - Group Tran authorization information Input data length: 004 Input data format: X - Hexadecimal Output length: 008 Default output format: Transformed (T)

GRTRAUTD Authorized transaction description.

Default label-1: TRANSACTION Default label-2: DESCRIPTION Field type: 0A030000 - Group Tran authorization information Input data length: 030 Input data format: Character (C) Output length: 030 Default output format: Character (C)

(continued)

Fieldname List Group Security Information Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-125

Field Description

GRPRAUTH Program authorization (YES, NONE, or ALL).

Default label-1: GROUP Default label-2: PROG Default label-3: AUTH Field type: 0A000000 - Group information Input data length: 004 Input data format: Character (C) Output length: 004 Default output format: Character (C)

GRPRAUTL Authorized programs (listed).

Default label-1: PROGRAM Default label-2: AUTH Default label-3: LIST Field type: 0A040000 - Group Program authorization information Input data length: 008 Input data format: Character (C) Output length: 008 Default output format: Character (C)

GRPRAUTF Authorized program scheduled FROM-time.

Default label-1: PROGRAM Default label-2: SCHED Default label-3: FROM-TIME Field type: 0A040000 - Group Program authorization information Input data length: 004 Input data format: X - Hexadecimal Output length: 008 Default output format: Transformed (T)

GRPRAUTT Authorized program scheduled TO-time.

Default label-1: PROGRAM Default label-2: SCHED Default label-3: TO-TIME Field type: 0A040000 - Group Program authorization information Input data length: 004 Input data format: X - Hexadecimal Output length: 008 Default output format: Transformed (T)

(continued)

Group Security Information Fields Fieldname List

3-126 Auditing and Report Writing Guide

Field Description

GRPRAUTD Authorized program description.

Default label-1: PROGRAM Default label-2: DESCRIPTION Field type: 0A040000 - Group Program authorization information Input data length: 030 Input data format: Character (C) Output length: 030 Default output format: Character (C)

GRFLAUTH File authorization (YES, NONE, or ALL).

Default label-1: GROUP Default label-2: FILE Default label-3: AUTH Field type: 0A000000 - Group information Input data length: 004 Input data format: Character (C) Output length: 004 Default output format: Character (C)

GRFLAUTL Authorized file names (listed).

Default label-1: FILE Default label-2: AUTH Default label-3: LIST Field type: 0A050000 - Group File authorization information Input data length: 008 Input data format: Character (C) Output length: 008 Default output format: Character (C)

GRFLAUTC File authorization update status.

Default label-1: GROUP Default label-2: FILE Default label-3: ACCESS Field type: 0A050000 - Group File authorization information Input data length: 001 Input data format: Character (C) Output length: 007 Default output format: Transformed (T)

C'I' = INQUIRY

C'U' = UPDATE

(continued)

Fieldname List Group Security Information Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-127

Field Description

GRFLAUTF Authorized file scheduled FROM-time.

Default label-1: FILE Default label-2: SCHED Default label-3: FROM-TIME Field type: 0A050000 - Group File authorization information Input data length: 004 Input data format: X - Hexadecimal Output length: 008 Default output format: Transformed (T)

GRFLAUTT Authorized file scheduled TO-time.

Default label-1: FILE Default label-2: SCHED Default label-3: TO-TIME Field type: 0A050000 - Group File authorization information Input data length: 004 Input data format: X - Hexadecimal Output length: 008 Default output format: Transformed (T)

GRFLAUTD Authorized file description.

Default label-1: FILE Default label-2: DESCRIPTION Field type: 0A050000 - Group File authorization information Input data length: 030 Input data format: Character (C) Output length: 030 Default output format: Character (C)

GRMPAUTH Map restrictions (YES or NONE).

Default label-1: GROUP Default label-2: MAP Default label-3: AUTH Field type: 0A000000 - Group information Input data length: 004 Input data format: Character (C) Output length: 004 Default output format: Character (C)

(continued)

Group Security Information Fields Fieldname List

3-128 Auditing and Report Writing Guide

Field Description

GRMPAUTL Restricted maps (listed).

Default label-1: MAP Default label-2: AUTH Default label-3: LIST Field type: 0A060000 - Group Map authorization information Input data length: 008 Input data format: Character (C) Output length: 008 Default output format: Character (C)

GRMPAUTM Restricted mapset name.

Default label-1: MAPSET Default label-2: NAME Field type: 0A060000 - Group Map authorization information Input data length: 007 Input data format: Character (C) Output length: 007 Default output format: Character (C)

GRMPAUTD Restricted map description.

Default label-1: MAP Default label-2: TITLE Field type: 0A060000 - Group Map authorization information Input data length: 020 Input data format: Character (C) Output length: 020 Default output format: Character (C)

GRFDAUTH Field authorization (YES, NONE, or ALL).

Default label-1: GROUP Default label-2: FIELD Default label-3: AUTH Field type: 0A000000 - Group information Input data length: 004 Input data format: Character (C) Output length: 004 Default output format: Character (C)

(continued)

Fieldname List Group Security Information Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-129

Field Description

GRFDAUTL Authorized field resource names (listed).

Default label-1: FIELDRES Default label-2: AUTH Default label-3: LIST Field type: 0A070000 - Group Field authorization information Input data length: 008 Input data format: Character (C) Output length: 008 Default output format: Character (C)

User Group Record Fields Fieldname List

3-130 Auditing and Report Writing Guide

User Group Record Fields

The following fieldnames can be included in any ALRTVCSC report SUBTITLE, FIELD,

or FIELDS command statement. These fieldnames are contained in the ALRTVCSC user-group records (RECTYPE EQ C'UG', segment X'0B000000'). These fields will be printed only on report detail lines with other user group record and common segment fieldnames.

Field Description

UGOPRNUM User-group user ID.

Default label-1: USER Default label-2: ID Field type: 0B000000 - User-group information Input data length: 9

Input data format: Character (C) Default output length: 9

Default output format: Character (C)

UGTERMID User-group terminal ID.

Default label-1: TERMINAL Default label-2: ID Field type: 0B000000 - User-group information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

UGALTGRP User-group Alert group.

Default label-1: ALERT Default label-2: GROUP Field type: 0B000000 - User-group information Input data length: 9

Input data format: Character (C) Default output length: 9

Default output format: Character (C)

UGGROUP User-group group name.

Default label-1: GROUP Default label-2: NAME Field type: 0B010000 - User-group Alert-transaction information Input data length: 9

Input data format: Character (C) Default output length: 9

Default output format: Character (C)

(continued)

Fieldname List User Group Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-131

Field Description

UGTRAUTL Authorized transactions (listed).

Default label-1: TRAN Default label-2: AUTH Default label-3: LIST Field type: 0B020000 - User-group information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

UGPRAUTL Authorized programs (listed).

Default label-1: PROG Default label-2: AUTH Default label-3: LIST Field type: 0B030000 - User-group information Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

UGFLAUTL Authorized files (listed).

Default label-1: FILE Default label-2: AUTH Default label-3: LIST Field type: 0B040000 - User-group information Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

UGMPAUTL Authorized maps (listed).

Default label-1: MAP Default label-2: AUTH Default label-3: LIST Field type: 0B050000 - User-group information Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

(continued)

User Group Record Fields Fieldname List

3-132 Auditing and Report Writing Guide

Field Description

UGFDAUTL Authorized field resource names (listed).

Default label-1: FIELDRES Default label-2: AUTH Default label-3: LIST Field type: 0B060000 - User-group information Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

UGTREXCL Transaction exclusions (listed).

Default label-1: TRAN Default label-2: EXCL Default label-3: LIST Field type: 0B070000 - User-group information Input data length: 4

Input data format: Character (C) Default output length: 4

Default output format: Character (C)

UGPREXCL Program exclusions (listed).

Default label-1: PROG Default label-2: EXCL Default label-3: LIST Field type: 0B080000 - User-group information Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

UGFLEXCL File exclusions (listed).

Default label-1: FILE Default label-2: EXCL Default label-3: LIST Field type: 0B090000 - User-group information Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

(continued)

Fieldname List User Group Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-133

Field Description

UGMPEXCL Map exclusions (listed).

Default label-1: MAP Default label-2: EXCL Default label-3: LIST Field type: 0B0A0000 - User-group information Input data length: 12

Input data format: Character (C) Default output length: 12

Default output format: Character (C)

UGFDEXCL Field exclusions (listed).

Default label-1: FLD Default label-2: EXCL Default label-3: LIST Field type: 0B0B0000 - User-group information Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

User Profile Record Fields Fieldname List

3-134 Auditing and Report Writing Guide

User Profile Record Fields

The following fieldnames can be included in any ALRTVCSC report SUBTITLE, FIELD,

or FIELDS command statement. These fieldnames are contained in the ALRTVCSC user profile records (RECTYPE EQ C'UP', segment X'0C000000'). These fields will be printed only on report detail lines with other user profile record and common segment fieldnames.

Field Description

UPUSERID User profile user ID.

Default label-1: USERID Field type: 0C000000 - User profile information Input data length: 9

Input data format: Character (C) Default output length: 9

Default output format: Character (C)

UPTIMSTM User profile time stamp.

Default label-1: USER TIME STAMP Field type: 0C000000 - User profile information Input data length: 8

Input data format: Hexadecimal (X) Default output length: 17

Default output format: Transformed (T)

X'AA893F58 68880000'.....T'01/26/95 10:00:00'

UPUSRNAM User profile user name.

Default label-1: USER NAME Field type: 0C000000 - User profile information Input data length: 30

Input data format: Character (C) Default output length: 30

Default output format: Character (C)

UPLANG User profile user language.

Default label-1: LANGUAGE Field type: 0C000000 - User profile information Input data length: 2

Input data format: Character (C) Default output length: 2

Default output format: Character (C)

(continued)

Fieldname List User Profile Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-135

Field Description

UPPWDDAT User profile password date.

Default label-1: PASSWORD Default label-2: DATE Field type: 0C000000 - User profile information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

UPPWDZON User profile password time zone.

Default label-1: PASSWORD Default label-2: ZONE Field type: 0C000000 - User profile information Input data length: 2

Input data format: Hexadecimal (X) Default output length: 5

Default output format: Zoned decimal (Z)

UPNEWPDT User profile new password date.

Default label-1: NEW Default label-2: PASSWORD Default label-3: DATE Field type: 0C000000 - User profile information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

UPNEWPZN User profile new password time zone.

Default label-1: NEW Default label-2: PASSWORD Default label-3: ZONE Field type: 0C000000 - User profile information Input data length: 2

Input data format: Hexadecimal (X) Default output length: 5

Default output format: Zoned decimal (Z)

(continued)

User Profile Record Fields Fieldname List

3-136 Auditing and Report Writing Guide

Field Description

UPNOTCNT User profile password notification count.

Default label-1: PASSWORD Default label-2: NOTIFY Default label-3: COUNT Field type: 0C000000 - User profile information Input data length: 2

Input data format: Packed decimal (P) Default output length: 3

Default output format: Zoned decimal (Z)

UPSTATUS User profile user ID status.

Default label-1: USERID Default label-2: STATUS Field type: 0C000000 - User profile information Input data length: 1

Input data format: Character (C) Default output length: 9

Default output format: Transformed (T)

C'A'...........T'ACTIVE'

C'D'...........T'DISABLED'

C'K'...........T'KEEP'

UPUSRTYP User profile user type.

Default label-1: USER Default label-2: TYPE Field type: 0C000000 - User profile information Input data length: 1

Input data format: Character (C) Default output length: 17

Default output format: Transformed (T)

C'R'...........T'REGULAR USERID'

C'M'...........T'MAIN ADMINISTRATOR'

C'T'...........T'SUB ADM (TRM/OPR)'

C'O'...........T'SUB ADM (OPER)'

UPOWNADM User profile owning administrator.

Default label-1: OWNING Default label-2: ADMIN Field type: 0C000000 - User profile information Input data length: 16

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

(continued)

Fieldname List User Profile Record Fields

Chapter 3. ALRTVCSC Security File Report (CICS) 3-137

Field Description

UPUPADM User profile administrator last update.

Default label-1: ADMIN Default label-2: LAST Default label-3: UPDATE Field type: 0C000000 - User profile information Input data length: 16

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

UPSGNDAT User profile last sign-on date.

Default label-1: LAST Default label-2: SIGNON Default label-3: DATE Field type: 0C000000 - User profile information Input data length: 4

Input data format: Hexadecimal (X) Default output length: 10

Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

UPSGNZON User profile last last sign-on zone.

Default label-1: LAST Default label-2: SIGNON Default label-3: ZONE Field type: 0C000000 - User profile information Input data length: 2

Input data format: Hexadecimal (X) Default output length: 5

Default output format: Zoned decimal (Z)

UPSGNSID User profile last sign-on system ID.

Default label-1: LAST Default label-2: SIGNON Default label-3: SYSID Field type: 0C000000 - User profile information Input data length: 8

Input data format: Character (C) Default output length: 8

Default output format: Character (C)

Introduction Sample ALRTVCSC Reports

3-138 Auditing and Report Writing Guide

Sample ALRTVCSC Reports

Introduction

The following sample reports illustrate ways to use the BIM-ALERT/CICS batch report writer to produce reports similar to the predefined batch reports (S1Bxxx programs) distributed with BIM-ALERT/CICS and detailed in Appendix B, "Additional BIM-ALERT/CICS Reports".

The input statements of the sample ALRTVCSC reports that follow can be found in the BIM-ALERT installation library in member ALRTVCSC.J.

S1B500 System Transaction Security Report

Use the following command statements to produce the transaction security report shown below:

// EXEC ALRTVREP,SIZE=256K

TITLES ('B I M - A L E R T / C I C S' -

' ' -

'* * SYSTEM TRANSACTION SECURITY INFORMATION * *')

REPORT ALRTVCSC LINELEN(80)

FIELD TRANSID LABELS(TRAN)

FIELD LITERAL(' ')

FIELD TRSTATUS LABELS(STATUS)

FIELD LITERAL(' ')

FIELD TRFRTIME LABELS(>ACCESS) JUSTIFY(R)

FIELD LITERAL(/)

FIELD TRTOTIME LABELS(<TIME) JUSTIFY(L)

FIELD LITERAL(' ')

FIELD TRDESCR LABELS('TRANSACTION','DESCRIPTION')

RUN

/*

Input

Sample ALRTVCSC Reports S1B500 System Transaction Security Report

Chapter 3. ALRTVCSC Security File Report (CICS) 3-139

DATE: 01/25/2000 11:07:33 PAGE: 000001

B I M - A L E R T / C I C S

* * SYSTEM TRANSACTION SECURITY INFORMATION * *

TRANSACTION

TRAN STATUS ACCESS TIME DESCRIPTION

---- ------ ------ ---- -----------

ALXP ACTIVE 00:01 / 24:00 BIM-ALERT/VSE MAIN TRANSACTION

AXPT ACTIVE 00:01 / 24:00 BIM-ALERT/VSE ONLINE TEST

AX7A DISABLED 00:01 / 24:00 BIM-ALERT/VSE ICCF MONITOR

AX7B DISABLED 00:01 / 24:00 BIM-ALERT/VSE ICCF MONITOR

AX7C DISABLED 00:01 / 24:00 BIM-ALERT/VSE ICCF MONITOR

BIMC ACTIVE 00:01 / 24:00 BIMC TRANSACTION

BIMO ACTIVE 00:01 / 24:00 BIMO TRANSACTION

BIMV ACTIVE 00:01 / 24:00 BIMV TRANSACTION

BMGM SAFE 00:01 / 24:00 MAKE BMGM A SAFE TRANSACTION

CECI ACTIVE 00:01 / 24:00 CICS COMMAND INTERPRETER

CEDA ACTIVE 00:01 / 24:00 CICS ONLINE RSRCE DEFINITION

CEDF ACTIVE 00:01 / 24:00 CICS ONLINE DEBUG

CEMT ACTIVE 00:01 / 24:00 CICS MASTER TERMINAL

CSMT ACTIVE 00:01 / 24:00 CICS MASTER TERMINAL

OPWD ACTIVE 00:01 / 24:00 OPWD TRANSACTION

Output

S1B510 System Program Security Report Sample ALRTVCSC Reports

3-140 Auditing and Report Writing Guide

S1B510 System Program Security Report

Use the following command statements to produce the program security report shown below:

// EXEC ALRTVREP,SIZE=256K

TITLES ('B I M - A L E R T / C I C S' -

' ' -

'* * SYSTEM PROGRAM SECURITY INFORMATION * *')

REPORT ALRTVCSC LINELEN(80)

FIELD PROGNAME LABELS(PROGRAM) JUSTIFY(L)

FIELD LITERAL(' ')

FIELD PROGSTAT LABELS(STATUS)

FIELD LITERAL(' ')

FIELD PROGFTIM LABELS(>ACCESS) JUSTIFY(R)

FIELD LITERAL(/)

FIELD PROGTTIM LABELS(<TIME) JUSTIFY(L)

FIELD LITERAL(' ')

FIELD PROGDESC LABELS('PROGRAM','DESCRIPTION')

RUN

/*

DATE: 01/25/2000 11:25:13 PAGE: 000001

B I M - A L E R T / C I C S

* * SYSTEM PROGRAM SECURITY INFORMATION * *

PROGRAM

PROGRAM STATUS ACCESS TIME DESCRIPTION

------- ------ ------ ---- -----------

AXP10000 ACTIVE 00:01 / 24:00 BIM-ALERT/VSE MAIN MENU

AXP720 ACTIVE 00:01 / 24:00 BIM-ALERT/VSE ONLINE TEST

BXP10000 PRELOADED 00:01 / 24:00 COMMAND LEVEL TEST PROGRAM

BXP720 PRELOADED 00:01 / 24:00 COMMAND LEVEL TEST PROGRAM

PPY29001 ACTIVE 00:01 / 24:00 PAYROLL MASTER UPDATE PROG

PPY29021 ACTIVE 00:01 / 24:00 PAYROLL MASTER ADD PROG

PPY29041 ACTIVE 00:01 / 24:00 PAYROLL MASTER UPDATE PROG

PPY29044 ACTIVE 00:01 / 24:00 PAYROLL MASTER DISPLAY PROG

S10000 DISABLED 00:01 / 24:00 BIM-ALERT/CICS MAIN MENU

Input

Output

Sample ALRTVCSC Reports S1B520 System File Security Report

Chapter 3. ALRTVCSC Security File Report (CICS) 3-141

S1B520 System File Security Report

Use the following command statements to produce the file security report shown below:

// EXEC ALRTVREP,SIZE=256K

TITLES ('B I M - A L E R T / C I C S' -

' ' -

'* * SYSTEM FILE SECURITY INFORMATION * *')

REPORT ALRTVCSC LINELEN(80)

FIELD FILENAME LABELS(FILE NAME) JUSTIFY(L)

FIELD FILESTAT LABELS(STATUS)

FIELD FILEPROC LABELS(PROCESS)

FIELD FILEFTIM LABELS(>ACCESS) JUSTIFY(R)

FIELD LITERAL(/)

FIELD FILETTIM LABELS(<TIME) JUSTIFY(L)

FIELD LITERAL(' ')

FIELD FILEDESC LABELS('FILE DESCRIPTION') JUSTIFY(L)

RUN

/*

DATE: 01/25/2000 12:00:52 PAGE: 000001

B I M - A L E R T / C I C S

* * SYSTEM FILE SECURITY INFORMATION * *

FILE

NAME STATUS PROCESS ACCESS TIME FILE DESCRIPTION

---- ------ ------- ------ ---- ----------------

ALERTXP ACTIVE UPDATE 00:01 / 24:00 BIM-ALERT/VSE RULES FILE

AXPCTL ACTIVE INQUIRY 00:01 / 24:00 BIM-ALERT/VSE CONTROL FILE

AXPLOG1 ACTIVE INQUIRY 00:01 / 24:00 BIM-ALERT/VSE LOG FILE

S1SAUDT ACTIVE UPDATE 00:01 / 24:00 BIM-ALERT AUDIT FILE

S1SCTY ACTIVE UPDATE 00:01 / 24:00 BIM-ALERT/CICS RULES FILE

S1SECLG ACTIVE UPDATE 00:01 / 24:00 BIM-ALERT/CICS LOG FILE

S1SMS## ACTIVE UPDATE 00:01 / 24:00 BIM-ALERT/CICS MESSAGE FILE

Input

Output

S1B530 System Map Display Security Report Sample ALRTVCSC Reports

3-142 Auditing and Report Writing Guide

S1B530 System Map Display Security Report

Use the following command statements to produce the map display security report shown below:

// EXEC ALRTVREP,SIZE=256K

TITLES ('B I M - A L E R T / C I C S' -

' ' -

'* * SYSTEM MAP DISPLAY SECURITY INFORMATION * *')

REPORT ALRTVCSC

FIELD MAPNAME REPCHAR(' ') CTLBREAK(S)

FIELD MAPSET REPCHAR(' ') CTLBREAK(S)

FIELD MAPNUM REPCHAR(' ') FORMAT(X) LENGTH(7) CTLBREAK(S)

FIELD MAPTITLE REPCHAR(' ') JUSTIFY(L) LABELS('<MAP TITLE')

FIELD MAPSTAT REPCHAR(' ')

FIELD MAPFDNUM FORMAT(X) LENGTH(3)

FIELD MAPFDISP

FIELD MAPFDSCR JUSTIFY(L) LABELS('<FIELD NAME')

SELECT IF RECTYPE EQ C'MP'

RUN

/*

DATE: 01/25/2000 13:48 PAGE: 000001

B I M - A L E R T / C I C S

* * SYSTEM MAP DISPLAY SECURITY INFORMATION * *

MAP MAP MAP

MAP MAPSET REFERENCE MAP FLD FLD

NAME NAME NUMBER MAP TITLE STATUS NUM DSPL FIELD NAME

---- ------ --------- --------- ------ --- ---- ----------

S#M500 S1M500 0000001 TEST MAP S#M550 ACTIVE 002 YES TEST FIELD 2

005 YES TEST FIELD 5

008 YES TEST FIELD 8

009 YES TEST FIELD 9

010 YES TEST FIELD 10

S#M500 S1M500 0000002 TEST MAP S#M500 ACTIVE 001 YES TEST FIELD 1

002 YES TEST FIELD 2

003 YES TEST FIELD 3

S#M510 S1M510 0000003 TEST MAP S#M510 ACTIVE 001 YES TEST FIELD 1

003 YES TEST FIELD 3

005 YES TEST FIELD 5

S#M510 S1M510 0000004 TEST MAP S#M510 ACTIVE 001 YES TEST FIELD 1

002 YES TEST FIELD 2

003 YES TEST FIELD 3

004 YES TEST FIELD 4

005 YES TEST FIELD 5

S#M510 S1M510 0000005 TEST MAP S#M510 ACTIVE 001 YES TEST FIELD 1 XXXXXX

002 YES TEST FIELD 2 XXXXXX

003 YES TEST FIELD 3 XXXXXX

011 YES TEST FIELD 11 XXXXX

012 YES TEST FIELD 12 XXXXX

013 YES TEST FIELD 13 XXXXX

101 YES TEST FIELD 101 XXXX

102 YES TEST FIELD 102 XXXX

103 YES TEST FIELD 103 XXXX

Input

Output

Sample ALRTVCSC Reports S1B540 Organizational Information Report

Chapter 3. ALRTVCSC Security File Report (CICS) 3-143

S1B540 Organizational Information Report

Use these statements to produce the following organizational information report:

// EXEC ALRTVREP,SIZE=256K

TITLES ('B I M - A L E R T / C I C S' -

' ' -

'* * ORGANIZATIONAL INFORMATION * *')

REPORT ALRTVCSC

SUBTITLE COMPNAME LABEL('COMPANY NAME:') CTLBREAK(P)

SUBTITLE COMPANY LABEL(' ID:') LINE(2)

FIELD DIVISION JUSTIFY(R) REPCHAR(.) LABELS(NO)

FIELD DIVNAME JUSTIFY(L) REPCHAR(.) -

LABELS('<DIVISION NAME')

FIELD DEPARTMT JUSTIFY(R) REPCHAR(.) LABELS(NO)

FIELD DEPTNAME JUSTIFY(L) REPCHAR(.) -

LABELS('<DEPARTMENT NAME')

FIELD SECTION JUSTIFY(R) REPCHAR(.) LABELS(NO)

FIELD SECTNAME JUSTIFY(L) REPCHAR(.) -

LABELS('<SECTION NAME')

SELECT IF RECTYPE EQ C'LO' AND -

DIVISION(1) NE X'00'

RUN

/*

DATE: 01/25/2000 13:04:17 PAGE: 000001

B I M - A L E R T / C I C S

* * ORGANIZATIONAL INFORMATION * *

COMPANY NAME: B I MOYLE ASSOCIATES, INC.

ID: BIM

DIVISION NAME DEPARTMENT NAME SECTION NAME

------------- --------------- ------------

. . . . . .

CLBS BIM OHIO OFFICE . . . .

. . DEVL COLUMBUS DEVELOPMENT . .

. . . . ALRT BIM-ALERT

. . . . FAQS BIM-FAQS

. . . . 0000 ( N/A )

. . SUPP COLUMBUS SUPPORT . .

. . . . ALRT BIM-ALERT

. . . . FAQS BIM-FAQS

. . . . 0000 ( N/A )

. . 0000 ( N/A ) . .

. . . . 0000 ( N/A )

MPLS BIM MINNEAPOLIS OFFICE . . . .

. . ADMN MINNEAPOLIS ADMINISTRATION . .

. . . . 0000 ( N/A )

. . DEVL MINNEAPOLIS DEVELOPMENT . .

. . . . MVS MVS SYSTEMS

. . . . VSE VSE SYSTEMS

. . . . 0000 ( N/A )

. . SUPP MINNEAPOLIS SUPPORT . .

. . . . 0000 ( N/A )

. . 0000 ( N/A ) . .

. . . . 0000 ( N/A )

SNTA BIM CALIFORNIA OFFICE . . . .

. . DEVL SANTA ANA DEVELOPMENT . .

. . . . EPIC BIM-EPIC/VSE

. . . . 0000 ( N/A )

. . SUPP SANTA ANA SUPPORT . .

. . . . 0000 ( N/A )

. . 0000 ( N/A ) . .

. . . . 0000 ( N/A )

Input

Output

Operator and Terminal Reports Sample ALRTVCSC Reports

3-144 Auditing and Report Writing Guide

Operator and Terminal Reports

Although it is not possible to generate a report exactly like the standard S1B550 operator security report, it is possible to get much more specific operator reports using the BIM-ALERT Batch Report Writer.

The following examples show some samples of reports users have requested in the past. This is by no means a complete accounting of all the operator reports possible.

The same reports can be produced for terminals rather than operators by specifying the correct alternative fieldnames.

Overview

Sample ALRTVCSC Reports Operator Security Report - Access Time Report

Chapter 3. ALRTVCSC Security File Report (CICS) 3-145

Operator Security Report - Access Time Report

Use the following command statements to produce the operator security report shown shown on the next page. Note the use of the XFORM command to transform internal time values and create the GROUP-ID field. Also note the use of literals in both the SUBTITLE and FIELD command statements.

// EXEC ALRTVREP,SIZE=256K

TITLES ('B I M - A L E R T / C I C S' -

' ' -

'* * OPERATOR SECURITY INFORMATION * *' -

'AUTHORIZED TIME REPORT')

XFORM TIME (X'00001770' T'MIDNIGHT' X'0083D600' T'MIDNIGHT' -

X'00000000' T'.....' X'000000' T'....') -

GROUP (C'A' T'A-GROUP' C'B' T'B-GROUP' C'C' T'C-GROUP' -

C'D' T'D-GROUP' C'E' T'E-GROUP' C'F' T'F-GROUP' -

C'G' T'G-GROUP' C'H' T'H-GROUP' C'I' T'I-GROUP' -

C'S' T'S-GROUP' C'T' T'T-GROUP' C'U' T'U-GROUP' -

C'V' T'V-GROUP' C'W' T'W-GROUP' C'X' T'X-GROUP' -

C'Y' T'Y-GROUP' C'Z' T'Z-GROUP' ELSE T'#-GROUP')

REPORT ALRTVCSC

SUBTITLE LITERAL('-') LENGTH(132) LINE(1)

SUBTITLE LITERAL('-') LENGTH(132) LINE(5)

SUBTITLE OPRNAME LABEL(' NAME:') LINE(2) -

SORTPRTY(1) CTLBREAK(P)

SUBTITLE OPRNAME LABEL(' GROUP-ID:') LINE(3) XFORM(GROUP)

SUBTITLE OPRNUMBR LABEL(' USER-ID:') LINE(4) SORTPRTY(2) -

CTLBREAK(P)

SUBTITLE OPRCNAME LABEL('COMP:') JUSTIFY(C) LINE(2)

SUBTITLE OPRVNAME LABEL(' DIV:') JUSTIFY(C) LINE(3)

SUBTITLE OPRDNAME LABEL('DEPT:') JUSTIFY(R) LINE(2)

SUBTITLE OPRSNAME LABEL('SECT:') JUSTIFY(R) LINE(3)

FIELD LITERAL('WEEKDAY:') REPCHAR(' ')

FIELD OPSCHDAY JUSTIFY(L) LABELS(NO) LENGTH(30) FILLCHAR(.)

FIELD OPSCHFTM XFORM(TIME) JUSTIFY(R) -

LABELS(>SCHEDULED,>FROM-TIME)

FIELD LITERAL ('TO')

FIELD OPSCHTTM XFORM(TIME) JUSTIFY(L) LENGTH(12) -

LABELS(<SCHEDULED,<TO-TIME)

FIELD LITERAL (' ')

FIELD OPTMPEFD XFORM(TIME) LABELS(TEMPORARY,FROM-DATE)

FIELD OPTMPEFX XFORM(TIME) LABELS(TEMPORARY,TO-DATE)

FIELD LITERAL (' ')

FIELD OPTMPFTM XFORM(TIME) JUSTIFY(R) -

LABELS(>TEMPORARY,>FROM-TIME)

FIELD LITERAL ('TO')

FIELD OPTMPTTM XFORM(TIME) JUSTIFY(L) LENGTH(12) -

LABELS(<TEMPORARY,<TO-TIME)

SELECT IF OPRNAME(1) EQ C'f'

RUN

/*

Input

Operator Security Report - Access Time Report Sample ALRTVCSC Reports

3-146 Auditing and Report Writing Guide

DATE: 01/25/2000 13:23:07 PAGE: 000001

B I M - A L E R T / C I C S

* * OPERATOR SECURITY INFORMATION * *

AUTHORIZED TIME REPORT

------------------------------------------------------------------------------------------------------------------------------------

NAME: FROST, JACK COMP: B I MOYLE ASSOCIATES, INC. DEPT: COLUMBUS SUPPORT

GROUP-ID: F-GROUP DIV: BIM OHIO OFFICE SECT: BIM-ALERT

USER-ID: JACKF

------------------------------------------------------------------------------------------------------------------------------------

SCHEDULED SCHEDULED TEMPORARY TEMPORARY TEMPORARY TEMPORARY

FROM-TIME TO-TIME FROM-DATE TO-DATE FROM-TIME TO-TIME

--------- --------- --------- --------- --------- ---------

WEEKDAY: SUNDAY........................ MIDNIGHT TO 00:02 04/01/2000 04/30/2000 MIDNIGHT TO MIDNIGHT

MONDAY........................ 07:00 TO MIDNIGHT 04/01/2000 04/30/2000 MIDNIGHT TO MIDNIGHT

TUESDAY....................... MIDNIGHT TO MIDNIGHT ..... ..... ..... TO .....

WEDNESDAY..................... MIDNIGHT TO MIDNIGHT ..... ..... ..... TO .....

THURSDAY...................... MIDNIGHT TO MIDNIGHT ..... ..... ..... TO .....

FRIDAY........................ MIDNIGHT TO 15:00 04/01/2000 04/30/2000 MIDNIGHT TO MIDNIGHT

SATURDAY...................... MIDNIGHT TO 00:02 04/01/2000 04/30/2000 MIDNIGHT TO MIDNIGHT

Output

Sample ALRTVCSC Reports Operator Authorization Report

Chapter 3. ALRTVCSC Security File Report (CICS) 3-147

Operator Authorization Report

Use the following command statements to produce the operator report shown on the next page.

Note the use of the XFORM command to transform a single value of a field that already has a default transformation table.

// EXEC ALRTVREP,SIZE=256K

TITLES ('B I M - A L E R T / C I C S' -

'* * OPERATOR INFORMATION * *' -

'AUTHORIZATION LEVELS')

XFORM A (X'07010000' T'OPER AUTH')

REPORT ALRTVCSC

SUBTITLE LITERAL('*') LENGTH(25) LINE(2) JUSTIFY(C)

SUBTITLE LITERAL('* *') JUSTIFY(C) LINE(3)

SUBTITLE OPRNUMBR CTLBREAK(P) JUSTIFY(C) LINE(3) LABEL('OPERATOR:')

SUBTITLE LITERAL('*') LENGTH(25) LINE(4) JUSTIFY(C)

FIELD INFOTYPE REPCHAR('"') JUSTIFY(R) XFORM(A)

FIELD OPALTRAN MISSCHAR(' ')

FIELD OPTRAUTH REPCHAR(' ')

FIELD OPTRAUTL

FIELD OPPRAUTH REPCHAR(' ')

FIELD OPPRAUTL

FIELD OPFLAUTH REPCHAR(' ')

FIELDS OPFLAUTL OPFLAUTC

FIELD OPMPAUTH REPCHAR(' ')

FIELD OPMPAUTL

RUN

/*

DATE: 01/25/2000 13:25 PAGE: 000001

B I M - A L E R T / C I C S

* * OPERATOR INFORMATION * *

AUTHORIZATION LEVELS

*************************

* OPERATOR: FLL *

*************************

ALERT OPER TRAN OPER PROGRAM OPER FILE OPER OPER MAP

INFO TRAN TRAN AUTH PROG AUTH FILE AUTH FILE MAP AUTH

TYPE LIST AUTH LIST AUTH LIST AUTH LIST ACCESS AUTH LIST

---- ----- ---- ---- ---- ------- ---- ---- ------ ---- ----

OPER AUTH NONE ALL . ALL . ALL . . NONE .

OPER TRANID AUTH INFO BMGM . . . .

" AX7A . . . .

" AX7B . . . .

" AX7C . . . .

" ALXP . . . .

" AXPT . . . .

OPER PROGRAM AUTH INFO . PPY29001 . . .

" . AXP10000 . . .

" . S10000 . . .

" . AXP720 . . .

" . BXP10000 . . .

" . BXP720 . . .

OPER FILE AUTH INFO . . ALERTXP UPDATE .

" . . AXPLOG1 UPDATE .

" . . S1SAUDT UPDATE .

" . . S1SECLG UPDATE .

" . . S1SMS## UPDATE .

" . . S1SCTY UPDATE .

Input

Output

Operator Authorization Report Sample ALRTVCSC Reports

3-148 Auditing and Report Writing Guide

OPER MAP AUTH INFO . . . . S#M550

Sample ALRTVCSC Reports Operator Sign-On Report

Chapter 3. ALRTVCSC Security File Report (CICS) 3-149

Operator Sign-On Report

Use these statements to produce the following operator report. This report shows all operators who have not signed on for more than 30 days.

// EXEC ALRTVREP,SIZE=256K

TITLES ('B I M - A L E R T / C I C S' -

'* * OPERATOR INFORMATION * *' -

'LAST SIGNON > 30 DAYS')

REPORT ALRTVCSC

XFORM NEVER(X'00000000',T'NEVER')

FIELDS OPRNUMBR OPRNAME OPRCOMP OPRDIV OPRDEPT OPRSECT

FIELD OPRLDATE XFORM(NEVER)

SELECT IF OPRLDATE LE C'02/23/2000'

RUN

/*

DATE: 03/25/2000 06:03:53 PAGE: 000001

B I M - A L E R T / C I C S

* * OPERATOR INFORMATION * *

LAST SIGNON > 30 DAYS

OPER

OPERATOR OPER OPER OPER OPER LAST

USERID NAME COMP DIV. DEPT SECT SIGNON DATE

------ -------- ---- ---- ---- ---- -----------

A DEFAULT ADMIN 0000 0000 0000 0000 NEVER

ADMN FAQS/PCS USER PROFIL 0000 0000 0000 0000 NEVER

ALCMAINT ALCMAINT 0000 0000 0000 0000 11/20/1999

AXPMAINT AXPMAINT 0000 0000 0000 0000 NEVER

DICKM DICKM 0000 0000 0000 0000 11/13/1999

DICKM2 DICKM2 0000 0000 0000 0000 NEVER

ERIC KEHLER, ERIC 0000 0000 0000 0000 01/13/2000

FLL LINTON, FRED 0000 0000 0000 0000 01/13/2000

GOP GOP 0000 0000 0000 0000 NEVER

GW001 WASHINGTON, GEORGE 0000 0000 0000 0000 NEVER

JACKF FROST, JACK BIM CLBS SUPP ALRT NEVER

JAKE JAKE 0000 0000 0000 0000 10/10/1999

JSTECHER STECHER, JIM 0000 0000 0000 0000 NEVER

KEF KEF 0000 0000 0000 0000 NEVER

KJM KJM 0000 0000 0000 0000 NEVER

MODEL MODEL 0000 0000 0000 0000 NEVER

MODEL2 MODEL2 0000 0000 0000 0000 NEVER

OPER1 OPER1 0000 0000 0000 0000 08/26/1999

OPER13 OPER13 0000 0000 0000 0000 NEVER

OPER2 OPER2 0000 0000 0000 0000 07/02/1999

OPER3 OPER3 0000 0000 0000 0000 NEVER

OPER4 OPER4 0000 0000 0000 0000 NEVER

OPER5 OPER5 0000 0000 0000 0000 NEVER

OPER6 OPER6 0000 0000 0000 0000 NEVER

PCSMAINT PCSMAINT 0000 0000 0000 0000 NEVER

ROBERT ROBERT 0000 0000 0000 0000 NEVER

Y2TEST Y2TEST 0000 0000 0000 0000 01/13/2000

Input

Output

4-1

4

ALRTVVSC Security File Report (VSE)

This chapter describes the ALRTVVSC security file report, which you can use to select and display information from the BIM-ALERT/VSE security file.

Introduction .............................................................................................................. 4-2 General Information ............................................................................................. 4-2 Sample JCL .......................................................................................................... 4-2 Input Record Description ...................................................................................... 4-3 Field Information .................................................................................................. 4-4

Fieldname List .......................................................................................................... 4-7 Common Segment Fields ...................................................................................... 4-7 User Record Fields .............................................................................................. 4-12 Jobmask Record Fields........................................................................................ 4-16 SECID Record Fields .......................................................................................... 4-18 DASD and Tape Dataset Record Fields ............................................................... 4-20 Resource Record Fields ....................................................................................... 4-26 Reference Record Field ....................................................................................... 4-29 Node Information Fields ..................................................................................... 4-30 Remote Submittal Information Fields .................................................................. 4-32 XPCC Submittal Information Fields ................................................................... 4-34

Sample ALRTVVSC Report ................................................................................... 4-35 Introduction ........................................................................................................ 4-35 Logical Table Ruleset Report .............................................................................. 4-35

General Information Introduction

4-2 Auditing and Report Writing Guide

Introduction

General Information

Security information contained in the BIM-ALERT/VSE security file is available for selection and display in the ALRTVVSC report type.

This report type requires the BIM-ALERT/VSE security file, or a VSAM copy of the file, as input. It will also accept a sequential tape or disk file of variable-length records as input.

The phase ALRTVVSC is loaded by ALRTVREP when this report type is specified on a REPORT command statement. ALRTVVSC reads the input file and formats the data for the report.

To select user profile information from the security file, use the ALRTVCSC report type, described in Chapter 3, "ALRTVCSC Security File Report (CICS)".

Sample JCL

The following sample JCL can be used to execute any ALRTVVSC report:

// JOB ALRTVVSC BIM-ALERT/VSE security file report

// LIBDEF PHASE,SEARCH=.... <== optional

// DLBL IJSYSUC,'user.catalog.name',,VSAM <== optional

// DLBL SORTWK1,'SORTWK1.SYS001.WORKFILE',0000,VSAM, <== optional

DISP=(,DELETE),RECORDS=2000,RECSIZE=4096 <== optional

// DLBL ALERTXP,'ALERT.ALERTXP.V51',,VSAM

// EXEC ALRTVREP,SIZE=256K

.

.

/*

/&

Report Description

Input Dataset

I/O Module Name

User Profile

Introduction Input Record Description

Chapter 4. ALRTVVSC Security File Report (VSE) 4-3

Input Record Description

Each BIM-ALERT/VSE security file record contains a 68-byte record key and one of several subordinate information field types (segments), determined by the contents of the RECTYPE field in the record key.

The user record defines parameters to construct a task ID as part of the user verification process. User records may or may not be present in the file. They will be present only if the extended functions must be used to handle unusual job submittal where no // ID card is present in the job stream (RJE, etc.).

Task ID Build Information: Fields (Type 01010000)

The data in this segment contains field information of the task ID build parameters for the user record.

The jobmask record defines the algorithm to use to assign a SECID to a job based on the task ID. Jobmask records will exist only if the extended functions are necessary to handle submittal procedures outside BIM-ALERT/VSE's submittal monitors (RJE, etc.).

The SECID record defines all valid SECIDs and their characteristics. See the individual fieldname definitions for more information.

SECID Job Entry Source (Type 04010000)

This segment identifies the job entry source information valid for the SECID. It is a variable-occurrence segment. In other words, the segment can occur more than once within the parent SECID information record.

When a fieldname defined within this segment is included in a FIELD or FIELDS

command statement, one report output detail line will be generated for each occurrence of the segment in the input record.

SECID Job Entry Mode (Type 04020000)

This segment identifies the job entry mode information valid for the SECID. It is a variable-occurrence segment. In other words, the segment can occur several times within the parent SECID information record.

When a fieldname defined within this segment is included in a FIELD or FIELDS

command statement, one report output detail line will be generated for each occurrence of the segment in the input record.

SECID RJENODE Information (Type 04030000)

This segment identifies the RJENODE information valid for the SECID.

SECID RJEUID Information (Type 04040000)

This segment identifies the RJEUID information valid for the SECID.

Introduction

User Information

(Type 01000000)

Jobmask

Information (Type

03000000)

SECID Information

(Type 04000000)

Input Record Description Introduction

4-4 Auditing and Report Writing Guide

The DASD or tape dataset record defines a single dataset name (either generic or specific) and a SECID's authorization to access the dataset.

The resource record defines a single resource (either generic or specific) and a SECID's authorization to access the resource.

The cross-reference record is used internally by BIM-ALERT/VSE to associate resource and dataset rulesets with specific SECIDs.

The type C0000000 fields can be selected to produce a report on node name data from the node name information records.

The type C10x0000 fields can be selected to produce a report of remote submittal data from the system control file record.

Report output is comprised of one or more data fields extracted from an input dataset and formatted according to default or user specifications. Each data field is selected from a pre-defined list of ALRTVVSC fieldnames.

At report generation time, each fieldname specified is assigned a report column, positioned from left to right across the report page in the order in which the fieldnames were specified.

Data corresponding to each selected fieldname is located, extracted from the physical input record by the ALRTVVSC I/O module, and moved to, or transformed into, the output report column, using either the default values described in the fieldname entries or those specified by the user in a FIELD command statement.

The following information is provided for each ALRTVVSC fieldname:

Heading Description

Group Field: YES Indicates that the fieldname being defined is a group fieldname containing several individual fieldnames within the group. The individual fieldnames are listed. If the group fieldname is specified in the SUBTITLE, FIELD, or FIELDS command

statement, input data represented by all individual fieldnames within the group will be printed as a single field.

If the individual fieldnames are specified in a command statement, each fieldname is assigned its own column in the report output detail line.

(continued)

DASD or Tape

Dataset

Information (Type

05000000)

Resource

Information (Type

06000000)

Cross-Reference

Information (Type

07000000)

Node Information

(Type C0000000)

Remote Submittal

Information (Type

C1000000)

Field Information

Introduction Input Record Description

Chapter 4. ALRTVVSC Security File Report (VSE) 4-5

Heading Description

Field type Each fieldname is defined as a particular field type. By definition, type 00000000 information is present in each input record. Following the type 00000000 common segment information, ALRTVVSC records will contain one subordinate type of field information: type 01000000 to 0C10x000, containing information as indicated by the RECTYPE field.

Default label-n Default label information is positioned in the output report, if requested, at the top of each page of output. Up to three labels can be specified for each field; they will be placed above the report column reserved for the fieldname.

Occurrences: variable Indicates that the field is defined within a variable-occurrence segment. This fieldname, if included on any FIELD or FIELDS command statement, will generate a report detail line for each occurrence of the information in the record.

Belongs to group This indicates a higher level group fieldname that can be included on any SUBTITLE, FIELD, or FIELDS command statement to display the data represented by this fieldname.

Input data length Represents the defined length of the data in the input record corresponding to the fieldname. If the length is indicated as variable, then the length of the data field has no pre-defined length, and the amount of data present is defined in each individual input record.

Input data format Indicates that the data in the input record is in one of the following formats:

X Hexadecimal or binary C Printable characters P Packed-decimal

Default output length This numeric value is the default value used to determine the number of character positions to be reserved in the output report detail line for the column in which the data will be positioned. This value can be increased or decreased by the use of the LENGTH keyword on a FIELD

command statement.

Default output format One of the following output formats is assigned by default for each fieldname; it determines how the data will appear in the output report:

C Character. The input data is simply moved from the input record to the report detail line. Each non-printable character is translated to a period (.).

X Hexadecimal. Each byte or character in the input field is translated to its two-character hexadecimal equivalent.

Z Zoned-decimal. The input data field, up to a length of four, is treated as a binary number and converted to its decimal equivalent. By default, zoned-decimal formatted output fields are zero-suppressed and right-justified in the report column. Users can override the field justification value by using the JUSTIFY keyword on the FIELD command statement. Zero-suppression can be overridden by specifying NOTRUNC on the FIELD or SUBTITLE command statement.

T Transformed. The input data field is replaced by an alternate value, either as set forth in the transformation table shown, or as determined by some other programmed transformation algorithm, such as is performed on the BIM-ALERT/VSE RECTYPE field.

Users can override the field output format value by using the FORMAT keyword on the FIELD command statement.

Input Record Description Introduction

4-6 Auditing and Report Writing Guide

Fieldname List Common Segment Fields

Chapter 4. ALRTVVSC Security File Report (VSE) 4-7

Fieldname List

Common Segment Fields

The following fieldnames can be included in any ALRTVVSC report SUBTITLE, FIELD,

or FIELDS command statements. These fieldnames are contained in the common segment of all input records and, if specified, will be printed on all detail lines.

Field Description

KEY Input record key.

Field type: 00000000 - Common segment information Default label-1: RECORD KEY Input data length: 68 Input data format: Hexadecimal (X) Default output data length: 136 Default output data format: Hexadecimal (X)

RECLEN Input record length.

Field type: 00000000 - Common segment information Default label-1: INPUT Default label-2: RECORD Default label-3: LENGTH Input data length: 2 Input data format: Hexadecimal (X) Default output data length: 6 Default output data format: Zoned-decimal (Z)

DSNAME Name of input file dataset from which the report was created. This is especially useful when you have more than one security file.

Field type: 00000000 - Common segment information Default label-1: INPUT DSNAME Input data length: 44 Input data format: Character (C) Default output data length: 44 Default output data format: Character (C)

(continued)

Common Segment Fields Fieldname List

4-8 Auditing and Report Writing Guide

Field Description

RECTYPE Input record type, which indicates what type of security information is contained in the security file record.

Field type: 00000000 - Common segment information Default label-1: RECORD Default label-2: TYPE Input data length: 2 Input data format: Character (C) Default output length: 13 Default output format: Transformed (T)

C'10'...........T'USER '

C'30'...........T'JOBMASK '

C'35'...........T'SPEC-SECID '

C'40'...........T'SECID '

C'50'...........T'DASD '

C'55'...........T'TAPE '

C'60'...........T'RESOURCE '

C'70'...........T'REFERENCE '

C'C0'...........T'NODENAME '

C'C1'...........T'REMOTE SUBMIT'

TABLENUM Logical table number to which this record belongs.

Field type: 00000000 - Common segment information Default label-1: TBL Default label-2: NUM Input data length: 2 Input data format: Character (C) Default output data length: 2 Default output data format: Character (C)

SERNUM Record serial number.

Field type: 00000000 - Common segment information Default label-1: RECORD Default label-2: SERIAL Default label-3: NUMBER Input data length: 4 Input data format: Hexadecimal (X) Default output data length: 8 Default output data format: Zoned-decimal (Z)

(continued)

Fieldname List Common Segment Fields

Chapter 4. ALRTVVSC Security File Report (VSE) 4-9

Field Description

FILECTL File control number, used internally by BIM-ALERT/VSE.

Field type: 00000000 - Common segment information Default label-1: FILE Default label-2: CONTROL Default label-3: NUMBER Input data length: 4 Input data format: Hexadecimal (X) Default output data length: 8 Default output data format: Zoned-decimal (Z)

RECSTAT Status of this record.

Field type: 00000000 - Common segment information Default label-1: RECORD Default label-2: STATUS Input data length: 1 Input data format: Hexadecimal (C) Default output data length: 8 Default output data format: Transformed (T)

C'A'............T'ACTIVE '

C'D'............T'DISABLED'

C'M'............T'MONITOR '

C'W'............T'WTO/LOG '

C'L'............T'LOG '

C'T'............T'AUDIT '

RECFLAG Record flag.

Field type: 00000000 - Common segment information Default label-1: RECORD Default label-2: FLAG Input data length: 1 Input data format: Hexadecimal (X) Default output data length: 8 Default output data format: Transformed (T)

X'80'...........T'NO PASS '

X'40'...........T'INV PWD '

X'20'...........T'INV MEM '

X'00'...........T'NORMAL '

COMMENTS Record descriptive information.

Field type: 00000000 - Common segment information Default label-1: COMMENTS Input data length: 30 Input data format: Character (C) Default output data length: 30 Default output data format: Character (C)

(continued)

Common Segment Fields Fieldname List

4-10 Auditing and Report Writing Guide

Field Description

OPIDLUPD Operator who last updated record.

Field type: 00000000 - Common segment information Default label-1: OPID Default label-2: LAST Default label-3: UPDATE Input data length: 3 Input data format: Character (C) Default output data length: 3 Default output data format: Character (C)

INFOTYPE Information type, which describes the type of information contained in the field or record.

Field type: 00000000 - Common segment information Default label-1: INFO Default label-2: TYPE Input data length: 4 Input data format: Hexadecimal (X) Default output length: 23 Default output format: Transformed (T)

X'00000000'.....T'COMMON SEGMENT INFO '

X'01000000'.....T'USER INFO '

X'01010000'.....T'USER TASKID BUILD '

X'01020000'.....T'USER TASKID BUILD '

X'01030000'.....T'USER TASKID BUILD '

X'03000000'.....T'JOBMASK INFO '

X'04000000'.....T'SECID INFO '

X'04010000'.....T'SECID JOB ENTRY SOURCE '

X'04020000'.....T'SECID JOB ENTRY MODE '

X'04030000'.....T'SECID JOB ENTRY RJENODE '

X'04040000'.....T'SECID JOB ENTRY RJEUID '

X'05000000'.....T'DASD/TAPE DATASET INFO '

X'06000000'.....T'RESOURCE INFO '

X'07000000'.....T'REFERENCE INFO '

X'C0000000'.....T'NODENAME INFO '

X'C1000000'.....T'REMOTE SUBMIT CLASS INFO'

X'C1010000'.....T'REMOTE SUBMIT SYSID INFO'

(continued)

Fieldname List Common Segment Fields

Chapter 4. ALRTVVSC Security File Report (VSE) 4-11

Field Description

SEQNUM Output detail line sequence number.

Field type: 00000000 - Common segment information Default label-1: none Input data length: 4 Input data format: Hexadecimal (X) - Binary fullword Default output length: 6 Default output format: Zoned-decimal (Z)

INRECNUM Physical input record sequence number, assigned by the ALRTVVSC I/O module when the input record is read.

Field type: 00000000 - Common segment information Default label-1: INPT Default label-2: RECD Default label-3: NMBR Input data length: 4 Input data format: Hexadecimal (X) - Binary fullword Default output length: 6 Default output format: Zoned-decimal (Z)

User Record Fields Fieldname List

4-12 Auditing and Report Writing Guide

User Record Fields

The following fieldnames can be included in any ALRTVVSC report SUBTITLE, FIELD,

or FIELDS command statements. These fieldnames are contained in the ALRTVVSC input file user records (RECTYPE EQ C'10', segment X'01000000'). These fields will be printed only on report detail lines with other user record and common segment fieldnames.

Field Description

JOBENFLD Job entry field for user validation.

Field type: 01000000 - User information Default label-1: JOB Default label-2: ENTRY Default label-3: FIELD Input data length: 1 Input data format: Hexadecimal(X) Default output length: 8 Default output format: Transformed (T)

X'10'.........T'JOBNAME '

X'20'.........T'POWERJOB'

X'30'.........T'USERNAME'

X'40'.........T'PASSWORD'

X'50'.........T'ACCT '

X'60'.........T'MODE '

X'70'.........T'RJENODE '

X'80'.........T'RJEUID '

X'90'.........T'SOURCE '

X'A0'.........T'USERNAME'

X'B0'.........T'PASSWORD'

X'00'.........T'UNKNOWN '

JOBENPOS Job entry field validation starting position.

Default label-1: JOB Default label-2: ENTRY Default label-2: POS Field type: 01000000 - User information Input data length: 1 Input data format: Hexadecimal (X) Default output length: 2 Default output format: Zoned-decimal (Z)

(continued)

Fieldname List User Record Fields

Chapter 4. ALRTVVSC Security File Report (VSE) 4-13

Field Description

JOBENLIT Job entry field validation compare value.

Default label-1: JOB Default label-2: ENTRY Default label-3: LITERAL Field type: 01000000 - User information Input data length: 16 Input data format: Character (P) Default output length: 16 Default output format: Character (C)

JOBENLLN Job entry field validation compare length.

Default label-1: J-E Default label-2: LIT Default label-3: LEN Field type: 01000000 - User information Input data length: 1 Input data format: Hexadecimal (X) Default output length: 2 Default output format: Zoned-decimal (Z)

JOBENMOD Job entry mode, which indicates where to get validation information.

Default label-1: JOB Default label-2: ENTRY Default label-3: MODE Field type: 01000000 - User information Input data length: 1 Input data format: Character (C) Default output length: 5 Default output format: Transformed (T)

C'P'.........T'POWER'

C'I'.........T'// ID'

JOBENACT Action to take on successful validation.

Default label-1: JOB Default label-2: ENTRY Default label-3: ACTION Field type: 01000000 - User information Input data length: 1 Input data format: Character (C) Default output length: 7 Default output format: Transformed (T)

C'*'.........T'NONE '

C'C'.........T'CANCEL '

C'W'.........T'WTO/LOG'

C'L'.........T'LOG '

(continued)

User Record Fields Fieldname List

4-14 Auditing and Report Writing Guide

Field Description

TSKIDFLD Task ID build parameters: fieldnames.

Default label-1: TASKID Default label-2: FIELD Field type: 01010000 - User information: task ID build Occurrences: Variable - up to eight lines of output can be generated if this fieldname is specified, representing each field contributing to the construction of the task ID. Input data length:1 Input data format: Hexadecimal (X) Default output length: 8 Default output format: Transformed (T)

X'10'.........T'JOBNAME '

X'20'.........T'POWERJOB'

X'30'.........T'USERNAME'

X'40'.........T'PASSWORD'

X'50'.........T'ACCT '

X'60'.........T'MODE '

X'70'.........T'RJENODE '

X'80'.........T'RJEUID '

X'90'.........T'SOURCE '

X'A0'.........T'USERNAME'

X'B0'.........T'PASSWORD'

X'00'.........T'UNKNOWN '

TSKIDFLP Task ID build parameters: position information. Default label-1: TASKID Default label-2: FIELD Default label-3: POS Field type: 01010000 - User information: task ID build Occurrences: Variable - up to eight lines of output can be generated if this fieldname is specified, representing each field contributing to the construction of the task ID. Input data length: 1 Input data format: Hexadecimal (X) Default output length: 2 Default output format: Zoned-decimal (Z)

(continued)

Fieldname List User Record Fields

Chapter 4. ALRTVVSC Security File Report (VSE) 4-15

Field Description

TSKIDFLL Task ID build parameters: length information.

Default label-1: TASKID Default label-2: FIELD Default label-3: LENGTH Field type: 01010000 - User information: task ID build Occurrences: Variable - up to eight lines of output can be generated if this fieldname is specified, representing each field contributing to the construction of the task ID. Input data length: 1 Input data format: Hexadecimal (X) Default output length: 2 Default output format: Zoned-decimal (Z)

TSKIDLIT Task ID literal.

Default label-1: TASKID Default label-2: LITERAL Field type: 01000000 - User information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

Jobmask Record Fields Fieldname List

4-16 Auditing and Report Writing Guide

Jobmask Record Fields

The following fieldnames can be included in any ALRTVVSC report SUBTITLE, FIELD,

or FIELDS command statements. These fieldnames are contained in the ALRTVVSC input file jobmask records (RECTYPE C'30', segment X'03000000'). The fields will be printed only on report detail lines with other jobmask record and common segment fieldnames.

Field Description

JMSKSEQ Jobmask sequence number.

Default label-1: SEQ Default label-2: NUM Field type: 03000000 - Jobmask information Input data length: 4 Input data format: Hexadecimal (X) Default output length: 8 Default output format: Zoned-decimal (Z)

JMSKACT Action for this jobmask rule.

Default label-1: ACTION Field type: 03000000 - Jobmask information Input data length: 1 Input data format: Character (C) Default output length: 7 Default output format: Transformed (T)

C'*'.........T'NONE '

C'C'.........T'CANCEL '

C'W'.........T'WTO/LOG'

C'L'.........T'LOG '

JMSKMASK Mask to use for validation.

Default label-1: JOBMASK Default label-2: MASK Field type: 03000000 - Jobmask information Input data length: 8 Input data format: Character (C) Default output length: 16 Default output format: Character (C)

Fieldname List Jobmask Record Fields

Chapter 4. ALRTVVSC Security File Report (VSE) 4-17

JMSKSEC SECID to assign for this task ID.

Default label-1: JOBMASK Default label-2: BUILD Default label-3: INFO Field type: 03000000 - Jobmask information Input data length: 8 Input data format: Character (C) Default output length: 16 Default output format: Character (C)

SECID Record Fields Fieldname List

4-18 Auditing and Report Writing Guide

SECID Record Fields

The following fieldnames can be included in any ALRTVVSC report SUBTITLE, FIELD,

or FIELDS command statements. These fieldnames are contained in the ALRTVVSC input file SECID records (RECTYPE EQ C'35' or '40', segment X'04000000'). These fields will be printed only on report detail lines with other SECID record and common segment fieldnames.

Field Description

SECIDMSK

SECID this rule defines.

Default label-1: SECID Default label-2: MASK Field type: 04000000 - SECID information Input data length: 8 Input data format: Character (C) Default output length: 16 Default output format: Character (C)

SECIDSEQ Sequence number of this SECID rule, used internally for sorting purposes.

Default label-1: SEQ Default label-2: NUM Field type: 04000000 - SECID information Input data length: 4 Input data format: Hexadecimal (X) Default output length: 8 Default output format: Zoned-decimal (Z)

SECIDPWM Password mode for this SECID.

Default label-1: PSWD Default label-2: MODE Field type: 04000000 - SECID information Input data length: 1 Input data format: Character (C) Default output length: 5 Default output format: Transformed (T)

C'P'............T'POWER'

C'I'............T'// ID'

(continued)

Fieldname List SECID Record Fields

Chapter 4. ALRTVVSC Security File Report (VSE) 4-19

Field Description

SECIDSRC Valid job sources for this SECID.

Default label-1: JOB Default label-2: ENTRY Default label-3: SOURCE Field type: 04010000 - SECID source information Occurrences: Variable - multiple lines of output can be generated if this fieldname is specified, representing each job entry source defined for this SECID. Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

SECIDMOD Valid modes for this SECID.

Default label-1: JOB Default label-2: ENTRY Default label-3: MODE Field type: 04020000 - SECID mode information Occurrences: Variable - multiple lines of output can be generated if this fieldname is specified, representing each job entry mode defined for this SECID. Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

SECIDNOD Valid RJENODEs for this SECID.

Default label-1: JOB Default label-2: ENTRY Default label-3: RJENODE Occurrences: Variable Field type: 04030000 - SECID RJENODE information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

DASD and Tape Dataset Record Fields Fieldname List

4-20 Auditing and Report Writing Guide

SECIDUID Valid RJEUIDs for this SECID.

Default label-1: JOB Default label-2: ENTRY Default label-3: RJEUID Occurrences: Variable Field type: 04040000 - SECID RJEUID information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

DASD and Tape Dataset Record Fields

The following fieldnames can be included in any ALRTVVSC report SUBTITLE, FIELD,

or FIELDS command statements. These fieldnames are contained in the ALRTVVSC input file location records (RECTYPE EQ C'50' or C'55', segment X'05000000'). These fields will be printed only on report detail lines with other dataset record and common segment fieldnames.

Field Description

DASDDSN DASD dataset name.

Default label-1: DASD Default label-2: DATASET Default label-3: NAME Field type: 05000000 - DASD or tape dataset information Input data length: 44 Input data format: Character (C) Default output length: 44 Default output format: Character (C)

DASDVOL VOLSER on which dataset resides.

Default label-1: DASD Default label-2: DATASET Default label-3: VOLSER Field type: 05000000 - DASD or tape dataset information Input data length: 6 Input data format: Character (C) Default output length: 6 Default output format: Character (C)

Fieldname List DASD and Tape Dataset Record Fields

Chapter 4. ALRTVVSC Security File Report (VSE) 4-21

DASDSRK SECID reference record key, used internally to associate SECIDs with resources.

Default label-1: DASD Default label-2: SECID Default label-3: REFKEY Field type: 05000000 - DASD or tape dataset information Input data length: 4 Input data format: Hexadecimal (X) Default output length: 8 Default output format: Zoned-decimal (Z)

(continued)

DASD and Tape Dataset Record Fields Fieldname List

4-22 Auditing and Report Writing Guide

Field Description

DASDAUP DASD authorized program name.

Default label-1: DASD Default label-2: AUTH Default label-3: PROGRAM Field type: 05000000 - DASD or tape dataset information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

DASDSEC SECID to which this rule applies.

Default label-1: DASD Default label-2: SECID Field type: 05000000 - DASD or tape dataset information Input data length: 4 Input data format: Hexadecimal (X) Default output length: 8 Default output format: Transformed (T)

DASDACR Action code for read access.

Default label-1: DASD Default label-1: READ Default label-1: ACTION Field type: 05000000 - DASD or tape dataset information Input data length: 1 Input data format: Character (C) Default output length: 7 Default output format: Transformed (T)

C'*'.........T'NONE '

C'C'.........T'CANCEL '

C'W'.........T'WTO/LOG'

C'L'.........T'LOG '

(continued)

Fieldname List DASD and Tape Dataset Record Fields

Chapter 4. ALRTVVSC Security File Report (VSE) 4-23

Field Description

DASDACU Action code for update access.

Default label-1: DASD Default label-2: UPDATE Default label-3: ACTION Field type: 05000000 - DASD or tape dataset information Input data length: 1 Input data format: Character (C) Default output length: 7 Default output format: Transformed (T)

C'*'.........T'NONE '

C'C'.........T'CANCEL '

C'W'.........T'WTO/LOG'

C'L'.........T'LOG '

DASDACA Action code for alter access.

Default label-1: DASD Default label-2: ALTER Default label-3: ACTION Field type: 05000000 - DASD or tape dataset information Input data length: 1 Input data format: Character (C) Default output length: 7 Default output format: Transformed (T)

C'*'.........T'NONE '

C'C'.........T'CANCEL '

C'W'.........T'WTO/LOG'

C'L'.........T'LOG '

TAPEDSN Tape dataset name.

Default label-1: TAPE Default label-2: DATASET Default label-3: NAME Field type: 05000000 - DASD or tape dataset information Input data length: 44 Input data format: Character (C) Default output length: 44 Default output format: Character (C)

(continued)

DASD and Tape Dataset Record Fields Fieldname List

4-24 Auditing and Report Writing Guide

Field Description

TAPEVOL Tape dataset volume serial number.

Default label-1: TAPE Default label-2: DATASET Default label-3: VOLSER Field type: 05000000 - DASD or tape dataset information Input data length: 6 Input data format: Character (C) Default output length: 6 Default output format: Character (C)

TAPESRK SECID reference record key, used internally to associate SECIDs with resources.

Default label-1: TAPE Default label-2: SECID Default label-3: REFKEY Field type: 05000000 - DASD or tape dataset information Input data length: 4 Input data format: Hexadecimal (X) Default output length: 8 Default output format: Zoned-decimal (Z)

TAPESEC Tape SECID.

Default label-1: TAPE Default label-2: SECID Field type: 05000000 - DASD or tape dataset information Input data length: 4 Input data format: Character (C) Default output length: 8 Default output format: Transformed (T)

TAPEAUP Tape authorized program name.

Default label-1: TAPE Default label-2: AUTH Default label-3: PROGRAM Field type: 05000000 - DASD or tape dataset information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

(continued)

Fieldname List DASD and Tape Dataset Record Fields

Chapter 4. ALRTVVSC Security File Report (VSE) 4-25

Field Description

TAPEACR Action code for read access.

Default label-1: TAPE Default label-2: READ Default label-3: ACTION Field type: 05000000 - DASD or tape dataset information Input data length: 1 Input data format: Character (C) Default output length: 7 Default output format: Transformed (T)

C'*'.........T'NONE '

C'C'.........T'CANCEL '

C'W'.........T'WTO/LOG'

C'L'.........T'LOG '

TAPEACA Action code for alter access.

Default label-1: TAPE Default label-2: ALTER Default label-3: ACTION Field type: 05000000 - DASD or tape dataset information Input data length: 1 Input data format: Character (C) Default output length: 7 Default output format: Transformed (T)

C'*'.........T'NONE '

C'C'.........T'CANCEL '

C'W'.........T'WTO/LOG'

C'L'.........T'LOG '

Resource Record Fields Fieldname List

4-26 Auditing and Report Writing Guide

Resource Record Fields

The following fieldnames can be included in any ALRTVVSC report SUBTITLE, FIELD,

or FIELDS command statements. These fieldnames are contained in the ALRTVVSC input file resource records (RECTYPE EQ C'60', segment X'06000000'). These fields will be printed only on report detail lines with other resource record and common segment fieldnames.

Field Description

RSRCCLS Resource class.

Default label-1: RESOURCE Default label-2: CLASS Field type: 06000000 - Resource information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

RSRCNAM Resource name.

Default label-1: RESOURCE Default label-2: NAME Field type: 06000000 - Resource information Input data length: 52 Input data format: Character (C) Default output length: 52 Default output format: Character (C)

RSRCCLB Resource controlled library (YES or NO).

Default label-1: RES Default label-2: CTL Default label-3: LIB Field type: 06000000 - Resource information Input data length: 1 Input data format: Character (C) Default output length: 3 Default output format: Transformed (T)

C'Y'.........T'YES'

C'N'.........T'NO '

(continued)

Fieldname List Resource Record Fields

Chapter 4. ALRTVVSC Security File Report (VSE) 4-27

Field Description

RSRCSRK SECID reference record key, used internally to associate SECIDs with resources.

Default label-1: RESOURCE Default label-2: REFKEY Field type: 06000000 - Resource information Input data length: 4 Input data format: Hexadecimal (X) Default output length: 8 Default output format: Zoned-decimal (Z)

RSRCSEC Resource SECID.

Default label-1: RESOURCE Default label-2: SECID Field type: 06000000 - Resource information Input data length: 4 Input data format: Character (C) Default output length: 8 Default output format: Transformed (T)

RSRCAUP Resource authorized program name.

Default label-1: RESOURCE Default label-2: AUTH Default label-3: PROGRAM Field type: 06000000 - Resource information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

RSRCACE Action code for execute access.

Default label-1: RESOURCE Default label-2: EXEC Default label-3: ACTION Field type: 06000000 - Resource information Input data length: 1 Input data format: Character (C) Default output length: 7 Default output format: Transformed (T)

C'*'.........T'NONE '

C'C'.........T'CANCEL '

C'W'.........T'WTO/LOG'

C'L'.........T'LOG '

(continued)

Resource Record Fields Fieldname List

4-28 Auditing and Report Writing Guide

Field Description

RSRCACR Action code for read access.

Default label-1: RESOURCE Default label-2: READ Default label-3: ACTION Field type: 06000000 - Resource information Input data length: 1 Input data format: Character (C) Default output length: 7 Default output format: Transformed (T)

C'*'.........T'NONE '

C'C'.........T'CANCEL '

C'W'.........T'WTO/LOG'

C'L'.........T'LOG '

RSRCACU Action code for update access.

Default label-1: RESOURCE Default label-2: UPDATE Default label-3: ACTION Field type: 06000000 - Resource information Input data length: 1 Input data format: Character (C) Default output length: 7 Default output format: Transformed (T)

C'*'.........T'NONE '

C'C'.........T'CANCEL '

C'W'.........T'WTO/LOG'

C'L'.........T'LOG '

RSRCACA Action code for alter access.

Default label-1: RESOURCE Default label-2: ALTER Default label-3: ACTION Field type: 06000000 - Resource information Input data length: 1 Input data format: Character (C) Default output length: 7 Default output format: Transformed (T)

C'*'.........T'NONE '

C'C'.........T'CANCEL '

C'W'.........T'WTO/LOG'

C'L'.........T'LOG '

Fieldname List Reference Record Field

Chapter 4. ALRTVVSC Security File Report (VSE) 4-29

Reference Record Field

The following fieldname can be included in any ALRTVVSC report SUBTITLE, FIELD,

or FIELDS command statement. This fieldname is contained in the ALRTVVSC input SECID cross-reference records (RECTYPE EQ C'70', segment X'07000000'). This field will be printed only on report detail lines with other cross-reference record and common segment fieldnames.

Field Description

REFSECID SECID associated with this resource.

Belongs to group: REF Default label-1: SECID Field type: 07000000 - Reference information Input data length: 16 Input data format: Character (C) Default output length: 16 Default output format: Character (C)

Node Information Fields Fieldname List

4-30 Auditing and Report Writing Guide

Node Information Fields

The following fieldnames can be included in any ALRTVVSC report SUBTITLE, FIELD,

or FIELDS command statement. These fieldnames are contained in the ALRTVVSC input node name information records (RECTYPE EQ C'C0', segment X'C0000000'). These fields will be printed only on report detail lines with other node information record and common segment fieldnames.

Field Description

NODENAME Node name.

Default label-1: NODE Default label-2: NAME Field type: C0000000 - Node name information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

OPSYSCOD Operating system code.

Default label-1: OP Default label-2: SYS Default label-3: CODE Field type: C0000000 - Node name information Input data length: 1 Input data format: Character (C) Default output length: 1 Default output format: Character (C)

ORGTARGT Origin/Target/Both.

Default label-1: ORIGIN Default label-2: OR Default label-3: TARGET Field type: C0000000 - Node name information Input data length: 1 Input data format: Character (C) Default output length: 1 Default output format: Character (C)

(continued)

Fieldname List Node Information Fields

Chapter 4. ALRTVVSC Security File Report (VSE) 4-31

Field Description

SECDSYS Secured system (Y or N).

Default label-1: SEC Default label-2: SYS Field type: C0000000 - Node name information Input data length: 1 Input data format: Character (C) Default output length: 3 Default output format: Transformed (T)

C'Y'.........T'YES'

C'N'.........T'NO '

Remote Submittal Information Fields Fieldname List

4-32 Auditing and Report Writing Guide

Remote Submittal Information Fields

The following fieldnames can be included in any ALRTVVSC report SUBTITLE, FIELD,

or FIELDS command statement. These fieldnames are contained in the ALRTVVSC input remote submittal information records (RECTYPE EQ C'C1', segment X'C1000000'). These fields will be printed only on report detail lines with other remote submittal information record and common segment fieldnames.

Field Description

REMCLASS Target class.

Default label-1: TARGET Default label-2: CLASS Field type: C1000000 - Remote submit class information Input data length: 1 Input data format: Character (C) Default output length: 1 Default output format: Character (C)

REMCLSID Type of ID information.

Default label-1: TYPE Default label-2: OF Default label-2: ID Field type: C1000000 - Remote submit class information Input data length: 1 Input data format: Character (C) Default output length: 6 Default output format: Transformed (T)

C'$'.........T'$$ JOB'

C'/'.........T'// ID '

C'N'.........T'NONE '

REMSYSID Target SYSID.

Default label-1: TARGET Default label-2: SYSID Field type: C1000000 - Remote submit class information Input data length: 1 Input data format: Character (C) Default output length: 1 Default output format: Character (C)

(continued)

Fieldname List Remote Submittal Information Fields

Chapter 4. ALRTVVSC Security File Report (VSE) 4-33

Field Description

REMSIDID Type of ID information.

Default label-1: TYPE Default label-2: OF Default label-2: ID Field type: C1000000 - Remote submit class information Input data length: 1 Input data format: Character (C) Default output length: 6 Default output format: Transformed (T)

C'$'.........T'$$ JOB'

C'/'.........T'// ID '

C'N'.........T'NONE '

XPCC Submittal Information Fields Fieldname List

4-34 Auditing and Report Writing Guide

XPCC Submittal Information Fields

The following fieldnames can be included in any ALRTVVSC report SUBTITLE, FIELD,

or FIELDS command statement. These fieldnames are contained in the ALRTVVSC input node name information records (RECTYPE EQ C'E0', segment X'E0000000'). These fields will be printed only on report detail lines with other XPCC submittal information record and common segment fieldnames.

Field Description

XPCCAPNM XPCC application name.

Default label-1: XPCC Default label-2: APPLICATION Default label-3: NAME Field type: E0000000 - XPCC submittal information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

XPCCTSNM XPCC task name.

Default label-1: XPCC Default label-2: TASK Default label-3: NAME Field type: E0000000 - XPCC submittal information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

XPCCREQS XPCC requirements.

Default label-1: XPCC Default label-2: REQUIREMENTS Field type: E0000000 - XPCC submittal information Input data length: 1 Input data format: Hexadecimal (X) Default output length: 16 Default output format: Character (C)

Sample ALRTVVSC Report Introduction

Chapter 4. ALRTVVSC Security File Report (VSE) 4-35

Sample ALRTVVSC Report

Introduction

The following sample reports illustrate ways to use the BIM-ALERT/VSE batch report writer to produce reports similar to the predefined batch reports distributed with BIM-ALERT/VSE and detailed in Appendix A, "Additional BIM-ALERT/VSE Reports."

Input statememts of the sample ALRTVVSC reports that follow can be found in the BIM-ALERT installation library in member ALRTVVSC.J.

Logical Table Ruleset Report

The following sample report input illustrates how to print all the record information concerning a particular logical table ID contained in the BIM-ALERT/VSE security file. Notice that multiple run statements are included; changing the FIELD or FIELDS

command statements between the RUN commands results in the different reports shown in the sample output that follows the report input.

// EXEC ALRTVREP,SIZE=256K

TITLES 'BIM-ALERT/VSE 5.1A' -

' ' -

'*** LOGICAL TABLE RESOURCE REPORT ***'

REPORT ALRTVVSC NOTRAILER

SUBTITLE LITERAL('****************') LINE(2) JUSTIFY(C)

SUBTITLE LITERAL('* *') LINE(3) JUSTIFY(C)

SUBTITLE TABLENUM LABEL('TABLE-ID:') LINE(3) JUSTIFY(C)

SUBTITLE LITERAL('****************') LINE(4) JUSTIFY(C)

SUBTITLE LITERAL('USER RECORDS') LINE(5) JUSTIFY(C)

FIELDS JOBENFLD JOBENPOS JOBENLIT -

JOBENLLN JOBENMOD RECSTAT -

JOBENACT TSKIDFLD TSKIDFLP TSKIDFLL COMMENTS

SELECT IF TABLENUM EQ C'B1' AND RECTYPE EQ C'10'

RUN

OPTIONS LINELEN(85)

REPORT ALRTVVSC NOHDRPAGE NOTRAILER

SUBTITLE LITERAL('****************') LINE(2) JUSTIFY(C)

SUBTITLE LITERAL('* *') LINE(3) JUSTIFY(C)

SUBTITLE TABLENUM LABEL('TABLE-ID:') LINE(3) JUSTIFY(C)

SUBTITLE LITERAL('****************') LINE(4) JUSTIFY(C)

SUBTITLE LITERAL('JOBMASK RECORDS') LINE(5) JUSTIFY(C)

FIELDS JMSKMASK JMSKSEC JMSKACT COMMENTS

SELECT IF TABLENUM EQ C'B1' AND RECTYPE EQ C'30'

RUN

(continued)

Description

Input

Logical Table Ruleset Report Sample ALRTVVSC Report

4-36 Auditing and Report Writing Guide

OPTIONS LINELEN(133)

REPORT ALRTVVSC NOHDRPAGE NOTRAILER

SUBTITLE LITERAL('****************') LINE(2) JUSTIFY(C)

SUBTITLE LITERAL('* *') LINE(3) JUSTIFY(C)

SUBTITLE TABLENUM LABEL('TABLE-ID:') LINE(3) JUSTIFY(C)

SUBTITLE LITERAL('****************') LINE(4) JUSTIFY(C)

SUBTITLE LITERAL('SECID RECORDS') LINE(5) JUSTIFY(C)

FIELDS SECIDMSK SECIDSEQ SECIDPWM SECIDSRC SECIDMOD SECIDNOD -

SECIDUID RECTYPE

SELECT IF TABLENUM EQ C'B1' AND -

(RECTYPE EQ C'35' OR RECTYPE EQ C'40')

RUN

REPORT ALRTVVSC NOHDRPAGE NOTRAILER

SUBTITLE LITERAL('****************') LINE(2) JUSTIFY(C)

SUBTITLE LITERAL('* *') LINE(3) JUSTIFY(C)

SUBTITLE TABLENUM LABEL('TABLE-ID:') LINE(3) JUSTIFY(C)

SUBTITLE LITERAL('****************') LINE(4) JUSTIFY(C)

SUBTITLE LITERAL('DASD DATASET RECORDS') LINE(5) JUSTIFY(C)

FIELDS DASDDSN DASDSEC DASDACR DASDACU DASDACW DASDACA

SELECT IF TABLENUM EQ C'B1' AND RECTYPE EQ C'50'

RUN

REPORT ALRTVVSC NOHDRPAGE NOTRAILER

SUBTITLE LITERAL('****************') LINE(2) JUSTIFY(C)

SUBTITLE LITERAL('* *') LINE(3) JUSTIFY(C)

SUBTITLE TABLENUM LABEL('TABLE-ID:') LINE(3) JUSTIFY(C)

SUBTITLE LITERAL('****************') LINE(4) JUSTIFY(C)

SUBTITLE LITERAL('TAPE DATASET RECORDS') LINE(5) JUSTIFY(C)

FIELDS TAPEDSN TAPESEC TAPEACR TAPEACU TAPEACW TAPEACA

SELECT IF TABLENUM EQ C'B1' AND RECTYPE EQ C'55'

RUN

REPORT ALRTVVSC NOHDRPAGE NOTRAILER

SUBTITLE LITERAL('****************') LINE(2) JUSTIFY(C)

SUBTITLE LITERAL('* *') LINE(3) JUSTIFY(C)

SUBTITLE TABLENUM LABEL('TABLE-ID:') LINE(3) JUSTIFY(C)

SUBTITLE LITERAL('****************') LINE(4) JUSTIFY(C)

SUBTITLE LITERAL('RESOURCE RECORDS') LINE(5) JUSTIFY(C)

FIELDS RSRCCLS RSRCNAM RSRCSEC RSRCACE RSRCACR RSRCACU RSRCACA

SELECT IF TABLENUM EQ C'B1' AND RECTYPE EQ C'60'

RUN

/*

Sample ALRTVVSC Report Logical Table Ruleset Report

Chapter 4. ALRTVVSC Security File Report (VSE) 4-37

DATE: 01/25/2000 13:52:40 PAGE: 000001

BIM-ALERT/VSE 5.1A

*** LOGICAL TABLE RESOURCE REPORT ***

****************

* TABLE-ID: B1 *

****************

USER RECORDS

JOB JOB JOB J-E JOB JOB TASKID TASKID

ENTRY ENTRY ENTRY LIT ENTRY RECORD ENTRY TASKID FIELD FIELD

FIELD POS LITERAL LEN MODE STATUS ACTION FIELD POS LENGTH COMMENTS

----- ----- ------- --- ----- ------ ------ ------ ------ ------ --------

JOBNAME 3 ASI 3 POWER ACTIVE NONE JOBNAME 1 5 ASI SECURITY__________________

DATE: 01/25/2000 13:52:43 PAGE: 000001

BIM-ALERT/VSE 5.1A

*** LOGICAL TABLE RESOURCE REPORT ***

****************

* TABLE-ID: B1 *

****************

JOBMASK RECORDS

JOBMASK

JOBMASK BUILD

MASK PARMS ACTION COMMENTS

------- ------- ------ --------

BGASI ASIBG NONE SECID FOR BG PARTITION

F*ASI ASISTAT NONE SECID FOR STATIC PARTITIONS

**ASI ASIDYNC NONE SECID FOR DYNAMIC PARTITIONS

DATE: 01/25/2000 13:52:45 PAGE: 000001

BIM-ALERT/VSE 5.1A

*** LOGICAL TABLE RESOURCE REPORT ***

****************

* TABLE-ID: B1 *

****************

SECID RECORDS

JOB JOB JOB JOB

SECID SEQ PSWD ENTRY ENTRY ENTRY ENTRY RECORD

MASK NUM MODE SOURCE MODE RJENODE RJEUID TYPE

----- --- ---- ------ ----- ------- ------ ------

DEVELOP 2 // ID * . . . SPEC-SECID

DEVELOP 2 // ID . * . . SPEC-SECID

DEVELOP 2 // ID . . * . SPEC-SECID

DEVELOP 2 // ID . . . * SPEC-SECID

OPERATNS 3 // ID * . . . SPEC-SECID

OPERATNS 3 // ID . * . . SPEC-SECID

OPERATNS 3 // ID . . * . SPEC-SECID

OPERATNS 3 // ID . . . * SPEC-SECID

SECADMIN 0 // ID * . . . SPEC-SECID

SECADMIN 0 // ID . * . . SPEC-SECID

SECADMIN 0 // ID . . * . SPEC-SECID

SECADMIN 0 // ID . . . * SPEC-SECID

ASIBG 0 // ID * . . . SECID

ASIBG 0 // ID . ASI . . SECID

ASIBG 0 // ID . . * . SECID

ASIBG 0 // ID . . . * SECID

ASIDYNC 8192 // ID * . . . SECID

ASIDYNC 8192 // ID . ASI . . SECID

ASIDYNC 8192 // ID . . * . SECID

ASIDYNC 8192 // ID . . . * SECID

ASISTAT 4096 // ID * . . . SECID

ASISTAT 4096 // ID . ASI . . SECID

ASISTAT 4096 // ID . . * . SECID

ASISTAT 4096 // ID . . . * SECID

PROGRAMR 16384 // ID * . . . SECID

PROGRAMR 16384 // ID . * . . SECID

PROGRAMR 16384 // ID . . * . SECID

PROGRAMR 16384 // ID . . . * SECID

(continued)

Output

Logical Table Ruleset Report Sample ALRTVVSC Report

4-38 Auditing and Report Writing Guide

DATE: 01/25/2000 13:52:46 PAGE: 000001

BIM-ALERT/VSE 5.1A

*** LOGICAL TABLE RESOURCE REPORT ***

****************

* TABLE-ID: B1 *

****************

DASD DATASET RECORDS

DASD DASD DASD DASD DASD

DATASET DASD READ UPDATE WRITE ALTER

NAME SECID ACTION ACTION ACTION ACTION

------- ----- ------ ------ ------ ------

ALERT.AXPCTL.V51 SECADMIN WTO/LOG . . .

ALERT.AXPCTL.V51 SECADMIN . . . NONE

ALERT.AXPCTL.V51 = . . . NONE

ALERT=.= SECADMIN . . . NONE

ALERT=.= = . . . LOG

ALERT=.= OPERATNS . . . NONE

=.=.=.=.=.=.=.= SYSA= . . . NONE

=.=.=.=.=.=.=.= DEVELOP . . . NONE

=.=.=.=.=.=.=.= = NONE . . .

=.=.=.=.=.=.=.= = . . . NONE

DATE: 01/25/2000 13:52:48 PAGE: 000001

BIM-ALERT/VSE 5.1A

*** LOGICAL TABLE RESOURCE REPORT ***

****************

* TABLE-ID: B1 *

****************

TAPE DATASET RECORDS

TAPE TAPE TAPE TAPE TAPE

DATASET TAPE READ UPDATE WRITE ALTER

NAME SECID ACTION ACTION ACTION ACTION

------- ----- ------ ------ ------ ------

P*.= PROGRAMR NONE . . .

P*.= OPERATNS . . . NONE

P*.= SYSPROG . . . WTO/LOG

P*.= SYSPROG NONE . . .

DATE: 01/25/2000 13:52:50 PAGE: 000001

BIM-ALERT/VSE 5.1A

*** LOGICAL TABLE RESOURCE REPORT ***

****************

* TABLE-ID: B1 *

****************

RESOURCE RECORDS

RESOURCE RESOURCE RESOURCE RESOURCE

RESOURCE RESOURCE RESOURCE EXEC READ UPDATE ALTER

CLASS NAME SECID ACTION ACTION ACTION ACTION

-------- -------- -------- -------- -------- -------- --------

DITTO COMMAND:NOPEN.DVT = NONE . . .

LIBMEM BIMCOL.ALT50A.AXPBR14.PHASE SECADMIN LOG . . .

LIBMEM BIMCOL.ALT50A.AXPBR14.PHASE SECADMIN . . . NONE

LIBMEM BIMCOL.ALT50A.AXPBR14.PHASE = . NONE . .

LIBMEM BIMCOL.RULES50A.ALERTB1.PHASE = . . . WTO/LOG

LIBMEM COLSYS6.ALT493.AXPI1.PHASE SECADMIN . . . NONE

LIBMEM COLSYS6.ALT493.AXPI1.PHASE SECADMIN WTO/LOG . . .

LIBMEM COLSYS6.ALT493.AXPI1.PHASE ASI= NONE . . .

LIBMEM COLSYS6.ALT493.=.= SECADMIN . . . NONE

LIBMEM COLSYS6.ALT493.=.= OPERATNS NONE . . .

LIBMEM COLSYS6.ALT493.=.= = . . . WTO/LOG

LIBRARY VSE.BIM.COLUMBUS.LIBRARY:BIMCOL = . . . LOG

LIBRARY VSE.BIM.COLUMBUS.LIBRARY:BIMCOL = . NONE . .

LIBRARY VSE.BIM.COLUMBUS.LIB6:COLSYS6 = . . . NONE

LIBRARY VSE.PRD1.LIBRARY:PRD1 = . . . NONE

LIBRARY VSE.PRD2.LIBRARY:PRD2 = . . . NONE

LIBRARY VSE.SYSRES.LIBRARY:IJSYSRS = . . . NONE

SUBLIB BIMCOL.ALT50A = . . NONE .

SUBLIB BIMCOL.ALT50A = . . . WTO/LOG

SUBLIB COLSYS6.ALT493 SECADMIN . . . NONE

SUBLIB COLSYS6.ALT493 = . NONE . .

Sample ALRTVVSC Report Logical Table Ruleset Report

Chapter 4. ALRTVVSC Security File Report (VSE) 4-39

5-1

5

ALRTVCVI Violation Log File Report (CICS)

This chapter describes the ALRTVCVI violation log file report, which you can use to select and display information from the BIM-ALERT security log file.

Introduction .............................................................................................................. 5-2 General Information ............................................................................................. 5-2 Sample JCL .......................................................................................................... 5-3 Input Record Description ...................................................................................... 5-4 Field Information .................................................................................................. 5-5

Fieldname List .......................................................................................................... 5-7 Common Segment Fields ...................................................................................... 5-7 Initialization Record Field .................................................................................. 5-12 Sign-On and Sign-Off Record Fields................................................................... 5-13 Violation Record Fields ...................................................................................... 5-17

Sample ALRTVCVI Reports ................................................................................... 5-22 Introduction ........................................................................................................ 5-22 S1B190 Security Violation Report ...................................................................... 5-22 S1B192 Security Violation Report ...................................................................... 5-24

General Information Introduction

5-2 Auditing and Report Writing Guide

Introduction

General Information

BIM-ALERT/CICS initialization messages, sign-on and sign-off information, and security violation information contained in the BIM-ALERT log file is available for selection and display in the ALRTVCVI report type.

Dataset Description

BIM-ALERT security log file

This report type requires the BIM-ALERT security log file, or a VSAM copy of the file, as input. The security log file contains all the initialization, sign-on and sign-off, and violation information.

BIM-ALERT/CICS VSAM security file

This report type also requires access to the BIM-ALERT/CICS VSAM security file. The dataset must be specified on a // DLBL S1SCTY,... statement.

The phase ALRTVCVI is loaded by ALRTVREP when this report type is specified on a REPORT command statement. ALRTVCVI reads the input file and formats the data for the report.

Report Description

Input Datasets

I/O Module Name

Introduction Sample JCL

Chapter 5. ALRTVCVI Violation Log File Report (CICS) 5-3

Sample JCL

The following sample JCL can be used to execute any ALRTVCVI report:

// JOB ALRTVCVI BIM-ALERT/CICS log file report

// LIBDEF PHASE,SEARCH=.... <== optional

// DLBL IJSYSUC,'user.catalog.name',,VSAM <== optional

// DLBL SORTWK1,'SORTWK1.SYS001.WORKFILE',0000,VSAM, <== optional

DISP=(,DELETE),RECORDS=2000,RECSIZE=4096 <== optional

// DLBL S1SCTY,'ALERT.S1SCTY.V51',,VSAM

// DLBL AXPLOG1,'ALERT.AXPLOG1.V51',,VSAM

// EXEC ALRTVREP,SIZE=256K

.

.

/*

/&

Input Record Description Introduction

5-4 Auditing and Report Writing Guide

Input Record Description

Each BIM-ALERT log file record contains a 16-byte record key (segment type 00000000) and one of three subordinate segment types, determined by the contents of the RECTYPE and EVENTYPE fields.

The initialization information record contains a single BIM-ALERT/CICS initialization message. The fields defined within this segment are referred to as having a field type of '01000000'.

The BIM-ALERT/CICS sign-on record contains information relating to a single BIM-ALERT/CICS operator sign-on or sign-off event. The fields defined within this segment are referred to as having a field type of '88000000'.

The BIM-ALERT/CICS Security violation record contains information relating to a single BIM-ALERT/CICS security violation event. The fields defined within this segment are referred to as having a field type of '88000000'.

Introduction

BIM-ALERT/CICS

Initialization

Information

(Segment Type

01000000)

BIM-ALERT/CICS

Sign-On

Information

(Segment Type

88000000)

BIM-ALERT/CICS

Security Violation

Information

(Segment Type

88000000)

Introduction Field Information

Chapter 5. ALRTVCVI Violation Log File Report (CICS) 5-5

Field Information

Report output is comprised of one or more data fields extracted from an input dataset and formatted according to default or user specifications. Each data field is selected from a pre-defined list of ALRTVCVI fieldnames.

At report generation time, each fieldname specified is assigned a report column, positioned from left to right across the report page in the order in which the fieldnames were specified.

Data corresponding to each selected fieldname is located and extracted from the physical input record by the ALRTVCVI I/O module and moved to, or transformed into, the output report column, using either the default values described in the fieldname entries below or those specified by the user in a FIELD command statement.

The following information is provided for each ALRTVCVI fieldname (if applicable):

Heading Description

Group Field: YES Indicates that the fieldname being defined is a group fieldname containing several individual fieldnames within the group. The individual ALRTVCVI fieldnames are listed. If a group fieldname is specified on a FIELD or FIELDS command statement, input data

represented by all individual fieldnames within the group will be printed in a single output column.

If the individual fieldname is specified on a FIELD or FIELDS command statement, each fieldname is assigned its own column in the report output detail line.

Field type Defines which particular segment type the fieldname belongs to. A segment is a subordinate group or class of data within a record. In the case of the security log file, there are really three types of records: Initialization messages Sign-on and sign-off records Security violations

Each of these record types represents a segment. In addition, each of the three record types contains some data which is present in all types (for example, the record key). This common data is also considered a segment in addition to the three distinct record types.

By definition, then, segment type 00 information is present in every input record. Following the segment type 00 information, ALRTVCVI records will contain one subordinate segment type, 01-03, containing information as indicated by the RECTYPE field.

Default label-n: Defines the default label information which is positioned at the top of each column header on the output page, if requested. Up to three labels can be specified for each field, and will be placed above the report column reserved for the fieldname.

(continued)

Field Information Introduction

5-6 Auditing and Report Writing Guide

Heading Description

Belongs to group Indicates a higher level group fieldname which can be specified on a FIELD or FIELDS command statement to display the data represented by this fieldname.

Input data length Represents the defined length of the data in the input record corresponding to the fieldname.

Input data format Indicates that the data in the input record is in one of the following formats:

X Hexadecimal or binary C Printable characters P Packed-decimal

Default output length

This numeric value is the default value used to determine the number of character positions to be reserved in the output report detail line for the column in which the data will be positioned. This value can be overridden using the LENGTH keyword on a FIELD command statement.

Default output format

One of the following output formats is assigned by default for each fieldname; it determines how the data will appear in the output report:

C Character. The input data is simply moved from the input record to the report detail line. Each non-printable character is translated to a period (.).

X Hexadecimal. Each byte or character in the input field is translated to its two-character hexadecimal equivalent.

Z Zoned-decimal. The input data field, up to a length of four, is taken as a binary number and converted to its decimal equivalent. By default, zoned-decimal formatted output fields are zero-suppressed and right-justified in the report column. Users can override the field justification value by using the JUSTIFY keyword on the FIELD command statement. Zero-suppression can be overridden by specifying NOTRUNC on the FIELD or SUBTITLE command statement.

T Transformed. The input data field is replaced by an alternate value, either as set forth in the transformation table shown or as determined by some other programmed transformation algorithm.

Users can override the field output format value by using the FORMAT keyword on the FIELD command statement.

Fieldname List Common Segment Fields

Chapter 5. ALRTVCVI Violation Log File Report (CICS) 5-7

Fieldname List

Common Segment Fields

The following fieldnames can be included in any ALRTVCVI report FIELD, FIELDS, or SUBTITLE command statements. These fieldnames are contained in the common segment of all BIM-ALERT security log file input records and will be printed on all detail lines when appropriate.

Field Description

KEY Input record key.

Field type: 00000000 - Common segment information

Default label-1: RECORD KEY

Input data length: 1

Input data format: Hexadecimal (X) Default output data length: 2

Default output data format: Hexadecimal (X)

RECLEN Input record length.

Field type: 00000000 - Common segment information Default label-1: INPUT Default label-2: RECORD Default label-3: LENGTH Input data length: 2 Input data format: Hexadecimal (X) Default output data length: 6 Default output data format: Zoned decimal (Z)

DSNAME Input file dataset name.

Field type: 00000000 - Common segment information Default label-1: INPUT DSNAME Input data length: 44 Input data format: Character (C) Default output data length: 44 Default output data format: Character (C)

(continued)

Common Segment Fields Fieldname List

5-8 Auditing and Report Writing Guide

Field Description

SEQNUM Output detail line sequence number.

Field type: 00000000 - Common segment information Default label-1: none Input data length: 4 Input data format: Hexadecimal (X) - Binary fullword Default output length: 6 Default output format: Zoned decimal (Z)

INRECNUM Physical input record sequence number, assigned by the ALRTVCVI I/O module when the input record is read.

Field type: 00000000 - Common segment information Default label-1: INPT Default label-2: RECD Default label-3: NMBR Input data length: 4 Input data format: Hexadecimal (X) - Binary fullword Default output length: 6 Default output format: Zoned decimal (Z)

INFOTYPE Fieldname or record segment type, which indicates to which segment a fieldname belongs.

Field type: 00000000 - Common segment information Default label-1: INFO Default label-2: TYPE Input data length: 4 Input data format: Hexadecimal (X) - Binary fullword Default output length: 19 Default output format: Transformed (T)

X'00000000'.....T'COMMON SEGMENT INFO'

X'01000000'.....T'INITIALIZATION INFO'

X'88000000'.....T'ACCESS CHECK INFO'

X'88010000'.....T'ACCESS CHECK FIELD INFO'

X'FF000000'.....T'RECORD DUMP INFO'

VERSION The internal BIM-ALERT version number when the record was written.

Field type: 00000000 - Common segment information Default label-1: RECORD Default label-2: VERSION Input data length: 2 Input data format: Hexadecimal (X) Default output length: 4 Default output format: Hexadecimal (X)

(continued)

Fieldname List Common Segment Fields

Chapter 5. ALRTVCVI Violation Log File Report (CICS) 5-9

Field Description

RECTYPE Input record type, which indicates what type of segment information is contained in the record.

Field type: 00000000 - Common segment information Default label-1: RECORD Default label-2: TYPE Input data length: 1 Input data format: Character (C) Default output length: 10 Default output format: Transformed (T)

X'51'............T'FILE-CNTL'

X'58'............T'ACCESS-CHK'

X'59'............T'STATUS-CHG'

EVENTYPE A sub-category of RECTYPE X’58’ (ACCESS-CHK). It has 2 possible values as shown below.

Field type: 00000000 - Common segment information Default label-1: EVENT Default label-2: TYPE Input data length: 1 Input data format: Character (C) Default output length: 19 Default output format: Transformed (T)

X'02'............T'RESOURCE ACCESS CHK'

X'04'............T'SIGNON/SIGNOFF'

SYSDATE Creation date, part of the record key, representing the date the record was created.

Field type: 00000000 - Common segment information Default label-1: CREATION Default label-2: DATE Input data length: 4 Input data format: Hexadecimal (X) Default output length: 10 Default output format: Transformed (T) X'AFCB46BC'.......T'01/01/1998' (or user-defined DATEFORM)

SYSTIME System time, which represents the time the violation occurred.

Field type: 00000000 - Common segment information Default label-1: SYSTEM Default label-2: LOG Default label-3: TIME Input data length: 4 Input data format: Hexadecimal (X) Default output length: 5 Default output format: Transformed (T) X'0142739F'.....T' 14:27 ' (or user-defined TIMEFORM)

Common Segment Fields Fieldname List

5-10 Auditing and Report Writing Guide

(continued)

Fieldname List Common Segment Fields

Chapter 5. ALRTVCVI Violation Log File Report (CICS) 5-11

Field Description

SERIALNO BIM-ALERT serial number of log record.

Field type: 00000000 - Common segment information Default label-1: SERIAL Default label-2: NUMBER Input data length: 4 Input data format: Hexadecimal (X) Default output length: 6 Default output format: Zoned decimal (Z)

CPUID CPU-ID where log event occurred.

Field type: 00000000 - Common segment information Default label-1: CPU ID Input data length: 8 Input data format: Hexadecimal (X) Default output length: 16 Default output format: Hexadecimal (X)

Initialization Record Field Fieldname List

5-12 Auditing and Report Writing Guide

Initialization Record Field

The following fieldname can be included in any ALRTVCVI report FIELD, FIELDS, or SUBTITLE command statements. This fieldname is contained in the ALRTVCVI security log file initialization records (RECTYPE EQ X’59', segment X'01000000'). This field will be printed only on report detail lines with other initialization record and base segment fieldnames.

Field Description

INITMESG BIM-ALERT/CICS initialization message.

Field type: 01000000 - Initialization information Default label-1: INITIALIZATION Default label-2: MESSAGE Input data length: 50 Input data format: Character (C) Default output length: 50 Default output format: Character (C)

Fieldname List Sign-On and Sign-Off Record Fields

Chapter 5. ALRTVCVI Violation Log File Report (CICS) 5-13

Sign-On and Sign-Off Record Fields

The following fieldnames can be included in any ALRTVCVI report FIELD, FIELDS, or SUBTITLE command statements. These fieldnames are contained in the ALRTVCVI security log file sign-on and sign-off records (RECTYPE EQ X’58’ and EVENTYPE EQ X’04’, segment X'88000000'). These fields will be printed only on report detail lines with other sign-on and sign-off record and base segment fieldnames.

Field Description

SGNTRMID Sign-on and sign-off terminal ID.

Default label-1: TERM Default label-2: ID Field type: 88000000 - Sign-on or sign-off information Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

SGNADMIN Administrator number.

Default label-1: ADMIN Default label-2: NUMBER Field type: 88000000 - Sign-on or sign-off information Input data length: 9 Input data format: Character (C) Default output length: 9 Default output format: Character (C)

SGNPHONE Phone number to be called if violations are detected at this terminal.

Default label-1: TERMINAL Default label-2: PHONE Default label-3: NUMBER Field type: 88000000 - Sign-on or sign-off information Input data length: 10 Input data format: Character (C) Default output length: 14 Default output format: Transformed (T)

C'9529332885'...T'(952) 933-2885

(continued)

Sign-On and Sign-Off Record Fields Fieldname List

5-14 Auditing and Report Writing Guide

Field Description

SGNLOCAT Sign-on or sign-off location code.

Group field: Yes Default label-1: LOCATION Field type: 88000000 - Sign-on or sign-off information Input data length: 16 Input data format: Character (C) Default output length: 16 Default output format: Character (C)

SGNCOMP Company number.

Belongs to group: SGNLOCAT Default label-1: COMP Default label-2: CODE Field type: 88000000 - Sign-on or sign-off information Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

SGNDIVSN Division number.

Belongs to group: SGNLOCAT Default label-1: DIV. Default label-2: CODE Field type: 88000000 - Sign-on or sign-off information Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

SGNDEPT Department number.

Belongs to group: SGNLOCAT Default label-1: DEPT Default label-2: CODE Field type: 88000000 - Sign-on or sign-off information Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

(continued)

Fieldname List Sign-On and Sign-Off Record Fields

Chapter 5. ALRTVCVI Violation Log File Report (CICS) 5-15

Field Description

SGNSECT Section number.

Belongs to group: SGNLOCAT Default label-1: SECT Default label-2: CODE Field type: 88000000 - Sign-on or sign-off information Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

SGNCNAME Company name.

Default label-1: COMPANY NAME Field type: 88000000 - Sign-on or sign-off information Input data length: 4 Input data format: Character (C) Default output length: 35 Default output format: Transformed (T) - user-defined location

SGNVNAME Division name.

Default label-1: DIVISION NAME Field type: 88000000 - Sign-on or sign-off information Input data length: 8 Input data format: Character (C) Default output length: 35 Default output format: Transformed (T) - user-defined location

SGNDNAME Department name.

Default label-1: DEPARTMENT NAME Field type: 88000000 - Sign-on or sign-off information Input data length: 12 Input data format: Character (C) Default output length: 35 Default output format: Transformed (T) - user-defined location

SGNSNAME Section name.

Default label-1: SECTION NAME Field type: 88000000 - Sign-on or sign-off information Input data length: 16 Input data format: Character (C) Default output length: 35 Default output format: Transformed (T) - user-defined location

(continued)

Sign-On and Sign-Off Record Fields Fieldname List

5-16 Auditing and Report Writing Guide

Field Description

SGNOPER User ID.

Default label-1: USERID Field type: 00000000 – Common segment info Input data length: 9 Input data format: Character (C) Default output length: 9 Default output format: C

SGNOPNAM Name.

Default label-1: USER Default label-2: NAME Field type: 88000000 - Sign-on or sign-off information Input data length: 30 Input data format: Character (C) Default output length: 30 Default output format: Character (C)

SGNCODE Sign-on or sign-off code, which indicates what type of activity was being attempted.

Default label-1: SGN Default label-2: CODE Field type: 00000000 – Common segment info Input data length: 1 Input data format: Hexadecimal (X) Default output length: 2 Default output format: Hexadecimal (X)

SIGNONMG Sign-on or sign-off message.

Default label-1: SIGN-ON/SIGN-OFF Default label-2: MESSAGE Field type: 88000000 - Sign-on or sign-off information Input data length: 50 Input data format: Character (C) Default output length: 50 Default output format: Character (C)

SGNSYSID Sign-on or sign-off system-id.

Default label-1: SIGNON Default label-2: SYSTEM Default label-3: ID Field type: 88000000 - Sign-on or sign-off information Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

Fieldname List Violation Record Fields

Chapter 5. ALRTVCVI Violation Log File Report (CICS) 5-17

Violation Record Fields

The following fieldnames can be included in any ALRTVCVI report FIELD, FIELDS, or SUBTITLE command statements. These fieldnames are contained in the ALRTVCVI security log file violation records (RECTYPE EQ X’58’ and EVENTYPE EQ ‘02', segment X'88000000'). These fields will be printed only on report detail lines with other violation record and base segment fieldnames.

Field Description

TERMINAL Terminal from which violation occurred.

Default label-1: CICS Default label-2: TERM Default label-3: ID Field type: 88000000 - Security violation information Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

ADMINSTR Adminstrator who owns terminal or operator committing the violation.

Default label-1: ADMIN Default label-2: NUMBER Field type: 88000000 - Security violation information Input data length: 9 Input data format: Character (C) Default output length: 9 Default output format: Character (C)

TERMPHON Phone number to be called if violations are detected at this terminal.

Default label-1: TERMINAL Default label-2: PHONE Default label-3: NUMBER Field type: 88000000 - Security violation information Input data length: 10 Input data format: Character (C) Default output length: 14 Default output format: Transformed (T)

C'6129332885'...T'(952) 933-2885

(continued)

Violation Record Fields Fieldname List

5-18 Auditing and Report Writing Guide

Field Description

LOCATION Location code.

Group field: Yes Default label-1: LOCATION Field type: 88000000 - Security violation information Input data length: 16 Input data format: Character (C) Default output length: 16 Default output format: Character (C)

COMPANY Company number.

Belongs to group: LOCATION Default label-1: COMP Default label-2: CODE Field type: 88000000 - Security violation information Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

DIVISION Division number.

Belongs to group: LOCATION Default label-1: DIV. Default label-2: CODE Field type: 88000000 - Security violation information Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

DEPARTMT Department number.

Belongs to group: LOCATION Default label-1: DEPT Default label-2: CODE Field type: 88000000 - Security violation information Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

(continued)

Fieldname List Violation Record Fields

Chapter 5. ALRTVCVI Violation Log File Report (CICS) 5-19

Field Description

SECTION Section number.

Belongs to group: LOCATION Default label-1: SECT Default label-1: DEPT Default label-2: CODE Field type: 88000000 - Security violation information Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

COMPNAME Company name.

Default label-1: COMPANY NAME Field type: 88000000 - Security violation information Input data length: 4 Input data format: Character (C) Default output length: 35 Default output format: Transformed (T) - user-defined location

DIVNAME Division name.

Default label-1: DIVISION NAME Field type: 88000000 - Security violation information Input data length: 8 Input data format: Character (C) Default output length: 35 Default output format: Transformed (T) - user-defined location

DEPTNAME Department name.

Default label-1: DEPARTMENT NAME Field type: 88000000 - Security violation information Input data length: 12 Input data format: Character (C) Default output length: 35 Default output format: Transformed (T) - user-defined location

SECTNAME Section name.

Default label-1: SECTION NAME Field type: 88000000 - Security violation information Input data length: 16 Input data format: Character (C) Default output length: 35 Default output format: Transformed (T) - user-defined location

(continued)

Violation Record Fields Fieldname List

5-20 Auditing and Report Writing Guide

Field Description

OPERNUM User ID of operator committing violation.

Default label-1: USERID Field type: 00000000 – Common segment info Input data length: 9 Input data format: Character (C) Default output length: 9 Default output format: Character (C)

OPERNAME Name.

Default label-1: USER NAME Field type: 88000000 - Security violation information Input data length: 30 Input data format: Character (C) Default output length: 30 Default output format: Character (C)

VIOLATEC Violation code.

Default label-1: VIOL Default label-2: CODE Field type: 00000000 – Common segment info Input data length: 1 Input data format: Hexadecimal (X) Default output length: 2 Default output format: Hexadecimal (X)

DESCRIPT Violation description message.

Default label-1: VIOLATION Default label-2: DESCRIPTION Field type: 88000000 - Security violation information Input data length: 50 Input data format: Character (C) Default output length: 50 Default output format: Character (C)

(continued)

Fieldname List Violation Record Fields

Chapter 5. ALRTVCVI Violation Log File Report (CICS) 5-21

Field Description

SYSTEMID CICS SYSID in which violation occurred.

Default label-1: VIOL Default label-2: SYSTEM Default label-3: ID Field type: 88000000 - Security violation information Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

MONITRSW Monitor mode log switch.

Default label-1: MONITOR Default label-2: MODE Default label-3: LOG SWITCH Field type: 00000000 – Common segment info Input data length: 1 Input data format: Hexadecimal (X) Default output length: 2 Default output format: Hexadecimal-display (X)

OFFSET Input record offset value.

Default label-1: None Field type: FF000000 – Record dump info Input data length: 2 Input data format: Hexadecimal (X) Default output length: 4 Default output format: Hexadecimal-display (X)

RECORD Input record 32-byte segment.

Default label-1: None Field type: FF000000 – Record dump info Input data length: 34 Input data format: Hexadecimal (X) Default output length: 72 Default output format: Transformed (T) - user-defined location

Introduction Sample ALRTVCVI Reports

5-22 Auditing and Report Writing Guide

Sample ALRTVCVI Reports

Introduction

The following sample reports illustrate ways to make use of the ALRTVREP batch report writer program to produce reports similar to the batch reports distributed with BIM-ALERT/CICS and described in Appendix B, "Additional BIM-ALERT/CICS Reports".

The input statements of the sample ALRTVCVI reports that follow can be found in the BIM-ALERT installation library in member ALRTVCVI.J.

S1B190 Security Violation Report

Use the following command statements to produce the Security Violation Report shown on the next page.

// EXEC ALRTVREP,SIZE=256K

TITLES ('B I M - A L E R T / C I C S' -

'* * SECURITY VIOLATION REPORT * *')

REPORT ALRTVCVI TIMEFORM(HH,:,MM,:,SS)

SUBTITLE COMPANY LABEL(' COMPANY:') LINE(2)

SUBTITLE DEPARTMT LABEL('DEPARTMENT:') LINE(2) JUSTIFY(R)

SUBTITLE DIVISION LABEL('DIVISION:') LINE(3)

SUBTITLE SECTION LABEL('SECTION:') LINE(3) JUSTIFY(R)

FIELD SYSDATE LABEL(DATE) JUSTIFY(L) REPCHAR(") SORTPRTY(1)

FIELD SYSTIME LABEL(TIME) SORTPRTY(2)

FIELD TERMINAL LABEL(TERMINAL)

FIELD TERMPHON LABEL(TELEPHONE) LENGTH(15)

FIELD OPERNUM LABEL('USER ID') JUSTIFY(L)

FIELD OPERNAME LABEL('USER NAME') JUSTIFY(L)

FIELD DESCRIPT LABEL('VIOLATION DESCR') JUSTIFY(L)

SELECT IF EVENTYPE EQ X’02’

RUN

/*

Input

Sample ALRTVCVI Reports S1B190 Security Violation Report

Chapter 5. ALRTVCVI Violation Log File Report (CICS) 5-23

DATE: 01/25/2000 14:13:29 PAGE: 000006

B I M - A L E R T / C I C S

* * SECURITY VIOLATION REPORT * *

COMPANY: B I MOYLE ASSOCIATES, INC. DEPARTMENT: 0000

DIVISION: 0000 SECTION: 0000

DATE TIME TERMINAL TELEPHONE USER ID USER NAME VIOLATION DESCR

---- ---- -------- --------- ------- --------- ---------------

01/13/2000 10:16:18 BC32 (000) 000-0000 **** . - OPERATOR NOT SIGNED ON -

" 10:23:39 BC22 (000) 000-0000 ERIC KEHLER, ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

" 10:47:39 BC32 (000) 000-0000 FLL LINTON, FRED - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

" 11:37:24 BC33 (000) 000-0000 **** . - OPERATOR NOT SIGNED ON -

" 11:37:37 BC33 (000) 000-0000 Y2TEST Y2TEST INCORRECT OPERATOR SECURITY CODE ENTERED

" 12:08:09 BC32 (000) 000-0000 FLL LINTON, FRED - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

" 12:09:09 BC33 (000) 000-0000 Y2TEST Y2TEST - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

" 14:00:14 BC22 (000) 000-0000 **** . - OPERATOR NOT SIGNED ON -

" 14:29:20 BC32 (000) 000-0000 **** . - OPERATOR NOT SIGNED ON -

" 14:37:44 BC22 (000) 000-0000 ERIC KEHLER, ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

" 15:44:02 BC22 (000) 000-0000 **** . - OPERATOR NOT SIGNED ON -

" 16:23:57 BC22 (000) 000-0000 ERIC KEHLER, ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

" 16:27:54 BC32 (000) 000-0000 **** . - OPERATOR NOT SIGNED ON -

01/14/2000 07:15:03 BC22 (000) 000-0000 ERIC KEHLER, ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

" 10:55:58 BC22 (000) 000-0000 ERIC KEHLER, ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

" 14:04:05 BC22 (000) 000-0000 ERIC KEHLER, ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

" 15:14:10 BC22 (000) 000-0000 ERIC KEHLER, ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

01/15/2000 06:26:30 BC22 (000) 000-0000 ERIC KEHLER, ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

" 12:09:33 BC22 (000) 000-0000 **** . - OPERATOR NOT SIGNED ON -

" 12:46:05 BC32 (000) 000-0000 **** . - OPERATOR NOT SIGNED ON -

" 13:34:57 BC32 (000) 000-0000 FLL LINTON, FRED - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

" 14:02:27 BC22 (000) 000-0000 ERIC KEHLER, ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

01/16/2000 06:02:56 BC22 (000) 000-0000 ERIC KEHLER, ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

" 09:54:51 BC22 (000) 000-0000 ERIC KEHLER, ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

01/20/2000 08:55:49 BC32 (000) 000-0000 **** . - OPERATOR NOT SIGNED ON -

" 09:02:04 BC43 (000) 000-0000 **** . - OPERATOR NOT SIGNED ON -

" 09:02:18 BC43 (000) 000-0000 ROBERT ROBERT INCORRECT OPERATOR SECURITY CODE ENTERED

" 09:02:26 BC43 (000) 000-0000 **** . INCORRECT OPERATOR NUMBER ENTERED

" 09:02:40 BC43 (000) 000-0000 ROBERT ROBERT INCORRECT OPERATOR SECURITY CODE ENTERED

" 09:03:33 BC43 (000) 000-0000 **** . - MAXIMUM CONSECUTIVE VIOLATIONS DETECTED -

" 09:06:52 BC43 (000) 000-0000 ROBERT ROBERT - OPERATOR DISABLED DUE TO MAXIMUM VIOLATIONS -

" 09:07:13 BC43 (000) 000-0000 ROBERT ROBERT - OPERATOR DISABLED DUE TO MAXIMUM VIOLATIONS -

" 09:42:55 BC32 (000) 000-0000 FLL LINTON, FRED - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

" 10:34:27 BC23 (000) 000-0000 ERIC KEHLER, ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

" 10:43:38 TR93 (000) 000-0000 **** . - OPERATOR NOT SIGNED ON -

" 10:43:55 TR93 (000) 000-0000 JSTECHER STECHER, JIM INCORRECT OPERATOR SECURITY CODE ENTERED

" 11:19:02 TR93 (000) 000-0000 **** . - OPERATOR NOT SIGNED ON -

" 11:19:06 TR93 (000) 000-0000 **** . - OPERATOR NOT SIGNED ON -

" 12:41:28 BC13 (000) 000-0000 ASOMAINT ASOMAINT - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

" 12:48:28 TR93 (000) 000-0000 JSTECHER STECHER, JIM - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

" 12:53:16 BC42 (000) 000-0000 **** . - OPERATOR NOT SIGNED ON -

" 12:58:44 BC43 (000) 000-0000 **** . - OPERATOR NOT SIGNED ON -

" 13:07:40 BC43 (000) 000-0000 **** . - OPERATOR NOT SIGNED ON -

" 14:17:35 BC13 (000) 000-0000 ASOMAINT ASOMAINT - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

" 14:23:33 BC42 (000) 000-0000 ROBERT ROBERT - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

Output

S1B192 Security Violation Report Sample ALRTVCVI Reports

5-24 Auditing and Report Writing Guide

S1B192 Security Violation Report

Use the following command statements to produce a security violation report that contains the same information as S1B192. Although the extracted information will not be formatted in the same style as the previous S1B192 report, the same information is included.

// EXEC ALRTVREP,SIZE=256K

TITLES ('B I M - A L E R T / C I C S' -

'* * ATTEMPTED SECURITY VIOLATIONS * *')

REPORT ALRTVCVI TIMEFORM(HH,:,MM) DATEFORM(MM,/,DD,/,YYYY)

FIELD SYSTIME LENGTH(5)

FIELDS SYSDATE TERMINAL ADMINSTR

FIELD SYSTEMID LABEL(CICS,SYST,ID)

FIELDS COMPANY DIVISION DEPARTMT SECTION OPERNUM DESCRIPT

SELECT IF EVENTYPE EQ X'02'

RUN

/*

DATE: 01/25/2000 14:19:13 PAGE: 000001

B I M - A L E R T / C I C S

* * ATTEMPTED SECURITY VIOLATIONS * *

SYSTEM CICS CICS

LOG CREATION TERM ADMIN SYST COMP DIV. DEPT SECT OPERATOR VIOLATION

TIME DATE ID NUMBER ID CODE CODE CODE CODE NUMBER DESCRIPTION

------ -------- ---- ------ ---- ---- ---- ---- ---- -------- -----------

12:08 01/13/2000 BC32 A TEST 0000 0000 0000 0000 FLL - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

12:09 01/13/2000 BC33 ERIC TEST 0000 0000 0000 0000 Y2TEST - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

14:00 01/13/2000 BC22 FLL TEST 0000 0000 0000 0000 **** - OPERATOR NOT SIGNED ON -

14:29 01/13/2000 BC32 FLL TEST 0000 0000 0000 0000 **** - OPERATOR NOT SIGNED ON -

14:37 01/13/2000 BC22 A TEST 0000 0000 0000 0000 ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

15:44 01/13/2000 BC22 FLL TEST 0000 0000 0000 0000 **** - OPERATOR NOT SIGNED ON -

16:23 01/13/2000 BC22 A TEST 0000 0000 0000 0000 ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

16:27 01/13/2000 BC32 FLL TEST 0000 0000 0000 0000 **** - OPERATOR NOT SIGNED ON -

07:15 01/14/2000 BC22 A TEST 0000 0000 0000 0000 ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

10:55 01/14/2000 BC22 A TEST 0000 0000 0000 0000 ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

14:04 01/14/2000 BC22 A TEST 0000 0000 0000 0000 ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

15:14 01/14/2000 BC22 A TEST 0000 0000 0000 0000 ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

06:26 01/15/2000 BC22 A TEST 0000 0000 0000 0000 ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

12:09 01/15/2000 BC22 FLL TEST 0000 0000 0000 0000 **** - OPERATOR NOT SIGNED ON -

12:46 01/15/2000 BC32 FLL TEST 0000 0000 0000 0000 **** - OPERATOR NOT SIGNED ON -

13:34 01/15/2000 BC32 A TEST 0000 0000 0000 0000 FLL - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

14:02 01/15/2000 BC22 A TEST 0000 0000 0000 0000 ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

06:02 01/16/2000 BC22 A TEST 0000 0000 0000 0000 ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

09:54 01/16/2000 BC22 A TEST 0000 0000 0000 0000 ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

08:55 01/20/2000 BC32 FLL TEST 0000 0000 0000 0000 **** - OPERATOR NOT SIGNED ON -

09:02 01/20/2000 BC43 A TEST 0000 0000 0000 0000 **** - OPERATOR NOT SIGNED ON -

09:02 01/20/2000 BC43 A TEST 0000 0000 0000 0000 ROBERT INCORRECT OPERATOR SECURITY CODE ENTERED

09:02 01/20/2000 BC43 A TEST 0000 0000 0000 0000 **** INCORRECT OPERATOR NUMBER ENTERED

09:02 01/20/2000 BC43 A TEST 0000 0000 0000 0000 ROBERT INCORRECT OPERATOR SECURITY CODE ENTERED

09:03 01/20/2000 BC43 A TEST 0000 0000 0000 0000 **** - MAXIMUM CONSECUTIVE VIOLATIONS DETECTED -

09:06 01/20/2000 BC43 A TEST 0000 0000 0000 0000 ROBERT - OPERATOR DISABLED DUE TO MAXIMUM VIOLATIONS -

09:07 01/20/2000 BC43 A TEST 0000 0000 0000 0000 ROBERT - OPERATOR DISABLED DUE TO MAXIMUM VIOLATIONS -

09:42 01/20/2000 BC32 A TEST 0000 0000 0000 0000 FLL - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

10:34 01/20/2000 BC23 A TEST 0000 0000 0000 0000 ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

10:43 01/20/2000 TR93 A TEST 0000 0000 0000 0000 **** - OPERATOR NOT SIGNED ON -

10:43 01/20/2000 TR93 ERIC TEST 0000 0000 0000 0000 JSTECHER INCORRECT OPERATOR SECURITY CODE ENTERED

11:19 01/20/2000 TR93 A TEST 0000 0000 0000 0000 **** - OPERATOR NOT SIGNED ON -

11:19 01/20/2000 TR93 A TEST 0000 0000 0000 0000 **** - OPERATOR NOT SIGNED ON -

12:41 01/20/2000 BC13 FLL TEST 0000 0000 0000 0000 ASOMAINT - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

12:48 01/20/2000 TR93 ERIC TEST 0000 0000 0000 0000 JSTECHER - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

12:53 01/20/2000 BC42 A TEST 0000 0000 0000 0000 **** - OPERATOR NOT SIGNED ON -

12:58 01/20/2000 BC43 A TEST 0000 0000 0000 0000 **** - OPERATOR NOT SIGNED ON -

13:07 01/20/2000 BC43 A TEST 0000 0000 0000 0000 **** - OPERATOR NOT SIGNED ON -

15:57 01/21/2000 BC32 FLL TEST 0000 0000 0000 0000 **** - OPERATOR NOT SIGNED ON -

16:27 01/21/2000 BC13 A TEST 0000 0000 0000 0000 **** - OPERATOR NOT SIGNED ON -

16:28 01/21/2000 BC12 A TEST 0000 0000 0000 0000 **** - OPERATOR NOT SIGNED ON -

16:55 01/21/2000 BC42 A TEST 0000 0000 0000 0000 **** - OPERATOR NOT SIGNED ON -

Input

Output

Sample ALRTVCVI Reports S1B192 Security Violation Report

Chapter 5. ALRTVCVI Violation Log File Report (CICS) 5-25

6-1

6

ALRTVVVI Violation Log File Report (VSE)

This chapter describes the ALRTVVVI violation log file report, which you can use to select and display violation, audit, logging, and monitor messages from the BIM-ALERT security log file.

Introduction .............................................................................................................. 6-2 General Information ............................................................................................. 6-2 Sample JCL .......................................................................................................... 6-3 Input Record Description ...................................................................................... 6-4 Field Information .................................................................................................. 6-5

Fieldname List .......................................................................................................... 6-7 Common Segment Fields ...................................................................................... 6-7 Access Check Information .................................................................................. 6-11

Sample ALRTVVVI Reports................................................................................... 6-32 Introduction ........................................................................................................ 6-32 Dataset Name Report .......................................................................................... 6-32 User Entry Report ............................................................................................... 6-34 Resource Class Report ........................................................................................ 6-35 SECID/User Dataset Summary Report ................................................................ 6-37 SECID/User Resource Summary Report .............................................................. 6-38

General Information Introduction

6-2 Auditing and Report Writing Guide

Introduction

General Information

ALRTVVVI contains all information regarding violation, audit, logging, and monitor messages produced by BIM-ALERT/VSE. All data contained in the BIM-ALERT security log file AXPLOG1 is available for selection and display in the ALRTVVVI report type.

Dataset Description

BIM-ALERT security log file

The ALRTVVVI report type requires either the current BIM-ALERT security log file (AXPLOG1) or an archived BIM-ALERT security log file (AXPLOG3) (tape or disk), or a VSAM copy of one of these files, as input. The security log file contains all the violation, audit, logging, and monitor information.

ALRTVVVI assumes a default blocksize of 4096.

If the input file is a VSAM file, the report writer first issues an open for a KSDS file. This will cause a VSAM open error of X'A0' to be logged on the operator console if the file is ESDS rather than KSDS. However, the report writer will recognize the error, issue an open for an ESDS file, and continue processing.

BIM-ALERT/VSE security file

The ALRTVVVI report type also requires access to the current BIM-ALERT/VSE VSAM security file. This file contains user profile information not included in the security log file that is used by the BIM-ALERT Batch Report Writer to improve report clarity. The dataset must be specified on a // DLBL ALERTXP,... statement.

The phase ALRTVVVI is loaded by ALRTVREP when this report type is specified on a REPORT command statement. ALRTVVVI reads the input file and formats the data for the report.

Introduction

Input Datasets

I/O Module Name

Introduction Sample JCL

Chapter 6. ALRTVVVI Violation Log File Report (VSE) 6-3

Sample JCL

The following sample JCL can be used to execute any ALRTVVVI report:

// JOB ALRTVVVI BIM-ALERT/VSE log file report

// LIBDEF PHASE,SEARCH=.... <== optional

// DLBL IJSYSUC,'user.catalog.name',,VSAM <== optional

// DLBL SORTWK1,'SORTWK1.SYS001.WORKFILE',0000,VSAM, <== optional

DISP=(,DELETE),RECORDS=2000,RECSIZE=4096 <== optional

// DLBL AXPLOG1,'ALERT.AXPLOG1.V51',,VSAM <== for current log file

// DLBL ALERTXP,'ALERT.ALERTXP.V51',,VSAM <== sec. file

// DLBL AXPLOG3,'ALERT.AXPLOG3.V51',,VSAM <== for disk archive

// EXEC ALRTVREP,SIZE=256K

.

.

/*

/&

Input Record Description Introduction

6-4 Auditing and Report Writing Guide

Input Record Description

Each BIM-ALERT log file record contains a 16-byte record key (segment type 00000000) and at least one subordinate segment type that contains the log record data.

The common segment contains data which is available in all records. It is available to be printed on any ALRTVVVI report.

The actual access check information is contained in this subordinate segment. These are variable-occurrence segments, with the number of segments contained in any given log record being dependent upon the type of event that caused the log record to be written.

These segments are contained in log records relating to resource access authorization log records. The data in these segments define the type of data logged and the name of the resource.

These segments contain information used by the FILEDUMP command to produce a hexadecimal and character dump listing of the data in the BIM-ALERT/VSE security log file.

Introduction

Common Segment

(Type 00000000)

Access Check

Information (Type

88000000)

Access Check

Segments (Type

88010000)

Record Dump

Information (Type

FF000000)

Introduction Field Information

Chapter 6. ALRTVVVI Violation Log File Report (VSE) 6-5

Field Information

Report output is comprised of one or more data fields extracted from an input dataset and formatted according to default or user specifications. Each data field is selected from a pre-defined list of ALRTVVVI fieldnames.

At report generation time, each fieldname specified is assigned a report column, positioned from left to right across the report page in the order in which the fieldnames were specified.

Data corresponding to each selected fieldname is located, extracted from the physical input record by the ALRTVVVI I/O module, and moved to, or transformed into, the output report column, using either the default values described in the fieldname entries or those specified by the user in a FIELD command statement.

The following information is provided for each ALRTVVVI fieldname (if applicable):

Heading Description

Group Field: YES Indicates that the fieldname being defined is a group fieldname, containing several individual fieldnames within the group. The individual ALRTVVVI fieldnames are listed. If a group fieldname is specified on a FIELD or FIELDS command statement, input data represented by all individual fieldnames in the group will be printed in a single output column. If the individual fieldname is specified on a FIELD or FIELDS command statement, each fieldname is assigned its own column in the report output detail line.

Field type: Defines to which particular segment type the fieldname belongs. A segment is a subordinate group or class of data within a record. There are two segment types contained in the BIM-ALERT/VSE security log file: The data contained in the key of the record.

The actual access authorization check data. This segment is further subdivided into user verification data and resource authorization data.

Default label-n: Defines the default label information, which, if requested, is positioned at the top of each column header on the output page. Up to three labels can be specified for each field; they will be placed above the report column reserved for the fieldname.

Belongs to group: Indicates a higher level group fieldname which can be specified on a FIELD or FIELDS command statement to display the data represented by this fieldname.

Input data length: Represents the defined length of the data in the input record corresponding to the fieldname.

(continued)

Field Information Introduction

6-6 Auditing and Report Writing Guide

Heading Description

Input data format: Indicates that the data in the input record is in one of the following formats:

X Hexadecimal or binary C Printable characters P Packed-decimal

Default output length: This numeric value is the default value used to determine the number of character positions to be reserved in the output report detail line for the column in which the data will be positioned. This value can be overridden by using the LENGTH keyword on a FIELD command statement.

Default output format: One of the following output formats is assigned by default for each fieldname; it determines how the data will appear in the output report:

C Character. The input data is simply moved from the input record to the report detail line. Each non-printable character is translated to a period (.).

X Hexadecimal. Each byte or character in the input field is translated to its two-character hexadecimal equivalent.

Z Zoned-decimal. The input data field, up to a length of four, is taken as a binary number and converted to its decimal equivalent. By default, zoned-decimal formatted output fields are zero-suppressed and right-justified in the report column. Users can override the field justification value by using the JUSTIFY keyword on the FIELD

command statement. Zero-suppression can be overridden by specifying NOTRUNC on the FIELD or SUBTITLE command statement.

T Transformed. The input data field is replaced by an alternate value, either as set forth in the transformation table shown, or as determined by some other programmed transformation algorithm defined by the user.

To override the field output format value, use the FORMAT keyword on the FIELD command statement.

Fieldname List Common Segment Fields

Chapter 6. ALRTVVVI Violation Log File Report (VSE) 6-7

Fieldname List

Common Segment Fields

The following fieldnames can be included in any ALRTVVVI report FIELD, FIELDS, or SUBTITLE command statements. These fieldnames are contained in the common segment of all BIM-ALERT/VSE security log file input records and will be printed on all detail lines when appropriate.

Field Description

KEY Input record key.

Field type: 00000000 - Common segment information Default label-1: RECORD KEY Input data length: 16 Input data format: Hexadecimal (X) Default output data length: 32 Default output data format: Hexadecimal (X)

RECLEN Input record length.

Field type: 00000000 - Common segment information Default label-1: RECORD Default label-2: LENGTH Input data length: 2 Input data format: Hexadecimal (X) Default output data length: 4 Default output data format: Hexadecimal (X)

DSNAME Input file dataset name.

Field type: 00000000 - Common segment information Default label-1: INPUT DSNAME Input data length: 44 Input data format: Character (C) Default output data length: 44 Default output data format: Character (C)

SEQNUM Output detail line sequence number.

Field type: 00000000 - Common segment information Default label-1: None Input data length: 4 Input data format: Hexadecimal (X) - Binary fullword Default output length: 6 Default output format: Zoned decimal (Z)

(continued)

Common Segment Fields Fieldname List

6-8 Auditing and Report Writing Guide

Field Description

INRECNUM Physical input record sequence number, assigned by the ALRTVVVI I/O module when the input record is read.

Field type: 00000000 - Common segment information Default label-1: INPT Default label-2: RECD Default label-3: NMBR Input data length: 4 Input data format: Hexadecimal (X) - Binary fullword Default output length: 6 Default output format: Zoned decimal (Z)

INFOTYPE Fieldname or record segment type, which indicates to which segment a fieldname belongs.

Field type: 00000000 - Common segment information Default label-1: INFO Default label-2: TYPE Input data length: 4 Input data format: Hexadecimal (X) - Binary fullword Default output length: 23 Default output format: Transformed (T)

X'00000000'.........T'COMMON SEGMENT INFO '

X'88000000'.........T'ACCESS CHECK INFO '

X'88010000'.........T'ACCESS CHECK FIELD INFO'

X'FF000000'.........T'RECORD DUMP INFO '

RECTYPE Record type.

Field type: 00000000 - Common segment information Default label-1: RECORD Default label-2: TYPE Input data length: 1 Input data format: Hexadecimal (X) Default output length: 10 Default output format: Transformed (T)

X'58'.........T'ACCESS-CHK'

(continued)

Fieldname List Common Segment Fields

Chapter 6. ALRTVVVI Violation Log File Report (VSE) 6-9

Field Description

SYSDATE Binary data representing the date the record was created.

Field type: 00000000 - Common segment information Default label-1: SYSTEM Default label-2: DATE Input data length: 4 Input data format: Hexadecimal (X) Default output length: 10 Default output format: Transformed (T) X'AFCBB7AD'.....T'01/01/1998' (or user-defined DATEFORM)

SYSTIME Binary data representing the time the record was created.

Field type: 00000000 - Common segment information Default label-1: SYSTEM Default label-2: TIME Input data length: 4 Input data format: Hexadecimal (X) Default output length: 8 Default output format: Transformed (T) X'AFCC04BA' T' 08:25 ' (or user-defined TIMEFORM)

SERIALNO Record serial number of the log record.

Field type: 00000000 - Common segment information Default label-1: SERIAL Default label-2: NUMBER Input data length: 4 Input data format: Hexadecimal (X) Default output length: 6 Default output format: Zoned-decimal (Z)

CPUID CPU serial number.

Field type: 00000000 - Common segment information Default label-1: CPU ID Input data length: 8 Input data format: Hexadecimal (X) Default output length: 16 Default output format: Hexadecimal (X)

(continued)

Common Segment Fields Fieldname List

6-10 Auditing and Report Writing Guide

Field Description

ROUTING Record routing qualifier.

Default label-1: ROUTING Default label-2: QUALIFIER Field type: 00000000 - Common segment information Input data length: 1 Input data format: Hexadecimal (X) Default output length: 16 Default output format: Transformed (T)

X'80'.........T'LOG FILE '

X'40'.........T'OPER CONS '

X'20'.........T'TRUNCATED '

X'A0'.........T'LOG FILE (TRUNC)'

X'60'.........T'OPR CONS (TRUNC)'

X'C0'.........T'LOG/CONSOLE '

Fieldname List Access Check Information

Chapter 6. ALRTVVVI Violation Log File Report (VSE) 6-11

Access Check Information

The following fieldnames can be included in any ALRTVVVI report FIELD, FIELDS, or SUBTITLE command statements. These fieldnames are contained in the ALRTVVVI security log file access check records (segment X'88000000').

Field Description

VIOLATN Violation code.

Default label-1: VIOLATION Default label-2: CODE Field type: 88000000 - Access check information Input data length: 1 Input data format: Hexadecimal (X) Default output length: 16 Default output format: Transformed (T)

X'80'...........T'ACCESS VIOLATION' X'40'...........T'SECID UNKNOWN ' X'20'...........T'MONITOR MODE ' X'A0'...........T'ACCESS VIOL(MON)' X'60'...........T'SECID UNKN(MON) ' X'E0'...........T'AC VIO/SEC UN(M)'

EVENTYPE Signifies whether record is user verification event or resource access authorization event.

Default label-1: EVENT Default label-2: TYPE Field type: 88000000 - Access check information Input data length: 1 Input data format: Hexadecimal (X) Default output length: 15 Default output format: Transformed (T)

X'01'...........T'USER-VERIFICATN '

X'02'...........T'RESOURCE-ACCESS '

X'03'...........T'USER AUTHENTICATION'

X'04'...........T'SIGNON CICS/NON-VSE'

ACCESSTP Type of resource access check.

Default label-1: ACCESS Default label-2: TYPE Field type: 88000000 - Access check information Input data length: 1 Input data format: Hexadecimal (X) Default output length: 13 Default output format: Transformed (T)

X'00'...........T'DSNAME-CHK '

X'02'...........T'OTHER-RES-CHK'

Access Check Information Fieldname List

6-12 Auditing and Report Writing Guide

(continued)

Fieldname List Access Check Information

Chapter 6. ALRTVVVI Violation Log File Report (VSE) 6-13

Field Description

EVENTSEC SECID of job that caused event.

Default label-1: EVENT Default label-2: SECID Field type: 88000000 - Access check information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

SECIDNAM User name associated with SECID.

Default label-1: SECID Default label-2: NAME Field type: 88000000 - Access check information Input data length: 8 Input data format: Character (C) Default output length: 30 Default output format: Transformed (T)

RULENMBR Serial number of rules table record that caused event.

Default label-1: RULES Default label-2: SERIAL Default label-3: NUMBER Field type: 88000000 - Access check information Input data length: 4 Input data format: Hexadecimal (X) Default output length: 8 Default output format: Hexadecimal (X)

(continued)

Access Check Information Fieldname List

6-14 Auditing and Report Writing Guide

Field Description

REASON Log event reason code.

Default label-1: LOG Default label-2: REASON Default label-3: CODE Field type: 88000000 - Access check information Input data length: 1 Input data format: Hexadecimal (X) Default output length: 15 Default output format: Transformed (T)

X'01'...........T'USER ACTION '

X'02'...........T'JOBMASK ACTION '

X'05'...........T'SECID ACTION '

X'06'...........T'BAD SOURCE '

X'07'...........T'BAD PASSWORD '

X'08'...........T'BAD MODE '

X'09'...........T'BAD RJENODE '

X'0A'...........T'BAD RJEUSER '

X'0B'...........T'SECID ENTRY ACT '

X'0C'...........T'UPR EXPIRE WARN '

X'0D'...........T'REM SUB NOT ALLOWED '

X'13'...........T'PROTECT ALL '

X'15'...........T'DATASET ACTION '

X'17'...........T'DATASET RULE '

X'18'...........T'DS USER ACTION '

X'19'...........T'OVERRIDE JOB '

X'1A'...........T'DITTO EXEC FAIL '

X'1C'...........T'RESOURCE ACTION '

X'1D'...........T'RESOURCE RULE '

X'1E'...........T'RESOURCE USER ACTION'

X'1F'...........T'NO SECID FOUND '

X'20'...........T'MONITOR ACTION '

X'21'...........T'RES NOT DEFINED '

X'22'...........T'LOGEXEC '

X'23'...........T'RULE AUDIT ACT '

X'24'...........T'SECID AUDIT ACT '

X'25'...........T'USERID AUDIT ACTION '

X'26'...........T'MONITOR IND RULE '

X'27'...........T'MONITOR IND SECID '

X'28'...........T'MONITOR IND UPR '

X'29'...........T'NOT AUTH - CNTL LIB '

X'2C'...........T'NOT AUTH PGM '

X'2D'...........T'PGM NOT FROM CNTLIB '

(continued)

Fieldname List Access Check Information

Chapter 6. ALRTVVVI Violation Log File Report (VSE) 6-15

Field Description

TABLEID Online table number used to create rules.

Default label-1: TABLE Default label-2: ID Field type: 88000000 - Access check information Input data length: 2 Input data format: Character (C) Default output length: 2 Default output format: Character (C)

TABLDATE Date that the rules table was assembled.

Default label-1: TABLE Default label-2: ASSEMBLY Default label-3: DATE Field type: 88000000 - Access check information Input data length: 4 Input data format: Hexadecimal (X) Default output length: 10 Default output format: Transformed (T) X'AFCBB7AD'.....T'01/01/1998' (or user-defined DATEFORM)

TABLTIME Time that the rules table was assembled.

Default label-1: TABLE Default label-2: ASSEMBLY Default label-3: TIME Field type: 88000000 - Access check information Input data length: 4 Input data format: Hexadecimal (X) Default output length: 8 Default output format: Transformed (T) X'AFCBB7AD'.....T' 08:25 ' (or user-defined TIMEFORM)

PARTINID Partition ID where job was running.

Default label-1: PTN Default label-2: ID Field type: 88000000 - Access check information Input data length: 2 Input data format: Character (C) Default output length: 2 Default output format: Character (C)

(continued)

Access Check Information Fieldname List

6-16 Auditing and Report Writing Guide

Field Description

POWERJB# POWER job number of job causing event.

Default label-1: POWER Default label-2: JOB Default label-3: NBR Field type: 88000000 - Access check information Input data length: 2 Input data format: Hexadecimal (X) Default output length: 5 Default output format: Zoned-decimal (Z)

SUBMITYP Submittal mechanism.

Default label-1: SUBMIT Default label-2: TYPE Field type: 88000000 - Access check information Input data length: 1 Input data format: Character (C) Default output length: 6 Default output format: Transformed (T)

C'C'............T'CMS '

C'I'............T'ICCF '

C'V'............T'VOLLIE'

C'J'............T'JCLMAN'

C'G'............T'GSERV '

C'M'............T'OTHER '

LOGONTYP Logon source.

Default label-1: LOGON Default label-2: SOURCE Field type: 88000000 - Access check information Input data length: 1 Input data format: Character (C) Default output length: 9 Default output format: Transformed (T)

C'C'............T'CMS '

C'I'............T'ICCF '

C'O'............T'CICS OP '

C'A'............T'ALERTC OP'

C'M'............T'OTHER '

(continued)

Fieldname List Access Check Information

Chapter 6. ALRTVVVI Violation Log File Report (VSE) 6-17

Field Description

PROGRAM Program name.

Default label-1: PROGRAM Default label-2: NAME Field type: 88000000 - Access check information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

IDCDUSER ID card user ID.

Default label-1: ID-CARD Default label-2: USERID Field type: 88000000 - Access check information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

POWERJOB POWER job name.

Default label-1: POWER Default label-2: JOBNAME Field type: 88000000 - Access check information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

JOBNAME VSE job name, obtained from // JOB card.

Default label-1: JOB NAME Field type: 88000000 - Access check information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

(continued)

Access Check Information Fieldname List

6-18 Auditing and Report Writing Guide

Field Description

ENTRYSOR Source from which job entered system.

Default label-1: ENTRY Default label-2: SOURCE Field type: 88000000 - Access check information Input data length: 2 Input data format: Hexadecimal (X) Default output length: 4 Default output format: Hexadecimal (X)

ENTRYMOD Mode by which job entered system.

Default label-1: ENTRY Default label-2: MODE Field type: 88000000 - Access check information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

RJEUSRID RJE user who submitted the job.

Default label-1: RJE Default label-2: USER Default label-3: ID Field type: 88000000 - Access check information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

RJENODID RJE node from which job entered the system.

Default label-1: RJE Default label-2: NODE Default label-3: ID Field type: 88000000 - Access check information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

(continued)

Fieldname List Access Check Information

Chapter 6. ALRTVVVI Violation Log File Report (VSE) 6-19

Field Description

USERTID Task ID of job causing event.

Default label-1: VIOL Default label-2: TID Field type: 88000000 - Access check information Input data length: 1 Input data format: Hexadecimal (X) Default output length: 2 Default output format: Hexadecimal (X)

AXPS2RTN AXPS2 return code.

Default label-1: AXPS2 Default label-2: RETN Default label-3: CODE Field type: 88000000 - Access check information Input data length: 1 Input data format: Hexadecimal (X) Default output length: 2 Default output format: Hexadecimal (X)

SUPVSRTN Supervisor return code.

Default label-1: SUPV Default label-2: RETN Default label-3: CODE Field type: 88000000 - Access check information Input data length: 1 Input data format: Hexadecimal (X) Default output length: 2 Default output format: Hexadecimal (X)

AXPS2VER AXPS2 version number.

Default label-1: AXPS2 Default label-2: VERSION Default label-3: NUMBER Field type: 88000000 - Access check information Input data length: 4 Input data format: Hexadecimal (X) Default output length: 8 Default output format: Hexadecimal (X)

(continued)

Access Check Information Fieldname List

6-20 Auditing and Report Writing Guide

Field Description

POWERPWD POWER password for job.

Default label-1: POWER Default label-2: PASSWORD Field type: 88000000 - Access check information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

POWERUSR POWER USER= parameter for job.

Default label-1: POWER Default label-2: USERID Field type: 88000000 - Access check information Input data length: 16 Input data format: Character (C) Default output length: 16 Default output format: Character (C)

IDCDPASS ID card password.

Default label-1: ID CARD Default label-2: PASSWORD Field type: 88000000 - Access check information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

USEACUSR User authentication actual user ID (purported).

Default label-1: ACTUAL Default label-2: USERID Field type: 88000000 - Access check information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

(continued)

Fieldname List Access Check Information

Chapter 6. ALRTVVVI Violation Log File Report (VSE) 6-21

Field Description

EXECCLB Execute from controlled library (YES or NO).

Default label-1: EXC Default label-2: CTL Default label-3: LIB Field type: 88000000 - Access check information Input data length: 1 Input data format: Character (C) Default output length: 3 Default output format: Transformed (T)

C'Y'............T'YES'

C'N'............T'NO '

CLBOPRTN Controlled library operation (YES or NO).

Default label-1: CTL Default label-2: LIB Default label-3: OPR Field type: 88000000 - Access check information Input data length: 1 Input data format: Character (C) Default output length: 3 Default output format: Transformed (T)

C'Y'............T'YES'

C'N'............T'NO '

USRAUCLB User authorized for controlled library (YES or NO).

Default label-1: USR Default label-2: AUT Default label-3: CLB Field type: 88000000 - Access check information Input data length: 1 Input data format: Character (C) Default output length: 3 Default output format: Transformed (T)

C'Y'............T'YES'

C'N'............T'NO '

SYSTEMID System ID (CPU ID or GMF name).

Default label-1: SYSTEM Default label-2: ID Field type: 88000000 - Access check information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

(continued)

Access Check Information Fieldname List

6-22 Auditing and Report Writing Guide

Field Description

OPSYSTEM Operating system.

Default label-1: OPERATING Default label-2: SYSTEM Field type: 88000000 - Access check information Input data length: 1 Input data format: Character (C) Default output length: 1 Default output format: Character (C)

EXECPGM Executed program.

Default label-1: EXECUTED Default label-2: PROGRAM Field type: 88000000 - Access check information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

EXECLIB Executed library.

Default label-1: EXECUTED Default label-2: LIBRARY Field type: 88000000 - Access check information Input data length: 7 Input data format: Character (C) Default output length: 7 Default output format: Character (C)

EXECSUB Executed sublibrary.

Default label-1: EXECUTED Default label-2: SUBLIB Field type: 88000000 - Access check information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

APPLICN Application name.

Default label-1: APPLICATION Default label-2: NAME Field type: 88000000 - Access check information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

(continued)

Fieldname List Access Check Information

Chapter 6. ALRTVVVI Violation Log File Report (VSE) 6-23

Field Description

USRNAME User name.

Default label-1: USER Default label-2: NAME Field type: 88000000 - Access check information Input data length: 30 Input data format: Character (C) Default output length: 30 Default output format: Character (C)

ADMIN Administrator user ID.

Default label-1: ADMIN Default label-2: USERID Field type: 88000000 - Access check information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

TERMID Terminal ID.

Default label-1: TERM Default label-2: ID Field type: 88000000 - Access check information Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

CICSYSID CICS system ID.

Default label-1: CICS Default label-2: SYSID Field type: 88000000 - Access check information Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

COMPCODE Company code.

Default label-1: COMP Default label-2: CODE Field type: 88000000 - Access check information Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

(continued)

Access Check Information Fieldname List

6-24 Auditing and Report Writing Guide

Field Description

DIVNCODE Division code.

Default label-1: DIVN Default label-2: CODE Field type: 88000000 - Access check information Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

DEPTCODE Department code.

Default label-1: DEPT Default label-2: CODE Field type: 88000000 - Access check information Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

SECTCODE Section code.

Default label-1: SECT Default label-2: CODE Field type: 88000000 - Access check information Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

REASDESC Reason description.

Default label-1: REASON Default label-2: DESCRIPTION Field type: 88000000 - Access check information Input data length: 50 Input data format: Character (C) Default output length: 50 Default output format: Character (C)

(continued)

Fieldname List Access Check Information

Chapter 6. ALRTVVVI Violation Log File Report (VSE) 6-25

Field Description

DSTYPE Type of dataset being accessed.

Default label-1: DATASET Default label-2: TYPE Field type: 88000000 - Access check information Input data length: 1 Input data format: Character (C) Default output length: 4 Default output format: Transformed (T)

C'D'............T'DISK'

C'T'............T'TAPE'

DATASET Name of dataset being accessed.

Default label-1: DATASET Default label-2: NAME Field type: 88000000 - Access check information Input data length: 44 Input data format: Character (C) Default output length: 44 Default output format: Character (C)

VOLSER VOLSER on which dataset resides.

Default label-1: VOLSER Field type: 88000000 - Access check information Input data length: 6 Input data format: Character (C) Default output length: 6 Default output format: Character (C)

REQACC Access level requested.

Default label-1: REQSTD Default label-2: ACCESS Field type: 88000000 - Access check information Input data length: 1 Input data format: Hexadecimal (X) Default output length: 7 Default output format: Transformed (T)

X'80'...........T'ALTER '

X'40'...........T'CONTROL'

X'20'...........T'UPDATE '

X'10'...........T'READ '

X'08'...........T'NONE '

X'04'...........T'EXEC '

X'FF'...........T'UNKNOWN'

(continued)

Access Check Information Fieldname List

6-26 Auditing and Report Writing Guide

Field Description

AUTHACC Access level authorized.

Default label-1: AUTH Default label-2: ACCESS Field type: 88000000 - Access check information Input data length: 1 Input data format: Hexadecimal (X) Default output length: 7 Default output format: Transformed (T)

X'80'...........T'ALTER '

X'40'...........T'CONTROL'

X'20'...........T'UPDATE '

X'10'...........T'READ '

X'08'...........T'NONE '

X'04'...........T'EXEC '

X'FF'...........T'UNKNOWN'

RESNAME Other resource name requested.

Default label-1: RESOURCE Default label-2: NAME Field type: 88000000 - Access check information Input data length: 52 Input data format: Character (C) Default output length: 52 Default output format: Character (C)

RCLASS Resource class.

Default label-1: RESOURCE Default label-2: CLASS Field type: 88000000 - Access check information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

RESACUSR Resource access actual user ID (purported).

Default label-1: ACTUAL Default label-2: USERID Field type: 88000000 - Access check information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

(continued)

Fieldname List Access Check Information

Chapter 6. ALRTVVVI Violation Log File Report (VSE) 6-27

Field Description

REXECCLB Execute from controlled library (YES or NO).

Default label-1: EXC Default label-2: CTL Default label-3: LIB Field type: 88000000 - Access check information Input data length: 1 Input data format: Character (C) Default output length: 3 Default output format: Transformed (T)

C'Y'............T'YES'

C'N'............T'NO '

RCLBOPRT Controlled library operation (YES or NO).

Default label-1: CTL Default label-2: LIB Default label-3: OPR Field type: 88000000 - Access check information Input data length: 1 Input data format: Character (C) Default output length: 3 Default output format: Transformed (T)

C'Y'............T'YES'

C'N'............T'NO '

RUSRAUCL User authorized for controlled library (YES or NO).

Default label-1: USR Default label-2: AUT Default label-3: CLB Field type: 88000000 - Access check information Input data length: 1 Input data format: Character (C) Default output length: 3 Default output format: Transformed (T)

C'Y'............T'YES'

C'N'............T'NO '

RSYSTMID System ID (CPU ID or GMF name).

Default label-1: SYSTEM Default label-2: ID Field type: 88000000 - Access check information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

(continued)

Access Check Information Fieldname List

6-28 Auditing and Report Writing Guide

Field Description

ROPSYSTEM Operating system.

Default label-1: OPERATING Default label-2: SYSTEM Field type: 88000000 - Access check information Input data length: 1 Input data format: Character (C) Default output length: 1 Default output format: Character (C)

REXECPGM Executed program.

Default label-1: EXECUTED Default label-2: PROGRAM Field type: 88000000 - Access check information Input data length: 23 Input data format: Character (C) Default output length: 23 Default output format: Character (C)

RAPPLICN Application name.

Default label-1: APPLICATION Default label-2: NAME Field type: 88000000 - Access check information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

RUSRNAME User name.

Default label-1: USER Default label-2: NAME Field type: 88000000 - Access check information Input data length: 30 Input data format: Character (C) Default output length: 30 Default output format: Character (C)

RADMIN Administrator user ID.

Default label-1: ADMIN Default label-2: USERID Field type: 88000000 - Access check information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

(continued)

Fieldname List Access Check Information

Chapter 6. ALRTVVVI Violation Log File Report (VSE) 6-29

Field Description

RTERMID Terminal ID.

Default label-1: TERM Default label-2: ID Field type: 88000000 - Access check information Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

RCICSYID CICS system ID.

Default label-1: CICS Default label-2: SYSID Field type: 88000000 - Access check information Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

RCOMPCOD Company code.

Default label-1: COMP Default label-2: CODE Field type: 88000000 - Access check information Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

RDIVNCOD Division code.

Default label-1: DIVN Default label-2: CODE Field type: 88000000 - Access check information Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

RDEPTCOD Department code.

Default label-1: DEPT Default label-2: CODE Field type: 88000000 - Access check information Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

(continued)

Access Check Information Fieldname List

6-30 Auditing and Report Writing Guide

Field Description

RSECTCOD Section code.

Default label-1: SECT Default label-2: CODE Field type: 88000000 - Access check information Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

RREASDSC Reason description.

Default label-1: REASON Default label-2: DESCRIPTION Field type: 88000000 - Access check information Input data length: 50 Input data format: Character (C) Default output length: 50 Default output format: Character (C)

DATATYPE Access check data field description.

Default label-1: DATA Default label-2: TYPE Field type: 88010000 - Access check field information Input data length: 2 Input data format: Hexadecimal (X) Default output length: 16 Default output format: Transformed (T)

X'0107'.........T'POWER PASSWORD '

X'0109'.........T'// ID PASSWORD '

X'010A'.........T'POWER USER= PARM'

X'010B'.........T'ACTUAL USERID '

X'0201'.........T'DATASET NAME '

X'0202'.........T'REQUESTED ACCESS'

X'0203'.........T'AUTHORIZD ACCESS'

X'0205'.........T'REQUESTED VOLUME'

X'0206'.........T'RESOURCE CLASS '

X'0207'.........T'RESOURCE NAME '

X'0209'.........T'ACTUAL USERID '

(continued)

Fieldname List Access Check Information

Chapter 6. ALRTVVVI Violation Log File Report (VSE) 6-31

Field Description

DATAVALU Access check data field value.

Default label-1: DATA Default label-2: FIELD Default label-3: VALUE Field type: 88010000 - Access check field information Input data length: 60 Input data format: Character (C) Default output length: 60 Default output format: Character (C)t

OFFSET Input record offset value.

Default label-1: None Field type: FF000000 - Record dump information Input data length: 2 Input data format: Hexadecimal (X) Default output length: 4 Default output format: Hexadecimal (X)

RECORD Input record 32-byte segment.

Default label-1: None Field type: FF000000 - Record dump information Input data length: 34 Input data format: Hexadecimal (X) Default output length: 72 Default output format: Transformed (T)

Introduction Sample ALRTVVVI Reports

6-32 Auditing and Report Writing Guide

Sample ALRTVVVI Reports

Introduction

The following sample reports illustrate ways to use the BIM-ALERT batch report writer to produce reports similar to the predefined batch reports distributed with BIM-ALERT/VSE and detailed in Chapter 5 of the BIM-ALERT Installation and Operations Guide.

Input statements of the sample ALRTVVVI reports that follow can be found in the BIM-ALERT installation library in member ALRTVVVI.J.

Dataset Name Report

Use the following command statements to produce the Dataset Name Report, which follows. The report is similar to the pre-defined Dataset Name Report supplied with BIM-ALERT/VSE.

// EXEC ALRTVREP,SIZE=256K

TITLES ('B I M - A L E R T / V S E' -

' ' -

'*** DATASET NAME REPORT ***')

XFORM NAVAIL(X'00000000',T'N/A')

REPORT ALRTVVVI

SUBTITLE DATASET LABEL('DATASET NAME:') LINE(2) SORTPRTY(1) -

CTLBREAK(P)

SUBTITLE VOLSER LABEL('VOLSER: ') LINE(2) SORTPRTY(2) -

JUSTIFY(C) XFORM(NAVAIL)

FIELDS EVENTSEC JOBNAME

FIELD REQACC LENGTH(3) LABELS('REQ','ACC')

FIELD AUTHACC LENGTH(3) LABELS('ALL','ACC')

FIELD ENTRYSOR LENGTH(4) LABELS('SRCE')

FIELDS SYSDATE SYSTIME -

TABLEID TABLDATE TABLTIME PARTINID PROGRAM REASON -

VIOLATN SERIALNO

SELECT IF EVENTYPE EQ X'02' AND ACCESSTP EQ X'00'

RUN

/*

Input

Sample ALRTVVVI Reports Dataset Name Report

Chapter 6. ALRTVVVI Violation Log File Report (VSE) 6-33

DATE: 01/25/2000 15:11:26 PAGE: 000001

B I M - A L E R T / V S E

*** DATASET NAME REPORT ***

DATASET NAME: $$$.IJSYSPH VOLSER: .

TABLE TABLE LOG

EVENT REQ ALL SYSTEM SYSTEM TABLE ASSEMBLY ASSEMBLY PTN PROGRAM REASON VIOLATION SERIAL

SECID JOB NAME ACC ACC SRCE DATE TIME ID DATE TIME ID NAME CODE CODE NUMBER

----- -------- --- --- ---- ------ ------ ----- -------- -------- --- ------- ------ --------- ------

SECADMIN I17201C UPD REA 000C 01/25/2000 15:00 B1 01/24/2000 09:53 BG FCOBOL DATASET RULE ACCESS-VIOL(MON) 20415

SECADMIN I17201C UPD REA 000C 01/25/2000 15:01 B1 01/24/2000 09:53 FB LIBR DATASET RULE ACCESS-VIOL(MON) 20419

DATE: 01/25/2000 15:11:26 PAGE: 000002

B I M - A L E R T / V S E

*** DATASET NAME REPORT ***

DATASET NAME: VSE.BIM.COLUMBUS.EVT.EVENTS.BACKUP VOLSER: FBA001

TABLE TABLE LOG

EVENT REQ ALL SYSTEM SYSTEM TABLE ASSEMBLY ASSEMBLY PTN PROGRAM REASON VIOLATION SERIAL

SECID JOB NAME ACC ACC SRCE DATE TIME ID DATE TIME ID NAME CODE CODE NUMBER

----- -------- --- --- ---- ------ ------ ----- -------- -------- --- ------- ------ --------- ------

OPERATNS PCSEVBR ALT REA 0999 01/25/2000 02:34 B1 01/24/2000 09:53 F5 PCSEVBR DATASET RULE ACCESS-VIOL(MON) 20405

DATE: 01/25/2000 15:11:26 PAGE: 000003

B I M - A L E R T / V S E

*** DATASET NAME REPORT ***

DATASET NAME: 1FB.IJSYSPH VOLSER: .

TABLE TABLE LOG

EVENT REQ ALL SYSTEM SYSTEM TABLE ASSEMBLY ASSEMBLY PTN PROGRAM REASON VIOLATION SERIAL

SECID JOB NAME ACC ACC SRCE DATE TIME ID DATE TIME ID NAME CODE CODE NUMBER

----- -------- --- --- ---- ------ ------ ----- -------- -------- --- ------- ------ --------- ------

SECADMIN I17201C UPD ALT 000C 01/25/2000 15:01 B1 01/24/2000 09:53 FB NO NAME DS USER ACTION MONITOR MODE 20418

SECADMIN I17201C ALT ALT 000C 01/25/2000 15:01 B1 01/24/2000 09:53 FB ASMA90 DS USER ACTION MONITOR MODE 20417

SECADMIN I17201C ALT ALT 000C 01/25/2000 15:01 B1 01/24/2000 09:53 FB NO NAME DS USER ACTION MONITOR MODE 20416

DATE: 01/25/2000 15:11:26 PAGE: 000004

B I M - A L E R T / V S E

*** DATASET NAME REPORT ***

DATASET NAME: 1F5.SORTWK1 VOLSER: EPV400

TABLE TABLE LOG

EVENT REQ ALL SYSTEM SYSTEM TABLE ASSEMBLY ASSEMBLY PTN PROGRAM REASON VIOLATION SERIAL

SECID JOB NAME ACC ACC SRCE DATE TIME ID DATE TIME ID NAME CODE CODE NUMBER

----- -------- --- --- ---- ------ ------ ----- -------- -------- --- ------- ------ --------- ------

SECADMIN ALRTVREP ALT REA 0000 01/25/2000 15:11 B1 01/24/2000 09:53 F5 ALRTVREP DATASET RULE ACCESS-VIOL(MON) 20424

SECADMIN ALRTVREP ALT REA 0000 01/25/2000 15:02 B1 01/24/2000 09:53 F5 ALRTVREP DATASET RULE ACCESS-VIOL(MON) 20420

SECADMIN ALRTVREP ALT REA 0000 01/25/2000 14:38 B1 01/24/2000 09:53 F5 ALRTVREP DATASET RULE ACCESS-VIOL(MON) 20414

Output

User Entry Report Sample ALRTVVVI Reports

6-34 Auditing and Report Writing Guide

User Entry Report

Use the following command statements to produce the User Entry Report, which follows. The report is similar to the pre-defined User Entry Report supplied with BIM-ALERT/VSE.

// EXEC ALRTVREP,SIZE=256K

TITLES ('B I M - A L E R T / V S E' -

' ' -

'*** USER ENTRY REPORT ***')

XFORM NAVAIL(X'40',T'N/A')

REPORT ALRTVVVI

SUBTITLE EVENTSEC LABEL('SECID: ') LINE(2) SORTPRTY(1) -

CTLBREAK(P)

SUBTITLE IDCDUSER LABEL('USERID: ') LINE(2) SORTPRTY(2) -

JUSTIFY(C)

SUBTITLE LOGONTYP LABEL('LOGON: ') LINE(3) XFORM(NAVAIL)

SUBTITLE SUBMITYP LABEL('SUBMIT: ') LINE(3) XFORM(NAVAIL) -

JUSTIFY(C)

FIELD POWERJOB SORTPRTY(3) CTLBREAK(S)

FIELD POWERJB# SORTPRTY(4) REPCHAR(' ')

FIELD JOBNAME

FIELD SYSDATE SORTPRTY(5) SORTSEQ(AS) REPCHAR('.')

FIELDS SYSTIME TABLEID TABLDATE TABLTIME -

PARTINID REASON VIOLATN SERIALNO

SELECT IF EVENTYPE EQ X'01'

RUN

/*

DATE: 01/26/2000 06:09:01 PAGE: 000001

B I M - A L E R T / V S E

*** USER ENTRY REPORT ***

SECID: UNKNOWN USERID: PG

LOGON: L SUBMIT: S

POWER TABLE TABLE LOG

POWER JOB SYSTEM SYSTEM TABLE ASSEMBLY ASSEMBLY PTN REASON VIOLATION SERIAL

JOB NAME NBR JOB NAME DATE TIME ID DATE TIME ID CODE CODE NUMBER

-------- ----- -------- ------ ------ ----- -------- -------- --- ------ --------- ------

SRVTRACE 30977 SRVTRACE 01/22/2000 10:01 B1 01/22/2000 06:01 BG REM SUB NOT ALLOWED AC VIO/SEC UN(M) 19919

SRVTRACE 31681 SRVTRACE 01/22/2000 15:15 B1 01/22/2000 06:01 BG REM SUB NOT ALLOWED AC VIO/SEC UN(M) 20073

STDLABEL 31786 STDLABEL 01/23/2000 13:01 B1 01/22/2000 06:01 C2 REM SUB NOT ALLOWED AC VIO/SEC UN(M) 20218

VSE1CICS 30374 VSE1CICS 01/23/2000 05:08 B1 01/22/2000 06:01 F4 REM SUB NOT ALLOWED AC VIO/SEC UN(M) 19764

VSE1CICS 30681 VSE1CICS 01/24/2000 05:19 B1 01/22/2000 06:01 F4 REM SUB NOT ALLOWED AC VIO/SEC UN(M) 19822

DATE: 01/26/2000 06:09:01 PAGE: 000002

B I M - A L E R T / V S E

*** USER ENTRY REPORT ***

SECID: UNKNOWN USERID: AXPMAINT

LOGON: CMS SUBMIT: CMS

POWER TABLE TABLE LOG

POWER JOB SYSTEM SYSTEM TABLE ASSEMBLY ASSEMBLY PTN REASON VIOLATION SERIAL

JOB NAME NBR JOB NAME DATE TIME ID DATE TIME ID CODE CODE NUMBER

-------- ----- -------- ------ ------ ----- -------- -------- --- ------ --------- ------

CALR50A 754 CALR50A 01/22/2000 05:17 B1 01/21/2000 15:41 BG SECID ENTRY ACT SECID-UNKN(MON) 20448

PCSERPT 747 PCSERPT 01/23/2000 00:00 B1 01/22/2000 15:41 BG SECID ENTRY ACT SECID-UNKN(MON) 20439

PCSERPT 903 PCSERPT 01/24/2000 00:00 B1 01/23/2000 05:17 BG SECID ENTRY ACT SECID-UNKN(MON) 20606

PCSEVRP 875 PCSEVRP 01/25/2000 15:05 B1 01/25/2000 05:17 BG SECID ENTRY ACT SECID-UNKN(MON) 20579

SCFL50A 836 SCFL50A 01/25/2000 07:17 B1 01/25/2000 05:17 BG SECID ENTRY ACT SECID-UNKN(MON) 20528

WORKDATA 877 PAYROLL 01/25/2000 15:11 B1 01/25/2000 05:17 BG SECID ENTRY ACT SECID-UNKN(MON) 20583

Input

Output

Sample ALRTVVVI Reports Resource Class Report

Chapter 6. ALRTVVVI Violation Log File Report (VSE) 6-35

Resource Class Report

Use the following command statements to produce the Resource Class Report, which follows. The report is similar to the pre-defined Resource Class Report supplied with BIM-ALERT/VSE.

// EXEC ALRTVREP,SIZE=256K

REPORT ALRTVVVI INFILE(AXPLOG3)

TITLES 'B I M - A L E R T / V S E' -

' ' -

'*** RESOURCE CLASS REPORT ***'

SUBTITLE RCLASS LABEL('RESOURCE CLASS:') LINE(2) SORTPRTY(1)-

CTLBREAK(P)

FIELD RESNAME SORTPRTY(2) JUSTIFY(L) LENGTH(42)

FIELD EVENTSEC JUSTIFY(L)

FIELD IDCDUSER JUSTIFY(L)

FIELD JOBNAME JUSTIFY(L)

FIELD REQACC LENGTH(3) LABELS('REQ','ACC')

FIELD AUTHACC LENGTH(3) LABELS('ALL','ACC')

FIELD SYSDATE SORTPRTY(3)

FIELD SYSTIME SORTPRTY(4)

FIELDS TABLEID TABLDATE TABLTIME

FIELD VIOLATN FORMAT(X)

SELECT IF EVENTYPE EQ X'02' AND ACCESSTP EQ X'02'

RUN

/*

Input

Resource Class Report Sample ALRTVVVI Reports

6-36 Auditing and Report Writing Guide

DATE: 01/16/2000 06:21:25 PAGE: 000001

B I M - A L E R T / V S E

*** RESOURCE CLASS REPORT ***

RESOURCE CLASS: DITTO

TABLE TABLE

RESOURCE EVENT ID-CARD REQ ALL SYSTEM SYSTEM TABLE ASSEMBLY ASSEMBLY VIOLATION

NAME SECID USERID JOB NAME ACC ACC DATE TIME ID DATE TIME CODE

-------- ----- ------- -------- --- --- ------ ------ ----- -------- -------- ---------

COMMAND:NOPEN.DVT SECADMIN EKEHLER DITTO EXE EXE 01/13/2000 08:44 B1 01/10/2000 08:16 20

COMMAND:NOPEN.DVT SECADMIN EKEHLER DITTO EXE EXE 01/13/2000 08:48 B1 01/13/2000 08:47 20

COMMAND:NOPEN.DVT UNKNOWN NO-USER DITTO EXE NON 01/13/2000 08:51 B1 01/13/2000 08:47 E0

COMMAND:NOPEN.DVT SECADMIN ERIC DITEERIC EXE EXE 01/13/2000 09:06 B1 01/13/2000 08:47 20

DATE: 01/16/2000 06:21:25 PAGE: 000002

B I M - A L E R T / V S E

*** RESOURCE CLASS REPORT ***

RESOURCE CLASS: LIBMEM

TABLE TABLE

RESOURCE EVENT ID-CARD REQ ALL SYSTEM SYSTEM TABLE ASSEMBLY ASSEMBLY VIOLATION

NAME SECID USERID JOB NAME ACC ACC DATE TIME ID DATE TIME CODE

-------- ----- ------- -------- --- --- ------ ------ ----- -------- -------- ---------

BIMCOL.ALT50A.AXP.A SECADMIN KEN CATMAC50 UPD UPD 01/13/2000 11:14 B1 01/13/2000 08:47 20

BIMCOL.ALT50A.AXP.A SECADMIN KEN CATMAC50 ALT UPD 01/13/2000 11:14 B1 01/13/2000 08:47 A0

BIMCOL.ALT50A.AXPBR14.PHASE SECADMIN EKEHLER AXPHP6X EXE EXE 01/15/2000 09:10 B1 01/13/2000 08:47 20

BIMCOL.ALT50A.AXPBR14.PHASE SECADMIN EKEHLER AXPHP6X EXE EXE 01/15/2000 13:12 B1 01/15/2000 13:07 20

BIMCOL.ALT50A.AXPCNVT.PHASE UNKNOWN PG VSE1CICS EXE NON 01/10/2000 04:05 B1 01/08/2000 04:52 E0

BIMCOL.ALT50A.AXPCNVT.PHASE UNKNOWN PG VSE1CICS EXE NON 01/13/2000 08:41 B1 01/10/2000 08:16 E0

BIMCOL.ALT50A.AXPCNVT.PHASE UNKNOWN PG VSE1CICS EXE NON 01/15/2000 03:32 B1 01/13/2000 08:47 E0

BIMCOL.ALT50A.AXPCNVT.PHASE UNKNOWN R000 VSE1CICS EXE NON 01/15/2000 13:07 B1 01/13/2000 08:47 E0

BIMCOL.ALT50A.AXPHDT1.PHASE SECADMIN EKEHLER DITTO EXE REA 01/13/2000 08:44 B1 01/10/2000 08:16 20

BIMCOL.ALT50A.AXPHDT1.PHASE UNKNOWN NO-USER DITTO EXE NON 01/13/2000 08:51 B1 01/13/2000 08:47 E0

BIMCOL.ALT50A.AXPHDT8.PHASE SECADMIN EKEHLER DITTO EXE REA 01/13/2000 08:44 B1 01/10/2000 08:16 20

BIMCOL.ALT50A.AXPHDT8.PHASE UNKNOWN NO-USER DITTO EXE NON 01/13/2000 08:51 B1 01/13/2000 08:47 E0

BIMCOL.ALT50A.AXPHJ4.PHASE UNKNOWN NO-USER JCLSCHED EXE NON 01/10/2000 10:00 B1 01/10/2000 08:16 E0

BIMCOL.ALT50A.AXPHJ4.PHASE UNKNOWN NO-USER JCLSCHED EXE NON 01/14/2000 16:08 B1 01/13/2000 08:47 E0

BIMCOL.ALT50A.AXPHP6.PHASE ASISTAT NO-USER F1ASI EXE NON 01/10/2000 03:37 B1 01/08/2000 04:52 A0

BIMCOL.ALT50A.AXPHP6D.PHASE ASISTAT NO-USER F1ASI EXE NON 01/15/2000 13:07 B1 01/13/2000 08:47 A0

BIMCOL.ALT50A.AXPI1.PHASE UNKNOWN EXP-USER CALR50A EXE NON 01/10/2000 04:05 B1 01/08/2000 04:52 E0

BIMCOL.ALT50A.AXPI1.PHASE UNKNOWN UNK-USER CALR50A EXE NON 01/10/2000 04:11 B1 01/10/2000 04:05 E0

BIMCOL.ALT50A.AXPI10C.PHASE ASIBG FORSEC BGASI EXE NON 01/10/2000 03:36 B1 01/08/2000 04:52 A0

BIMCOL.ALT50A.AXPI10C.PHASE ASIBG FORSEC BGASI EXE NON 01/14/2000 15:20 B1 01/13/2000 08:47 A0

Output

Sample ALRTVVVI Reports SECID/User Dataset Summary Report

Chapter 6. ALRTVVVI Violation Log File Report (VSE) 6-37

SECID/User Dataset Summary Report

Use the following command statements to produce a report that shows all dataset accesses logged for a particular SECID or user. The report produced is shown below.

// EXEC ALRTVREP,SIZE=256K

REPORT ALRTVVVI

XFORM NAVAIL(X'40',T'N/A')

TITLES 'B I M - A L E R T / V S E' -

' ' -

'*** SECID/USER DATASET ACCESS ***'

SUBTITLE EVENTSEC LABEL('SECID: ') LINE(2) SORTPRTY(1)-

CTLBREAK(P)

SUBTITLE IDCDUSER LABEL('USERID: ') LINE(2) SORTPRTY(2) -

JUSTIFY(C)

SUBTITLE LOGONTYP LABEL('LOGON: ') LINE(3) XFORM(NAVAIL)

SUBTITLE SUBMITYP LABEL('SUBMIT: ') LINE(3) XFORM(NAVAIL) -

JUSTIFY(C)

FIELD POWERJOB SORTPRTY(3) CTLBREAK(S)

FIELD POWERJB# SORTPRTY(4) REPCHAR(' ')

FIELD JOBNAME

FIELD SYSDATE SORTPRTY(5) SORTSEQ(AS) REPCHAR('.')

FIELDS SYSTIME PARTINID DSTYPE DATASET PROGRAM

FIELD REQACC LENGTH(3) LABELS('REQ','ACC')

FIELD AUTHACC LENGTH(3) LABELS('ALL','ACC')

SELECT IF EVENTYPE EQ X'02' AND ACCESSTP EQ X'00'

RUN

/*

DATE: 01/26/2000 05:49:39 PAGE: 000001

B I M - A L E R T / V S E

*** SECID/USER DATASET ACCESS ***

SECID: OPERATNS USERID: ADMN

LOGON: CMS SUBMIT: JCLMAN

POWER

POWER JOB SYSTEM SYSTEM PTN PROGRAM REQ ALL

JOB NAME NBR JOB NAME DATE TIME ID DATASET TYPE DATASET NAME NAME ACC ACC

-------- ----- -------- ------ ------ --- ------------ ------------ ------- --- ---

GSPDSU 749 GSPDSU 01/26/2000 02:30 F6 DISK VSE.BIM.COLUMBUS.MON.BACKUP GSPDSU ALT REA

GSPDSU 750 GSPDSU . 02:32 F5 DISK VSE.BIM.COLUMBUS.VIO.BACKUP GSPDSU ALT REA

GSPDSU 751 GSPDSU . 02:33 F5 DISK VSE.BIM.COLUMBUS.EVT.BACKUP GSPDSU ALT REA

PCSEVBR 752 PCSEVBR 01/26/2000 02:34 F5 DISK VSE.BIM.COLUMBUS.EVT.EVENTS.BACKUP PCSEVBR ALT REA

DATE: 01/26/2000 05:49:39 PAGE: 000002

B I M - A L E R T / V S E

*** SECID/USER DATASET ACCESS ***

SECID: UNKNOWN USERID: UNK-USER

LOGON: Y SUBMIT: OTHER

POWER

POWER JOB SYSTEM SYSTEM PTN PROGRAM REQ ALL

JOB NAME NBR JOB NAME DATE TIME ID DATASET TYPE DATASET NAME NAME ACC ACC

-------- ----- -------- ------ ------ --- ------------ ------------ ------- --- ---

CALR50A 754 CALR50A 01/26/2000 05:17 BG DISK ALERT.XP.RULEST.TO.ASSEMBLE AXPU002 UPD ALT

CALR50A CALR50A . 05:17 BG DISK ALERT.S1SCTY.V50 AXPU002 REA ALT

Input

Output

SECID/User Resource Summary Report Sample ALRTVVVI Reports

6-38 Auditing and Report Writing Guide

SECID/User Resource Summary Report

Use the following command statements to produce a report similar to that given on the following two pages. The report shows all resource accesses logged for a particular SECID/user. This report is similar to the pre-defined SECID/USER Job Summary Report supplied with BIM-ALERT/VSE.

// EXEC ALRTVREP,SIZE=256K

REPORT ALRTVVVI

XFORM NAVAIL(X'40',T'N/A')

TITLES 'B I M - A L E R T / V S E' -

' ' -

'*** SECID/USER RESOURCE ACCESS ***'

SUBTITLE EVENTSEC LABEL('SECID: ') LINE(2) SORTPRTY(1) -

CTLBREAK(P)

SUBTITLE IDCDUSER LABEL('USERID: ') LINE(2) SORTPRTY(2) -

JUSTIFY(C)

SUBTITLE LOGONTYP LABEL('LOGON: ') LINE(3) XFORM(NAVAIL)

SUBTITLE SUBMITYP LABEL('SUBMIT: ') LINE(3) XFORM(NAVAIL) -

JUSTIFY(C)

FIELD POWERJOB SORTPRTY(3) CTLBREAK(S)

FIELD POWERJB# SORTPRTY(4) REPCHAR(' ')

FIELD JOBNAME

FIELD SYSDATE SORTPRTY(5) SORTSEQ(AS) REPCHAR('.')

FIELDS SYSTIME PARTINID RCLASS RESNAME PROGRAM

FIELD REQACC LENGTH(3) LABELS('REQ','ACC')

FIELD AUTHACC LENGTH(3) LABELS('ALL','ACC')

SELECT IF EVENTYPE EQ X'02' AND ACCESSTP EQ X'02'

RUN

/*

Input

Sample ALRTVVVI Reports SECID/User Resource Summary Report

Chapter 6. ALRTVVVI Violation Log File Report (VSE) 6-39

DATE: 01/27/2000 14:55:54 PAGE: 000001

B I M - A L E R T / V S E

*** SECID/USER RESOURCE ACCESS ***

SECID: SECADMIN USERID: EKEHLER

LOGON: CMS SUBMIT: CMS

POWER

POWER JOB SYSTEM SYSTEM PTN RESOURCE RESOURCE PROGRAM REQ ALL

JOB NAME NBR JOB NAME DATE TIME ID CLASS NAME NAME ACC ACC

-------- ----- -------- ------ ------ --- -------- -------- ------- --- ---

ALERT50A 842 ALERT50A 01/26/2000 07:29 FB EXECUTE AXPL7 NO NAME EXE EXE

AXPB001 839 AXPB001 01/26/2000 07:19 BG EXECUTE AXPB001 NO NAME EXE EXE

AXPB001 AXPB001 . 07:19 BG LIBMEM BIMCOL.RULES50A.ALERTB1.PHASE AXPB001 EXE ALT

AXPL11 843 AXPL11 01/26/2000 07:36 C2 EXECUTE AXPL11 NO NAME EXE EXE

S1B190A 846 S1B190A 01/26/2000 08:23 BG EXECUTE SORT NO NAME EXE EXE

S1B190A 850 S1B190A . 12:19 BG EXECUTE SORT NO NAME EXE EXE

S1B190A 851 S1B190A . 12:20 BG EXECUTE SORT NO NAME EXE EXE

S1B190A S1B190A . 12:20 BG EXECUTE S1B190 NO NAME EXE EXE

S1B500 853 S1B500 01/26/2000 12:36 BG EXECUTE S1B500 NO NAME EXE EXE

S1B510 854 S1B510 01/26/2000 12:42 BG EXECUTE S1B510 NO NAME EXE EXE

S1B520 855 S1B520 01/26/2000 12:49 BG EXECUTE S1B520 NO NAME EXE EXE

S1B540 856 S1B540 01/26/2000 12:56 BG EXECUTE S1B540 NO NAME EXE EXE

S1B550 857 S1B550 01/26/2000 13:03 F5 EXECUTE S1B550 NO NAME EXE EXE

S1B550 858 S1B550 . 13:05 F5 EXECUTE S1B550 NO NAME EXE EXE

S1B560 859 S1B560 01/26/2000 13:23 FB EXECUTE S1B560 NO NAME EXE EXE

S1B560 861 S1B560 . 13:56 FB EXECUTE S1B560 NO NAME EXE EXE

S1SCTY 862 S1SCTY 01/26/2000 14:41 FB EXECUTE IDCAMS NO NAME EXE EXE

ALRTVREP 865 ALRTVREP 01/26/2000 14:55 F5 EXECUTE ALRTVREP NO NAME EXE EXE

AXPHJ19 816 AXPHJ19 01/26/2000 05:35 FB LIBMEM BIMCOL.ALT50A.AXPHJ19.OBJ LIBR UPD UPD

AXPHJ19 AXPHJ19 . 05:35 FB LIBMEM BIMCOL.ALT50A.MSAUSRX.PHASE $LNKEDT UPD UPD

AXPHJ19 AXPHJ19 . 05:35 FB LIBMEM BIMCOL.ALT50A.MSAUSRX.PHASE $LNKEDT UPD UPD

AXPHJ19 AXPHJ19 . 05:35 FB LIBMEM BIMCOL.AXPOBJ.AXPHJ19.OBJ LIBR UPD UPD

AXPHJ19 AXPHJ19 . 05:35 FB LIBMEM BIMCOL.AXPOBJ.AXPHJ19.OBJ LIBR UPD UPD

AXPHJ19 AXPHJ19 . 05:35 FB LIBMEM BIMCOL.ALT50A.AXPHJ19.OBJ LIBR UPD UPD

AXPHJ19D 820 AXPHJ19D 01/26/2000 05:37 FB LIBMEM BIMCOL.AXPOBJ.AXPHJ19D.OBJ LIBR UPD UPD

AXPHJ19D AXPHJ19D . 05:37 FB LIBMEM BIMCOL.ALT50A.AXPHJ19D.PHASE $LNKEDT UPD UPD

AXPHJ19D AXPHJ19D . 05:37 FB LIBMEM BIMCOL.AXPOBJ.AXPHJ19D.OBJ LIBR ALT UPD

AXPHJ19D AXPHJ19D . 05:37 FB LIBMEM BIMCOL.ALT50A.AXPHJ19D.PHASE $LNKEDT UPD UPD

AXPHJ19D AXPHJ19D . 05:37 FB LIBMEM BIMCOL.ALT50A.AXPHJ19E.PHASE $LNKEDT UPD UPD

Output

7-1

7

ALRTVCAU Audit File Report (CICS)

This chapter describes the ALRTVCAU audit file report, which you can use to select and display information from the BIM-ALERT/CICS audit file, as well as user profile information from the BIM-ALERT/VSE audit file.

Introduction .............................................................................................................. 7-3 General Information ............................................................................................. 7-3 Sample JCL .......................................................................................................... 7-3 Input Record Description ...................................................................................... 7-4 Field Information .................................................................................................. 7-7

Fieldname List .......................................................................................................... 7-9 Common Segment Fields ...................................................................................... 7-9 System Options and Parameter Fields ................................................................. 7-15 Terminal and Operator Profile Fields .................................................................. 7-34 Secured Resource Fields ..................................................................................... 7-52 Secured Resource Authorization Fields ............................................................... 7-67 Activation and Deactivation Fields ..................................................................... 7-70 Administrator Maintenance Fields ...................................................................... 7-73 Location Information Fields ................................................................................ 7-76 Password Change Field ....................................................................................... 7-79 Program Refresh Fields....................................................................................... 7-80 Optional Zap Fields ............................................................................................ 7-81 Record Dump Information .................................................................................. 7-82

Sample ALRTVCAU Reports ................................................................................. 7-83 Introduction ........................................................................................................ 7-83 System Options Update Report............................................................................ 7-83

7-2 Auditing and Report Writing Guide

System Parameter Change Report ....................................................................... 7-85 System Parameter Update Report ........................................................................ 7-86 Global Terminal/Operator Parameter Change Report .......................................... 7-88 Resource Name Update Report ........................................................................... 7-90 Resource Update Report...................................................................................... 7-92 Resource Activation and Deactivation Report ..................................................... 7-94 Administrator Change Activity Report................................................................ 7-95 Location Change Report ..................................................................................... 7-97 Operator Profile Change Report .......................................................................... 7-98

Introduction General Information

Chapter 7. ALRTVCAU Audit File Report 7-3

Introduction

General Information

Information contained in the BIM-ALERT/CICS audit file is available for selection and display in the ALRTVCAU report type. This information includes changes made to system options and parameters, operator and terminal system parameters, and operator and terminal profiles. The audit file also includes information about the addition or updating of secured resource definitions, activation and deactivation activity, and changes to administrative ownership of resources.

You can also use the ALRTVCAU report type to select user profile information that relates to the batch security profile fields.

This report type requires the BIM-ALERT/CICS audit file, or a VSAM copy of the file, as input. It also accepts a sequential tape or disk file with variable-length records as input.

The phase ALRTVCAU is loaded by ALRTVREP when this report type is specified on a REPORT command statement. ALRTVCAU reads the input file and formats the data for the report.

Sample JCL

The following sample JCL can be used to execute any ALRTVCAU report:

// JOB ALRTVCAU BIM-ALERT/CICS audit file report

// LIBDEF PHASE,SEARCH=.... <== optional

// DLBL IJSYSUC,'user.catalog.name',,VSAM <== optional

// DLBL SORTWK1,'SORTWK1.SYS001.WORKFILE',0000,VSAM, <== optional

DISP=(,DELETE),RECORDS=2000,RECSIZE=4096 <== optional

// DLBL S1SAUDT,'ALERT.S1SAUDT.V51',,VSAM

// EXEC ALRTVREP,SIZE=256K

.

.

/*

/&

Report Description

Input Dataset

I/O Module Name

Input Record Description Introduction

7-4 Auditing and Report Writing Guide

Input Record Description

Each BIM-ALERT/CICS audit file record contains an 18-byte record key and one of several subordinate information field types (segments), determined by the contents of the RECTYPE field contained in the common segment of the record.

The common segment contains control information about the record and is contained in every record type.

The 01000000 segment contains all information regarding changes to the system options (UPOP or UCOP), system parameters (UPAR), or terminal or operator system parameters (UTOP).

System Options Or Parameter Lists (Type 01010000)

The 01010000 segment fields can be used to produce a report of all before and after data concerning the system options, system parameters, or terminal or operator system parameters.

System Option Values (Type 01020000)

The type 01020000 fields allow you to select and report on specific system options (for example, Operator Transaction Security) logged as a result of running UPOP or UCOP.

System Parameter Values (Type 01030000)

The type 01030000 fields allow you to select and report on specific system parameters (for example, Maximum Violations) logged as a result of running UPAR to update the system parameters.

Terminal or Operator Parameter Values (Type 01040000)

The type 01040000 fields allow you to select and report on specific terminal and operator parameters (for example, Post-Sign-On Program) logged as a result of running UTOP to update terminal or operator parameters.

The type 02000000 fields can be used to produce a listing of all the terminal or operator profiles that have been changed, either via the online panels or via the batch file update utilities.

Terminal Or Operator Data List (Type 02010000)

The type 02010000 fields produce a complete listing of all before and after data for each field in the terminal or operator record that was logged as a result of online changes or batch utility updates.

Terminal Or Operator Data Fields (Type 02020000)

The type 02020000 fields allow you to select and report on specific terminal and operator data fields (for example, the Inactive Time Limit field) logged as a result of updates made via the online panels or the batch utility update programs S1U550 and S1U560.

Introduction

Common

Information (Type

00000000)

System Options or

Parameter

Information (Type

01000000)

Terminal or

Operator

Maintenance (Type

02000000)

Introduction Input Record Description

Chapter 7. ALRTVCAU Audit File Report 7-5

User Profile Data Fields (Type 02030000)

The type 02030000 fields allow you to select and report on specific operator profile data fields logged as a result of updates made via the online panels or the batch utility update program S1U550.

The type 03000000 fields can be used to produce a listing of all the secured resource definitions that have been added or updated via the online panels.

Secured Resource Information List (Type 03010000)

The type 03010000 fields produce a complete listing of all before and after data for each field in the secured resource (transaction, program, file, or map) record.

Secured Resource Field Values (Type 03020000)

The type 03020000 fields allow you to select and report on specific data fields (for example, the Access Time field) in a secured resource record.

Restricted Map Field Information (Type 03030000)

The type 03030000 fields allow you to select and report on specified map field definitions in the restricted map records.

Field Resource Field Values for Files (Type 03040000)

The type 03040000 fields allow you to select and print the data that makes up the field resource definitions for files.

Field Resource Segments for Files (Type 03040100)

The type 03040100 fields allow you to select and print the data that makes up the segments in a field resource definition for a file.

Field Resource Field Values for Maps (Type 03050000)

The type 03050000 fields allow you to select and print the data that makes up the field resource definitions for maps.

Field Resource Segments for Maps (Type 03050100)

The type 03050100 fields allow you to select and print the data that makes up the segments in a field resource definition for a map.

The type 04000000 fields can be used to produce a listing of all resources (transactions, programs, files, maps, or field resources) added to or deleted from any terminal or operator profile.

Secured Resource Authorization Lists (Type 04010000)

The type 04010000 fields allow you to produce reports showing all resources added to or deleted from terminals and operators.

The type 05000000 fields show a global list of all activation or deactivation activity.

Activate Or Deactivate Data Fields (Type 05010000)

Secured Resource

Update (Type

03000000)

Secured Resource

Authorization

Information Type

04000000

Activate Or

Deactivate

Information (Type

05000000)

Input Record Description Introduction

7-6 Auditing and Report Writing Guide

The type 05010000 fields can be used to tailor activation or deactivation reports to specific resource types or specific resources.

The type 06000000 fields can be used to produce a global report of the types of resources switched between administrators (terminals or operators), and the type of operation being performed (change or reclaim).

Administrator Maintenance Information (Type 06010000)

The type 06010000 fields can be used to produce detailed reports about specific operators or terminals being switched from administrator to administrator.

The type 07000000 fields can be used to produce a global report of all location record maintenance.

Location ID Information List (Type 07010000)

The type 07010000 fields can be used to select and report on updates made to specific location records.

Location ID Field Values (Type 07020000)

The type 07020000 fields produce a complete listing of all before and after data for each field in the location records.

The type 08000000 fields can be used to produce reports logged as a result of the OPWD optional transaction.

The type 09000000 fields can be used to produce reports containing the data logged as a result of the REFR transaction to NEWCOPY monitors, user exits, or logos.

The optional zap information segment contains data regarding the dynamic installation and removal of optional zaps using VERS.

The type FF000000 fields are used to produce the FILEDUMP listing of the audit file records.

Administrator

Maintenance

Information (Type

06000000)

Location ID

Maintenance (Type

07000000)

Password Change

Information (Type

08000000)

Program Refresh

Information (Type

09000000)

Optional Zap

Information (Type

0A000000)

Record Dump

Information (Type

FF000000)

Introduction Field Information

Chapter 7. ALRTVCAU Audit File Report 7-7

Field Information

Report output is comprised of one or more data fields extracted from an input dataset and formatted according to default, or user, specifications. Each data field is selected from a pre-defined list of ALRTVCAU fieldnames.

At report generation time, each fieldname specified is assigned a report column, positioned from left to right across the report page in the order in which the fieldnames were specified.

Data corresponding to the selected fieldname is located, extracted from the physical input record by the ALRTVCAU I/O module, and moved to, or transformed into, the output report column, using either the default values described in the fieldname entries below or as specified by the user in a FIELD command statement.

The following information is provided for each ALRTVCAU fieldname:

Heading Description

Group Field: YES Indicates that the fieldname being defined is a group fieldname containing several individual fieldnames within the group. The individual fieldnames are listed.

If the group fieldname is specified in the SUBTITLE, FIELD, or FIELDS command statement, input data represented by all individual fieldnames within the group will be printed as a single field.

If the individual fieldnames are specified in a command statement, each fieldname is assigned its own column in the report output detail line.

Field type Each fieldname is defined as a particular field type. By definition, type 00000000 information is present in every input record. Following the type 00000000 common segment information, ALRTVCAU records will contain one subordinate type of field information, containing information as indicated by the RECTYPE field.

Default label-n Default label information is positioned in the output report, if requested, at the top of each page of output. Up to three labels can be specified for each field, and will be placed above the report column reserved for the fieldname

Occurrences: variable Indicates that the field is defined within a variable-occurrence segment. This fieldname, if included on any FIELD or FIELDS command statement, will generate a report detail line for every occurrence of the information in the record.

Belongs to group: Indicates a higher level group fieldname which can be included on any SUBTITLE, FIELD, or FIELDS command statement to display the data represented by this fieldname.

Input data length: Represents the defined length of the data in the input record corresponding to the fieldname. If the length is indicated as variable, then the length of the data field has no pre-defined length, and the amount of data present is defined in each individual input record.

(continued)

Field Information Introduction

7-8 Auditing and Report Writing Guide

Heading Description

Input data format Indicates that the data in the input record is in one of the following formats:

X Hexadecimal or binary C Printable characters P Packed-decimal

Default output length This numeric value is the default value used to determine the number of character positions to be reserved in the output report detail line for the column in which the data will be positioned. This value can be increased or decreased by using the LENGTH keyword on a FIELD command statement.

Default output format One of the following output formats is assigned by default for each fieldname; it determines how the data will appear in the output report.

C Character. The input data is simply moved from the input record to the report detail line. Each non-printable character is translated to a period (.).

X Hexadecimal. Each byte or character in the input field is translated to its two-character hexadecimal equivalent.

Z Zoned-decimal. The input data field, up to a length of four, is treated as a binary number and converted to its decimal equivalent. By default, zoned-decimal formatted output fields are zero-suppressed and right-justified in the report column. Users can override the field justification value by using the JUSTIFY keyword on the FIELD command statement. Zero-suppression can be overridden by specifying NOTRUNC on the FIELD or SUBTITLE command statement.

T Transformed. The input data field is replaced by an alternate value, either as set forth in the transformation table shown, or as determined by some other programmed transformation algorithm, such as that performed on the BIM-ALERT/CICS TERMPHON field.

Users can override the field output format value by using the FORMAT keyword on the FIELD command statement.

Fieldname List Common Segment Fields

Chapter 7. ALRTVCAU Audit File Report 7-9

Fieldname List

Common Segment Fields

The following field names can be included in any ALRTVCAU report SUBTITLE, FIELD, or FIELDS command statements. These fieldnames are contained in the common segment of all input records and will be printed on all detail lines when appropriate.

Field Description

KEY Input record key.

Field type: 00000000 - Common segment information Default label RECORD KEY Input data length: 18 Input data format: Hexadecimal (X) Default output data length: 36 Default output data format: Hexadecimal (X)

RECLEN Input record length.

Field type: 00000000 - Common segment information Default label-1: INPUT Default label-2: RECORD Default label-3: LENGTH Input data length: 2 Input data format: Hexadecimal (X) Default output data length: 6 Default output data format: Zoned-decimal (Z)

DSNAME Input file dataset name.

Field type: 00000000 - Common segment information Default label-1: INPUT DSNAME Input data length: 44 Input data format: Character (C) Default output data length: 44 Default output data format: Character (C)

(continued)

Common Segment Fields Fieldname List

7-10 Auditing and Report Writing Guide

Heading Description

INFOTYPE Information type, which describes the type of information contained in the field or record.

Field type: 00000000 - Common segment information Default label-1: INFO Default label-2: TYPE Input data length: 4 Input data format: Hexadecimal (X) Default output length: 25 Default output format: Transformed (T)

X'00000000'..T'COMMON SEGMENT INFO ' X'01000000'..T'SYSTEM OPTION/PARM CHANGE' X'01010000'..T'SYSTEM OPTION/PARM LIST ' X'01020000'..T'SYSTEM OPTION VALUES ' X'01030000'..T'SYSTEM PARAMETER VALUES ' X'01040000'..T'TERM/OPER PARM VALUES ' X'02000000'..T'TERM/OPER MAINTENANCE ' X'02010000'..T'TERM/OPER DATA LIST '

X'02020000'..T'TERM/OPER DATA FIELDS ' X'02030000'..T'USERID DATA FIELDS ' X'03000000'..T'SECURED RESOURCE UPDATE ' X'03010000'..T'SEC'D RESRC INFO LIST ' X'03020000'..T'SEC'D RESRC FIELD VALUES ' X'03030000'..T'RESTRICTED MAP FIELD INFO' X'03040000'..T'FIELD RESOURCE FIELD VALU'

X'03040100'.T'FIELD RESOURCE SEGMENTS ' X'04000000'.T'SEC'D RSRC AUTHORIZATION ' X'04010000'.T'SEC'D RSRC AUTHORIZATION ' X'05000000'.T'ACTIVATE-DEACTIVATE INFO ' X'05010000'.T'ACTIVATE-DEACTIVATE INFO ' X'06000000'.T'ADMINISTRATOR MAINT INFO ' X'06010000'.T'ADMINISTRATOR MAINT INFO ' X'07000000'.T'LOCATION ID MAINTENANCE '

X'07010000'.T'LOCATION ID INFO LIST ' X'07020000'.T'LOCATION ID FIELD VALUES ' X'08000000'.T'PASSWORD CHG FIELD ' X'09000000'.T'PROGRAM REFRESH INFO ' X'0A000000'.T'OPTIONAL ZAP INFORMATION ' X'FF000000'.T'RECORD DUMP INFORMATION '

SEQNUM Output detail line sequence number.

Field type: 00000000 - Common segment information Default label-1: None Input data length: 4 Input data format: Hexadecimal (X) - Binary fullword Default output length: 6 Default output format: Zoned-decimal (Z)

INRECNUM Physical input record sequence number, assigned by the ALRTVCAU I/O module when the input record is read.

Field type: 00000000 - Common segment information Default label-1: INPT Default label-2: RECD Default label-3: NMBR Input data length: 4 Input data format: Hexadecimal (X) - Binary fullword Default output length: 6 Default output format: Zoned-decimal (Z)

DATE Date change was made.

Field type: 00000000 - Common segment information Default label-1: DATE Input data length: 4 Input data format: Hexidecimal (X) Default output data length: 10 Default output data format: Transformed (T) X'AFCBB7AD'.....T'01/01/1998' (or user-defined DATEFORM)

Fieldname List Common Segment Fields

Chapter 7. ALRTVCAU Audit File Report 7-11

(continued)

Common Segment Fields Fieldname List

7-12 Auditing and Report Writing Guide

Heading Description

TIME Time change was made.

Field type: 00000000 - Common segment information Default label-1: TIME Input data length: 4 Input data format: Packed decimal (P) Default output data length: 5 Default output data format: Transformed (T) X'AFCBB7AD'.....T' 08:25 ' (or user-defined TIMEFORM)

SYSTEMID CICS SYSID where change was made.

Field type: 00000000 - Common segment information Default label-1: SYS-ID Input data length: 8 Input data format: Character (C) Default output data length: 8 Default output data format: Character (C)

ADMINAME Name of administrator or subadministrator who made the change.

Field type: 00000000 - Common segment information Default label-1: ADMINISTRATOR Default label-1: NAME Input data length: 20 Input data format: Character (C) Default output data length: 20 Default output data format: Character (C)

ADMINID User ID of administrator or subadministrator who made the change.

Field type: 00000000 - Common segment information Default label-1: ADMINISTR Default label-2: ID Input data length: 9 Input data format: Character (C) Default output data length: 9 Default output data format: Character (C)

TRANID BIM-ALERT function executed to make the change.

Field type: 00000000 - Common segment information Default label-1: TRAN Default label-1: ID Input data length: 4 Input data format: Character (C) Default output data length: 4 Default output data format: Character (C)

(continued)

Fieldname List Common Segment Fields

Chapter 7. ALRTVCAU Audit File Report 7-13

Heading Description

TRANTYPE BIM-ALERT audit transaction type.

Field type: 00000000 - Common segment information Default label-1: AUDIT Default label-2 TRANSACTION Default label-3: TYPE Input data length: 4 Input data format: Character (C) Default output data length: 9 Default output data format: Transformed (T)

C'UCOP'.....T'PARM ' C'UPOP'.....T'PARM ' C'UPAR'.....T'PARM ' C'UTOP'.....T'PARM ' C'ATSI'.....T'TERMOPER ' C'ATSB'.....T'TERMOPER ' C'UTSI'.....T'TERMOPER '

C'UTSB'.....T'TERMOPER ' C'AOSI'.....T'TERMOPER ' C'AOSB'.....T'TERMOPER ' C'UOSI'.....T'TERMOPER ' C'UOSB'.....T'TERMOPER ' C'ASTR'.....T'RESOURCE ' C'USTR'.....T'RESOURCE ' C'ASPR'.....T'RESOURCE ' C'USPR'.....T'RESOURCE ' C'ASFL'.....T'RESOURCE '

C'USFL'.....T'RESOURCE ' C'AFIL'.....T'ACTIVATE ' C'DFIL'.....T'ACTIVATE ' C'ASMP'.....T'RESOURCE ' C'USMP'.....T'RESOURCE ' C'ASFF'.....T'RESOURCE ' C'USFF'.....T'RESOURCE ' C'ASFM'.....T'RESOURCE ' C'USFM'.....T'RESOURCE ' C'ATTR'.....T'AUTHORIZE' C'ATTB'.....T'AUTHORIZE'

C'UTTR'.....T'AUTHORIZE' C'UTTB'.....T'AUTHORIZE' C'ATPR'.....T'AUTHORIZE' C'ATPB'.....T'AUTHORIZE' C'UTPR'.....T'AUTHORIZE' C'UTPB'.....T'AUTHORIZE' C'ATFL'.....T'AUTHORIZE' C'ATFB'.....T'AUTHORIZE' C'UTFL'.....T'AUTHORIZE' C'UTFB'.....T'AUTHORIZE'

C'ATMP'.....T'AUTHORIZE' C'ATMB'.....T'AUTHORIZE' C'UTMP'.....T'AUTHORIZE' C'UTMB'.....T'AUTHORIZE' C'ATFS'.....T'AUTHORIZE' C'UTFS'.....T'AUTHORIZE' C'AAUP'.....T'ADD OPRID' C'UAUP'.....T'UPD OPRID'

C'DAUP'.....T'MASS RETR' C'AOPR'.....T'AUTHORIZE' C'AOPB'.....T'AUTHORIZE' C'UOPR'.....T'AUTHORIZE' C'UOPB'.....T'AUTHORIZE' C'AOFL'.....T'AUTHORIZE' C'AOFB'.....T'AUTHORIZE'

C'UOFL'.....T'AUTHORIZE' C'UOFB'.....T'AUTHORIZE' C'AOMP'.....T'AUTHORIZE' C'AOMB'.....T'AUTHORIZE' C'UOMP'.....T'AUTHORIZE' C'UOMB'.....T'AUTHORIZE' C'AOFS'.....T'AUTHORIZE' C'UOFS'.....T'AUTHORIZE' C'ATRN'.....T'ACTIVATE ' C'DTRN'.....T'ACTIVATE '

C'APRG'.....T'ACTIVATE ' C'DPRG'.....T'ACTIVATE ' C'AOTR'.....T'AUTHORIZE' C'AOTB'.....T'AUTHORIZE' C'UOTR'.....T'AUTHORIZE' C'UOTB'.....T'AUTHORIZE' C'AMAP'.....T'ACTIVATE ' C'DMAP'.....T'ACTIVATE ' C'ACTT'.....T'ACTIVATE ' C'DATM'.....T'ACTIVATE ' C'ACTO'.....T'ACTIVATE '

C'DAOP'.....T'ACTIVATE ' C'AFLD'.....T'ACTIVATE ' C'DFLD'.....T'ACTIVATE ' C'ADCT'.....T'ADMIN ' C'ADRT'.....T'ADMIN ' C'ADCO'.....T'ADMIN ' C'ADRO'.....T'ADMIN ' C'ACOM'.....T'LOCATION ' C'UCOM'.....T'LOCATION ' C'ADIV'.....T'LOCATION '

C'UDIV'.....T'LOCATION ' C'ADPT'.....T'LOCATION ' C'UDPT'.....T'LOCATION ' C'ASCT'.....T'LOCATION ' C'USCT'.....T'LOCATION ' C'OPWD'.....T'PASSWORD ' C'REFR'.....T'REFRESH ' C'VERS'.....T'OPTZAP '

(continued)

Common Segment Fields Fieldname List

7-14 Auditing and Report Writing Guide

Heading Description

TRANDESC Audit record description.

Field type: 00000000 - Common segment information Default label-1: AUDIT Default label-2: TRANSACTION Default label-3: DESCRIPTION Input data length: 4 Input data format: Character (C) Default output length: 24 Default output format: Transformed (T)

C'UCOP'...T'UPDATE CURRENT OPTIONS '

C'UPOP'...T'UPDATE PERMANENT OPTIONS'

C'UPAR'...T'UPDATE SYSTEM PARMS '

C'UTOP'...T'UPDATE TERM/OPER PARMS '

C'ATSI'...T'ADD TERMINAL ID '

C'ATSB'...T'ADD TERMINAL ID '

C'UTSI'...T'UPDATE TERMINAL ID '

C'UTSB'...T'UPDATE TERMINAL ID '

C'ASTR'...T'ADD SECURED TRANID '

C'USTR'...T'UPDATE SECURED TRANID '

C'ASPR'...T'ADD SECURED PROGRAM '

C'USPR'...T'UPDATE SECURED PROGRAM '

C'ASFL'...T'ADD SECURED FILE '

C'USFL'...T'UPDATE SECURED FILE '

C'ASMP'...T'ADD SECURED MAP '

C'USMP'...T'UPDATE SECURED MAP '

C'ATTR'...T'ADD TERMINAL TRANID '

C'ATTB'...T'ADD TERMINAL TRANID '

C'UTTR'...T'DELETE TERMINAL TRANID '

C'UTTB'...T'DELETE TERMINAL TRANID '

C'ATPR'...T'ADD TERMINAL PROGRAM '

C'ATPB'...T'ADD TERMINAL PROGRAM '

C'UTPR'...T'DELETE TERMINAL PROGRAM '

C'UTPB'...T'DELETE TERMINAL PROGRAM '

C'ATFL'...T'ADD TERMINAL FILE '

C'ATFB'...T'ADD TERMINAL FILE '

C'UTFL'...T'DELETE TERMINAL FILE '

C'UTFB'...T'DELETE TERMINAL FILE '

C'ATMP'...T'ADD TERMINAL MAP '

C'ATMB'...T'ADD TERMINAL MAP '

C'UTMP'...T'DELETE TERMINAL MAP '

C'UTMB'...T'DELETE TERMINAL MAP '

C'AOTR'...T'ADD OPERATOR TRANID '

C'AOTB'...T'ADD OPERATOR TRANID '

C'UOTR'...T'DELETE OPERATOR TRANID '

C'UOTB'...T'DELETE OPERATOR TRANID '

C'AAUP'...T'ADD OPERATOR ID '

C'AAUB'...T'ADD OPERATOR ID '

C'UAUB'...T'UPDATE OPERATOR ID '

C'AOPR'...T'ADD OPERATOR PROGRAM '

C'AOPB'...T'ADD OPERATOR PROGRAM '

C'UOPR'...T'DELETE OPERATOR PROGRAM '

C'UOPB'...T'DELETE OPERATOR PROGRAM '

C'AOFL'...T'ADD OPERATOR FILE '

C'AOFB'...T'ADD OPERATOR FILE '

C'UOFL'...T'DELETE OPERATOR FILE '

C'UOFB'...T'DELETE OPERATOR FILE '

C'AOMP'...T'ADD OPERATOR MAP '

C'AOMB'...T'ADD OPERATOR MAP '

C'UTMP'...T'DELETE OPERATOR MAP '

C'UTMB'...T'DELETE OPERATOR MAP '

C'ATRN'...T'ACTIVATE TRANSACTION '

C'DTRN'...T'DEACTIVATE TRANSACTION '

C'APRG'...T'ACTIVATE PROGRAM '

C'DPRG'...T'DEACTIVATE PROGRAM '

C'AFIL'...T'ACTIVATE FILE '

C'DFIL'...T'DEACTIVATE FILE '

C'AMAP'...T'ACTIVATE MAP '

C'DMAP'...T'DEACTIVATE MAP '

C'ACTT'...T'ACTIVATE TERMINAL '

C'DATM'...T'DEACTIVATE TERMINAL '

C'ACTO'...T'ACTIVATE OPERATOR '

C'DAOP'...T'DEACTIVATE OPERATOR '

C'ADCT'...T'CHANGE TERMINAL ADMIN '

C'ADRT'...T'RECLAIM TERMINAL ADMIN '

C'ADCO'...T'CHANGE OPERATOR ADMIN '

C'ADRO'...T'RECLAIM OPERATOR ADMIN '

C'ACOM'...T'ADD COMPANY '

C'UCOM'...T'UPDATE COMPANY '

C'ADIV'...T'ADD DIVISION '

C'UDIV'...T'UPDATE DIVISION '

C'ADPT'...T'ADD DEPARTMENT '

C'UDPT'...T'UPDATE DEPARTMENT '

C'ASCT'...T'ADD SECTION '

C'USCT'...T'UPDATE SECTION '

C'OPWD'...T'OPER PSWD CHANGE '

C'REFR'...T'PROGRAM REFRESH '

C'VERS'...T'OPTIONAL ZAP UPDATE '

C'UAUP'...T'UPDATE OPERATOR ID '

Fieldname List System Options and Parameter Fields

Chapter 7. ALRTVCAU Audit File Report 7-15

System Options and Parameter Fields

The following fieldnames can be included in any ALRTVCAU report SUBTITLE, FIELD, or FIELDS command statements. These fieldnames are contained in the ALRTVCAU input file security option, system parameter, or terminal or operator parameter records (segment X'010x0000'). These fields will be printed only on report detail lines with other segment 01xxxxxx record and common segment fieldnames.

Field Description

PARMTYPE Parameter type (sysopt, sysparm, or term or oper).

Field type: 01000000 - System options or parameter change Default label-1: PARAMETER Default label-2: TYPE Input data length: 1 Input data format: Hexadecimal (X) Default output length: 21 Default output format: Transformed (T) X'01'...........T'SYSTEM OPTION '

X'02'...........T'SYSTEM PARAMETER '

X'03'...........T'TERM/OPER SYSTEM PARM'

PARMCHGI System parameter immediate changes.

Default label-1: CHG Default label-2: IMM Field type: 01000000 - System options or parameter change Input data length: 1 Input data format: Character (C) Default output length: 3 Default output format: Transformed (T) C'Y'............T'YES'

C'N'............T'NO '

PARMFLAG Indicates before or after data value.

Default label-1: BEFORE Default label-2: /AFTER Field type: 01000000 - System options or parameter change Input data length: 1 Input data format: Character (C) Default output length: 6 Default output format: Transformed (T) C' '............T'N/A '

C'B'............T'BEFORE'

C'A'............T'AFTER '

(continued)

System Options and Parameter Fields Fieldname List

7-16 Auditing and Report Writing Guide

Heading Description

PARMCURR Option changes current or permanent.

Default label-1: CURRENT Default label-2: OR Default label-3: PERMANENT Field type: 01000000 - System options or parameter change Input data length: 1 Input data format: Character (C) Default output length: 9 Default output format: Transformed (T) C'C'............T'CURRENT '

C'P'............T'PERMANENT'

The 01010000 segment fields will produce a report containing all the before and after values logged as a result of updating the system options (UCOP or UPOP), system parameters (UPAR), or the system terminal or operator parameters (UTOP).

Field Description

PARMVALB Security parameter value before update.

Default label-1: BEFORE Field type: 01010000 - System options or parameter list Input data length: 20 Input data format: Character (C) Default output length: 20 Default output format: Character (C)

PARMVALA Security parameter value after update.

Default label-1: AFTER Field type: 01010000 - System options or parameter list Input data length: 20 Input data format: Character (C) Default output length: 20 Default output format: Character (C)

(continued)

System Options

Parameter List

Fieldname List System Options and Parameter Fields

Chapter 7. ALRTVCAU Audit File Report 7-17

Heading Description

PARMVALD Security parameter description. Default label-1: SECURITY Default label-2: PARAMETER Default label-3: DESCRIPTION Field type: 01010000 - System options or parameter list Input data length: 1 Input data format: Character (C) Default output length: 26 Default output format: Transformed (T) X'01'...........T'SYSTEM TRAN SECURITY ' X'02'...........T'SYSTEM PROG SECURITY ' X'03'...........T'SYSTEM FILE SECURITY ' X'04'...........T'OPERATOR TRAN SECURITY ' X'05'...........T'OPERATOR PROG SECURITY ' X'06'...........T'OPERATOR FILE SECURITY ' X'07'...........T'OPERATOR MAP SECURITY '

X'08'...........T'TERMINAL TRAN SECURITY ' X'09'...........T'TERMINAL PROG SECURITY ' X'0A'...........T'TERMINAL FILE SECURITY ' X'0B'...........T'TERMINAL MAP SECURITY ' X'0C'...........T'VIOLATION AUDITING ' X'0D'...........T'TERMINAL SCHEDULING ' X'0E'...........T'PRODUCT CODE ' X'0F'...........T'MAXIMUM VIOLATIONS ' X'10'...........T'CONSECUTIVE VIOLATIONS ' X'11'...........T'CONTROL SUFFIX ' X'12'...........T'EXTRA ENTRIES '

X'13'...........T'USER EXITS ' X'14'...........T'DYNAMIC TERMINALS ' X'15'...........T'DUMMY TERMINAL ' X'17'...........T'NEW CODE NOTIFICATION ' X'18'...........T'ASSIGNED BY ALERT ' X'19'...........T'SECURE ALL TERMINALS ' X'1A'...........T'SECURE ALL TRANSACTIONS ' X'1B'...........T'SECURE ALL PROGRAMS ' X'1C'...........T'SECURE ALL FILES ' X'1D'...........T'FORCE DELAY TIME '

X'1E'...........T'IF FORCED DISPLAY ' X'1F'...........T'OPER STAT/MAX VIOL ' X'20'...........T'GROUP STAT/MAX VIOL ' X'21'...........T'SIGNON MESSAGE DELAY ' X'22'...........T'UNSEC TERM PROGRAM ' X'23'...........T'CONSOLE VIOL DISPLAY ' X'24'...........T'DATE FORMAT ' X'25'...........T'TERM LOGO NAME ' X'26'...........T'TERM LOG OPTION ' X'27'...........T'TERM SIGNON PROGRAM ' X'28'...........T'TERM SIGNOFF PROGRAM '

X'29'...........T'TERM SCTY CODE PERIOD ' X'2A'...........T'TERM SCTY CODE MASK ' X'2B'...........T'TERM PRINT PROFILE ' X'2C'...........T'TERM DEFAULT AUTH ' X'2D'...........T'TERM SCTY CODE HIST ' X'2E'...........T'TERM MESSAGE FILE ' X'2F'...........T'OPER LOG OPTION ' X'30'...........T'OPER SIGNON PROGRAM ' X'31'...........T'OPER SIGNOFF PROGRAM ' X'32'...........T'OPER PASSWORD PERIOD ' X'33'...........T'OPER PASSWORD MASK '

X'34'...........T'OPER PRINT PROFILE ' X'35'...........T'OPER DEFAULT AUTH ' X'36'...........T'OPER PASSWORD HISTORY ' X'37'...........T'OPER EXTERNAL SECURITY '

(continued)

System Options and Parameter Fields Fieldname List

7-18 Auditing and Report Writing Guide

The 01020000 segment fields allow you to produce a report by selecting specific system options.

Field Description

SYTRANSC System transaction security option.

Default label-1: SYS Default label-1: TRAN Default label-1: SCTY Field type: 01020000 - System option values Input data length: 1 Input data format: Hexadecimal (X) Default output length: 3 Default output format: Transformed (T) X'00'...........T'OFF'

X'FF'...........T'ON '

SYPROGSC System program security option.

Default label-1: SYS Default label-1: PROG Default label-1: SCTY Field type: 01020000 - System option values Input data length: 1 Input data format: Hexadecimal (X) Default output length: 3 Default output format: Transformed (T) X'00'...........T'OFF'

X'FF'...........T'ON '

SYFILESC System file security option.

Default label-1: SYS Default label-2: FILE Default label-3: SCTY Field type: 01020000 - System option values Input data length: 1 Input data format: Hexadecimal (X) Default output length: 3 Default output format: Transformed (T) X'00'...........T'OFF'

X'FF'...........T'ON '

(continued)

System Options

Values

Fieldname List System Options and Parameter Fields

Chapter 7. ALRTVCAU Audit File Report 7-19

Field Description

TMTRANSC Terminal transaction security option.

Default label-1: TERM Default label-2: TRAN Default label-3: SCTY Field type: 01020000 - System option values Input data length: 1 Input data format: Hexadecimal (X) Default output length: 3 Default output format: Transformed (T) X'00'...........T'OFF'

X'FF'...........T'ON '

TMPROGSC Terminal program security option.

Default label-1: TERM Default label-2: PROG Default label-3: SCTY Field type: 01020000 - System option values Input data length: 1 Input data format: Hexadecimal (X) Default output length: 3 Default output format: Transformed (T) X'00'...........T'OFF'

X'FF'...........T'ON '

TMFILESC Terminal file security option.

Default label-1: TERM Default label-2: FILE Default label-3: SCTY Field type: 01020000 - System option values Input data length: 1 Input data format: Hexadecimal (X) Default output length: 3 Default output format: Transformed (T) X'00'...........T'OFF'

X'FF'...........T'ON '

(continued)

System Options and Parameter Fields Fieldname List

7-20 Auditing and Report Writing Guide

Field Description

TMMAPSEC Terminal map security option.

Default label-1: TERM Default label-2: MAP Default label-3: SCTY Field type: 01020000 - System option values Input data length: 1 Input data format: Hexadecimal (X) Default output length: 3 Default output format: Transformed (T) X'00'...........T'OFF'

X'FF'...........T'ON '

TMFLDSEC Terminal field security option.

Default label-1: TERM Default label-2: FIELD Default label-3: SCTY Field type: 01020000 - System option values Input data length: 1 Input data format: Hexadecimal (X) Default output length: 3 Default output format: Transformed (T) X'00'...........T'OFF'

X'FF'...........T'ON '

OPTRANSC Operator transaction security option.

Default label-1: OPER Default label-1: TRAN Default label-1: SCTY Field type: 01020000 - System option values Input data length: 1 Input data format: Hexadecimal (X) Default output length: 3 Default output format: Transformed (T) X'00'...........T'OFF'

X'FF'...........T'ON '

(continued)

Fieldname List System Options and Parameter Fields

Chapter 7. ALRTVCAU Audit File Report 7-21

Field Description

OPPROGSC Operator program security option.

Default label-1: OPER Default label-1: PROG Default label-1: SCTY Field type: 01020000 - System option values Input data length: 1 Input data format: Hexadecimal (X) Default output length: 3 Default output format: Transformed (T) X'00'...........T'OFF'

X'FF'...........T'ON '

OPFILESC Operator file security option.

Default label-1: OPER Default label-1: FILE Default label-1: SCTY Field type: 01020000 - System option values Input data length: 1 Input data format: Hexadecimal (X) Default output length: 3 Default output format: Transformed (T) X'00'...........T'OFF'

X'FF'...........T'ON '

OPMAPSEC Operator map security option.

Default label-1: OPER Default label-1: MAP Default label-1: SCTY Field type: 01020000 - System option values Input data length: 1 Input data format: Hexadecimal (X) Default output length: 3 Default output format: Transformed (T) X'00'...........T'OFF'

X'FF'...........T'ON '

OPFLDSEC Operator field security option.

Default label-1: OPER Default label-1: FIELD Default label-1: SCTY Field type: 01020000 - System option values Input data length: 1 Input data format: Hexadecimal (X) Default output length: 3 Default output format: Transformed (T) X'00'...........T'OFF'

X'FF'...........T'ON '

System Options and Parameter Fields Fieldname List

7-22 Auditing and Report Writing Guide

(continued)

Fieldname List System Options and Parameter Fields

Chapter 7. ALRTVCAU Audit File Report 7-23

Field Description

VIOLAUDT Violation auditing option.

Default label-1: VIOL Default label-1: AUDT Field type: 01020000 - System option values Input data length: 1 Input data format: Hexadecimal (X) Default output length: 3 Default output format: Transformed (T) X'00'...........T'OFF'

X'FF'...........T'ON '

TERMSCHD Terminal scheduling option.

Default label-1: TERM Default label-1: SCHD Field type: 01020000 - System option values Input data length: 1 Input data format: Hexadecimal (X) Default output length: 3 Default output format: Transformed (T) X'00'...........T'OFF'

X'FF'...........T'ON '

The type 01030000 segment fields allow you to produce a report by selecting specific system parameter fields. This type of report can be used to track very specific changes in system security parameter values.

Field Description

MAXVIOLA Maximum violations.

Default label-1: MAX Default label-2: VIO Field type: 01030000 - System parameter values Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

(continued)

System Parameter

Values

System Options and Parameter Fields Fieldname List

7-24 Auditing and Report Writing Guide

Field Description

MAXCONSC Maximum consecutive violations.

Default label-1: MAX Default label-2: CON Default label-3: ATT Field type: 01030000 - System parameter values Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

CTRLSUFX Control suffix number.

Default label-1: S Default label-2: F Default label-3: # Field type: 01030000 - System parameter values Input data length: 1 Input data format: Character (C) Default output length: 1 Default output format: Character (C)

EXTRAENT Number of extra entries.

Default label-1: EXT Default label-2: ENT Field type: 01030000 - System parameter values Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

USEREXIT User exits required.

Default label-1: USR Default label-2: EXT Default label-3: REQ Field type: 01030000 - System parameter values Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

(continued)

Fieldname List System Options and Parameter Fields

Chapter 7. ALRTVCAU Audit File Report 7-25

Field Description

DYNATERM Dynamic terminal number.

Default label-1: DYNAM Default label-2: TERMS Field type: 01030000 - System parameter values Input data length: 5 Input data format: Character (C) Default output length: 5 Default output format: Character (C)

DUMMYTRM Dummy terminal name.

Default label-1: DUMM Default label-2: TERM Field type: 01030000 - System parameter values Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

NEWCODEN New code notification limit.

Default label-1: NEW Default label-2: CDE Default label-3: NTF Field type: 01030000 - System parameter values Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

AGENCODE Codes to be assigned by BIM-ALERT/CICS.

Default label-1: ALT Default label-2: GEN Default label-3: CDE Field type: 01030000 - System parameter values Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

(continued)

System Options and Parameter Fields Fieldname List

7-26 Auditing and Report Writing Guide

Field Description

ALLTERMS All terminals to be secured.

Default label-1: ALL Default label-2: TRM Default label-3: SEC Field type: 01030000 - System parameter values Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

ALLTRANS All transactions to be secured.

Default label-1: ALL Default label-2: TRN Default label-3: SEC Field type: 01030000 - System parameter values Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

ALLPROGS All programs to be secured.

Default label-1: ALL Default label-2: PRG Default label-3: SEC Field type: 01030000 - System parameter values Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

ALLFILES All files to be secured.

Default label-1: ALL Default label-2: FIL Default label-3: SEC Field type: 01030000 - System parameter values Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

(continued)

Fieldname List System Options and Parameter Fields

Chapter 7. ALRTVCAU Audit File Report 7-27

Field Description

FORCEDEL Second level timeout delay value.

Default label-1: FORCE Default label-2: DELAY Default label-3: TIME Field type: 01030000 - System parameter values Input data length: 4 Input data format: Character (C) Default output length: 5 Default output format: Transformed (T)

FORCEDSP If forced display transaction.

Default label-1: FORC Default label-2: DISP Default label-3: TRAN Field type: 01030000 - System parameter values Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

OSTATMAX Operator status after maximum violations.

Default label-1: OP Default label-2: ST Default label-3: MX Field type: 01030000 - System parameter values Input data length: 1 Input data format: Character (C) Default output length: 1 Default output format: Character (C)

GSTATMAX Group operator status after maximum violations.

Default label-1: GP Default label-2: ST Default label-3: MX Field type: 01030000 - System parameter values Input data length: 1 Input data format: Character (C) Default output length: 1 Default output format: Character (C)

(continued)

System Options and Parameter Fields Fieldname List

7-28 Auditing and Report Writing Guide

Field Description

MSGDELAY Sign-on message delay in seconds.

Default label-1: SN Default label-2: MS Default label-3: DL Field type: 01030000 - System parameter values Input data length: 1 Input data format: Character (C) Default output length: 1 Default output format: Character (C)

UNSECTRM Unsecured terminal program.

Default label-1: UNSECURED Default label-2: TERMINAL Default label-3: PROGRAM Field type: 01030000 - System parameter values Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

DATEFORM Date format.

Default label-1: DT Default label-2: FM Field type: 01030000 - System parameter values Input data length: 1 Input data format: Character (C) Default output length: 1 Default output format: Character (C)

CONSVIOL Display violations on console.

Default label-1: CON Default label-2: VIO Default label-3: DSP Field type: 01030000 - System parameter values Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

Fieldname List System Options and Parameter Fields

Chapter 7. ALRTVCAU Audit File Report 7-29

The type 01040000 segment fields allow you to produce a report by selecting specific terminal or operator fields maintained by the UTOP transaction. This type of report can be used to track very specific changes in global terminal or operator system security parameter values.

Field Description

TLOGONAM Terminal logo name.

Default label-1: TERMINAL Default label-2: LOGO Default label-3: NAME Field type: 01040000 - Terminal or operator parameter values Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

TLOGOPTN Log terminal sign-on or sign-off records.

Default label-1: TRM Default label-2: LOG Default label-3: OPT Field type: 01040000 - Terminal or operator parameter values Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

TSONPROG Terminal post-sign-on program.

Default label-1: TERMINAL Default label-2: SIGN-ON Default label-3: PROGRAM Field type: 01040000 - Terminal or operator parameter values Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

TSOFPROG Terminal post-sign-off program.

Default label-1: TERMINAL Default label-2: SIGN-OFF Default label-3: PROGRAM Field type: 01040000 - Terminal or operator parameter values Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

(continued)

Terminal and

Operator

Parameter Values

System Options and Parameter Fields Fieldname List

7-30 Auditing and Report Writing Guide

Field Description

TSCODPER Terminal password period in days.

Default label-1: TRM Default label-2: SCD Default label-3: PER Field type: 01040000 - Terminal or operator parameter values Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

TSCODMSK Terminal password mask.

Default label-1: TERMINAL Default label-2: SCTYCODE Default label-3: MASK Field type: 01040000 - Terminal or operator parameter values Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

TPRTPROF Authorization to print terminal profiles.

Default label-1: TRM Default label-2: PRT Default label-3: PRF Field type: 01040000 - Terminal or operator parameter values Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

TDEFAUTH Terminal default authority.

Default label-1: TRM Default label-2: DEF Default label-3: AUT Field type: 01040000 - Terminal or operator parameter values Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

(continued)

Fieldname List System Options and Parameter Fields

Chapter 7. ALRTVCAU Audit File Report 7-31

Field Description

TSCODHST Terminal password history.

Default label-1: TM Default label-2: SC Default label-3: HS Field type: 01040000 - Terminal or operator parameter values Input data length: 2 Input data format: Character (C) Default output length: 2 Default output format: Character (C)

TMSGFILE Default message file.

Default label-1: TERMINAL Default label-2: MESSAGE Default label-3: FILE Field type: 01040000 - Terminal or operator parameter values Input data length: 7 Input data format: Character (C) Default output length: 7 Default output format: Character (C)

OLOGOPTN Log operator sign-on or sign-off records.

Default label-1: OPR Default label-2: LOG Default label-3: OPT Field type: 01040000 - Terminal or operator parameter values Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

OSONPROG Operator post-sign-on program.

Default label-1: OPERATOR Default label-2: SIGN-ON Default label-3: PROGRAM Field type: 01040000 - Terminal or operator parameter values Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

(continued)

System Options and Parameter Fields Fieldname List

7-32 Auditing and Report Writing Guide

Field Description

OSOFPROG Operator post-sign-off program.

Default label-1: OPERATOR Default label-2: SIGN-OFF Default label-3: PROGRAM Field type: 01040000 - Terminal or operator parameter values Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

OSCODPER Operator password period in days.

Default label-1: OPR Default label-2: SCD Default label-3: PER Field type: 01040000 - Terminal or operator parameter values Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

OSCODMSK Operator password mask.

Default label-1: OPERATOR Default label-2: SCTYCODE Default label-3: MASK Field type: 01040000 - Terminal or operator parameter values Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

OPRTPROF Authorization to print operator profiles.

Default label-1: OPR Default label-2: PRT Default label-3: PRF Field type: 01040000 - Terminal or operator parameter values Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

(continued)

Fieldname List System Options and Parameter Fields

Chapter 7. ALRTVCAU Audit File Report 7-33

Field Description

ODEFAUTH Operator default authority.

Default label-1: OPR Default label-2: DEF Default label-3: AUT Field type: 01040000 - Terminal or operator parameter values Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

OSCODHST Operator password history.

Default label-1: OP Default label-2: SC Default label-3: HS Field type: 01040000 - Terminal or operator parameter values Input data length: 2 Input data format: Character (C) Default output length: 2 Default output format: Character (C)

OEXTSCTY Operator external security option.

Default label-1: OP Default label-2: EX Default label-3: SC Field type: 01040000 - Terminal or operator parameter values Input data length: 1 Input data format: Character (C) Default output length: 1 Default output format: Character (C)

Terminal and Operator Profile Fields Fieldname List

7-34 Auditing and Report Writing Guide

Terminal and Operator Profile Fields

The following fieldnames can be included in any ALRTVCAU report SUBTITLE, FIELD, or FIELDS command statements. These fieldnames are contained in the ALRTVCAU input file terminal or operator security profile records (segment X'020x0000'). These fields will be printed only on report detail lines with other segment 02xxxxxx record and common segment fieldnames.

Field Description

TMOPMODE Mode of action (online or batch).

Default label-1: ONLINE Default label-2: OR Default label-3: BATCH Field type: 02000000 - Terminal or operator maintenance Input data length: 1 Input data format: Character (C) Default output length: 6 Default output format: Transformed (T) C'B'............T'BATCH '

C'O'............T'ONLINE'

TMOPACTN Type of action (add or update).

Default label-1: ADD Default label-2: OR Default label-3: UPDATE Field type: 02000000 - Terminal or operator maintenance Input data length: 1 Input data format: Character (C) Default output length: 6 Default output format: Transformed (T) C'A'............T'ADD '

C'U'............T'UPDATE'

TMOPTYPE Type of update (terminal or operator).

Default label-1: TERMINAL Default label-2: OR Default label-3: OPERATOR Field type: 02000000 - Terminal or operator maintenance Input data length: 1 Input data format: Character (C) Default output length: 8 Default output format: Transformed (T) C'T'............T'TERMINAL'

C'O'............T'OPERATOR'

(continued)

Fieldname List Terminal and Operator Profile Fields

Chapter 7. ALRTVCAU Audit File Report 7-35

Field Description

TMOPNAME ID of terminal or operator affected.

Default label-1: NAME Field type: 02000000 - Terminal or operator maintenance Input data length: 9 Input data format: Character (C) Default output length: 9 Default output format: Character (C)

Terminal and Operator Profile Fields Fieldname List

7-36 Auditing and Report Writing Guide

The 02010000 segment fields will produce a report containing all the before and after values logged as a result of updating or adding a terminal (ATSI, UTSI, or ATSB) or operator (AAUP, UAUP, or AAUB) profile.

Field Description

TMOPARMD Terminal or operator parameter description.

Default label-1: TERM/OPER Default label-2: PARAMETER Default label-3: DESCRIPTION Field type: 02010000 - Terminal or operator data list Input data length: 1 Input data format: Hexadecimal (X) Default output length: 19 Default output format: Transformed (T) X'01'...........T'LOGO SUFFIX '

X'02'...........T'TELEPHONE NUMBER '

X'03'...........T'TIME DIFFERENTIAL '

X'04'...........T'TERM SIGN-ON EXEMPT'

X'05'...........T'OPER SIGN-ON EXEMPT'

X'06'...........T'VIOLATION TERMINAL '

X'07'...........T'VIOLATION PRINTER '

X'08'...........T'OPERATOR NAME '

X'09'...........T'PRIMARY TERMINAL '

X'0A'...........T'ALERT TERMINAL 1 '

X'0B'...........T'ALERT TERMINAL 2 '

X'0C'...........T'MODEL '

X'0D'...........T'ADMINISTRATOR '

X'0E'...........T'MESSAGE SUFFIX '

X'0F'...........T'TERMINAL GROUP '

X'10'...........T'COMPANY '

X'11'...........T'DIVISION '

X'12'...........T'DEPARTMENT '

X'13'...........T'SECTION '

X'14'...........T'STATUS '

X'15'...........T'PASSWORD '

X'16'...........T'PASSWORD EFF. DATE '

X'17'...........T'NEW PASSWORD '

X'18'...........T'NEW-CODE EFF. DATE '

X'19'...........T'PROCESS TYPE '

X'1A'...........T'INACTIVE TIME LIMIT'

X'1B'...........T'SCHEDULED FROM-TIME'

X'1C'...........T'SCHEDULED TO-TIME '

X'1D'...........T'TEMPORARY FROM-TIME'

X'1E'...........T'TEMPORARY TO-TIME '

X'1F'...........T'TEMPORARY FROM-DATE'

X'20'...........T'TEMPORARY TO-DATE '

(continued)

Terminal and

Operator Data List

Fieldname List Terminal and Operator Profile Fields

Chapter 7. ALRTVCAU Audit File Report 7-37

Field Description

TMOPARMB Terminal or operator parameter value before update.

Default label-1: BEFORE Field type: 02010000 - Terminal or operator data list Input data length: 20 Input data format: Character (C) Default output length: 20 Default output format: Character (C)

TMOPARMA Terminal or operator parameter value after update.

Default label-1: AFTER Field type: 02010000 - Terminal or operator data list Input data length: 20 Input data format: Character (C) Default output length: 20 Default output format: Character (C)

TMOPSDAY Terminal or operator parameter day of the week.

Default label-1: DAY Field type: 02010000 - Terminal or operator data list Input data length: 1 Input data format: Character (C) Default output length: 10 Default output format: Transformed (T) C'1'............T'SUNDAY '

C'2'............T'MONDAY '

C'3'............T'TUESDAY '

C'4'............T'WEDNESDAY '

C'5'............T'THURSDAY '

C'6'............T'FRIDAY '

C'7'............T'SATURDAY '

Terminal and Operator Profile Fields Fieldname List

7-38 Auditing and Report Writing Guide

The 02020000 segment fields allow you to produce a report showing changes to specific fields in a terminal or operator profile.

Field Description

TMOPFLAG Indicates before or after data value.

Default label-1: BEFORE Default label-2: /AFTER Field type: 02020000 - Terminal or operator data fields Input data length: 1 Input data format: Character (C) Default output length: 6 Default output format: Transformed (T) C' '............T'N/A '

C'B'............T'BEFORE'

C'A'............T'AFTER '

TMOPMODL Terminal or operator used as model.

Default label-1: MODEL Field type: 02020000 - Terminal or operator data fields Input data length: 9 Input data format: Character (C) Default output length: 9 Default output format: Character (C)

TMOPADMN Administrator who owns this terminal or operator.

Default label-1: ADMINSTR Field type: 02020000 - Terminal or operator data fields Input data length: 9 Input data format: Character (C) Default output length: 9 Default output format: Character (C)

TMOPMSGF Message suffix for this terminal or operator.

Default label-1: MS Default label-2: SF Field type: 02020000 - Terminal or operator data fields Input data length: 2 Input data format: Character (C) Default output length: 2 Default output format: Character (C)

(continued)

Terminal and

Operator Data

Fields

Fieldname List Terminal and Operator Profile Fields

Chapter 7. ALRTVCAU Audit File Report 7-39

Field Description

TMOPGRP Group to which this terminal belongs.

Default label-1: TERM Default label-2: GRP Field type: 02020000 - Terminal or operator data fields Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

TMOPCOMP Company to which this terminal or operator belongs.

Default label-1: COMP Field type: 02020000 - Terminal or operator data fields Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

TMOPDIVN Division to which this terminal or operator belongs.

Default label-1: DIV. Field type: 02020000 - Terminal or operator data fields Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

TMOPDEPT Department to which this terminal or operator belongs.

Default label-1: DEPT Field type: 02020000 - Terminal or operator data fields Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

TMOPSECT Section to which this terminal or operator belongs.

Default label-1: SECT Field type: 02020000 - Terminal or operator data fields Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

(continued)

Terminal and Operator Profile Fields Fieldname List

7-40 Auditing and Report Writing Guide

Field Description

TMOPSTAT Status of this terminal or operator.

Default label-1: STATUS Field type: 02020000 - Terminal or operator data fields Input data length: 1 Input data format: Character (C) Default output length: 9 Default output format: Transformed (T) C'A'............T'ACTIVE '

C'D'............T'DISABLED '

C'P'............T'PRELOADED'

C'V'............T'SUSPENDED'

C'K'............T'KEEP '

TMOPSCOD Terminal or operator security code.

Default label-1: SECURITY Default label-2: CODE Field type: 02020000 - Terminal or operator data fields Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

TMOPSEFD Terminal or operator security code effective date.

Default label-1: SECURITY Default label-2: CODE Default label-3: EFF-DATE Field type: 02020000 - Terminal or operator data fields Input data length: 4 Input data format: Hexidecimal (X) Default output length: 10 Default output format: Transformed(T) X'AFCBB7AD'.....T'01/01/1998' (or user-defined DATEFORM)

TMOPNCOD Terminal or operator new security code.

Default label-1: NEW Default label-2: SECURITY Default label-3: CODE Field type: 02020000 - Terminal or operator data fields Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

(continued)

Fieldname List Terminal and Operator Profile Fields

Chapter 7. ALRTVCAU Audit File Report 7-41

Field Description

TMOPNEFD Terminal or operator new security code effective date.

Default label-1: NEW Default label-2: SCTYCODE Default label-3: EFF-DATE Field type: 02020000 - Terminal or operator data fields Input data length: 4 Input data format: Hexidecimal (X) Default output length: 10 Default output format: Transformed(T) X'AFCBB7AD'.....T'01/01/1998' (or user-defined DATEFORM)

TMOPROCT Terminal or operator process type.

Default label-1: PR Default label-2: TP Field type: 02020000 - Terminal or operator data fields Input data length: 1 Input data format: Character (C) Default output length: 7 Default output format: Transformed (T) C'I'............T'INQUIRY '

C'U'............T'UPDATE '

TMOPITLM Terminal or operator inactive time limit.

Default label-1: INAC Default label-2: TIME Default label-3: LIM Field type: 02020000 - Terminal or operator data fields Input data length: 4 Input data format: Character (C) Default output length: 5 Default output format: Transformed (T)

TMOPTERM Terminal ID.

Default label-1: TERM Field type: 02020000 - Terminal or operator data fields Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

(continued)

Terminal and Operator Profile Fields Fieldname List

7-42 Auditing and Report Writing Guide

Field Description

TMOPLOGO Terminal logo suffix.

Default label-1: TM Default label-2: LG Default label-3: SF Field type: 02020000 - Terminal or operator data fields Input data length: 2 Input data format: Character (C) Default output length: 2 Default output format: Character (C)

TMOPHONE Terminal telephone number.

Default label-1: TERMINAL Default label-2: TELEPHONE Default label-3: NUMBER Field type: 02020000 - Terminal or operator data fields Input data length: 10 Input data format: Character (C) Default output length: 14 Default output format: Transformed (T)

TMOPTDIF Terminal time difference.

Default label-1: TERM Default label-2: TIME Default label-3: DIFF Field type: 02020000 - Terminal or operator data fields Input data length: 2 Input data format: Character (C) Default output length: 5 Default output format: Transformed (T)

TMOPTSXP Terminal sign-on exemption.

Default label-1: TRM Default label-2: SGN Default label-3: EXM Field type: 02020000 - Terminal or operator data fields Input data length: 1 Input data format: Character (C) Default output length: 3 Default output format: Transformed (T) C'Y'............T'YES'

C'N'............T'NO '

(continued)

Fieldname List Terminal and Operator Profile Fields

Chapter 7. ALRTVCAU Audit File Report 7-43

Field Description

TMOPOSXP Terminal operator sign-on exemption.

Default label-1: OPR Default label-2: SGN Default label-3: EXM Field type: 02020000 - Terminal or operator data fields Input data length: 1 Input data format: Character (C) Default output length: 3 Default output format: Transformed (T)

C'Y'............T'YES'

C'N'............T'NO '

C'O'............T'OPT'

TMOPVIOT Terminal violation reporting terminal.

Default label-1: VIOL Default label-2: REPT Default label-3: TERM Field type: 02020000 - Terminal or operator data fields Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

TMOPVIOP Terminal violation reporting printer.

Default label-1: VIOL Default label-2: REPT Default label-3: PRTR Field type: 02020000 - Terminal or operator data fields Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

TMOPERID User ID.

Default label-1: OPERATOR Default label-2: ID Field type: 02020000 - Terminal or operator data fields Input data length: 9 Input data format: Character (C) Default output length: 9 Default output format: Character (C)

(continued)

Terminal and Operator Profile Fields Fieldname List

7-44 Auditing and Report Writing Guide

Field Description

TMOPERNM Name.

Default label-1: USER NAME Field type: 02020000 - Terminal or operator data fields Input data length: 20 Input data format: Character (C) Default output length: 20 Default output format: Character (C)

TMOPDEVC Operator's primary terminal.

Default label-1: OPER Default label-2: PRIM Default label-3: DEVC Field type: 02020000 - Terminal or operator data fields Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

TMOPALT1 Operator's alternate terminal-1 (or alt-group3).

Default label-1: OPER Default label-2: ALT Default label-3: TRM1 Field type: 02020000 - Terminal or operator data fields Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

TMOPALT2 Operator's alternate terminal-2 (or alt-group2).

Default label-1: OPER Default label-2: ALT Default label-3: TRM2 Field type: 02020000 - Terminal or operator data fields Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

Fieldname List Terminal and Operator Profile Fields

Chapter 7. ALRTVCAU Audit File Report 7-45

The 02030000 segment fields allow you to produce a report showing changes to specific fields in a user ID profile.

Field Description

USERSUB1 Submit user ID 1.

Default label-1: SUBMIT Default label-2: USERID-1 Field type: 02030000 - User ID data fields Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

USERSUB2 Submit user ID 2.

Default label-1: SUBMIT Default label-2: USERID-2 Field type: 02030000 - User ID data fields Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

USERSUB3 Submit user ID 3.

Default label-1: SUBMIT Default label-2: USERID-3 Field type: 02030000 - User ID data fields Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

USERTBL1 Table one number.

Default label-1: TABLE-1 Default label-2: NUMBER Field type: 02030000 - User ID data fields Input data length: 2 Input data format: Character (C) Default output length: 2 Default output format: Character (C)

(continued)

User ID Data Fields

Terminal and Operator Profile Fields Fieldname List

7-46 Auditing and Report Writing Guide

Field Description

USERTBL2 Table two number.

Default label-1: TABLE-2 Default label-2: NUMBER Field type: 02030000 - User ID data fields Input data length: 2 Input data format: Character (C) Default output length: 2 Default output format: Character (C)

USERTBL3 Table three number.

Default label-1: TABLE-3 Default label-2: NUMBER Field type: 02030000 - User ID data fields Input data length: 2 Input data format: Character (C) Default output length: 2 Default output format: Character (C)

USERTBL4 Table four number.

Default label-1: TABLE-4 Default label-2: NUMBER Field type: 02030000 - User ID data fields Input data length: 2 Input data format: Character (C) Default output length: 2 Default output format: Character (C)

USERTBL5 Table five number.

Default label-1: TABLE-5 Default label-2: NUMBER Field type: 02030000 - User ID data fields Input data length: 2 Input data format: Character (C) Default output length: 2 Default output format: Character (C)

USERSEC1 SECID 1.

Default label-1: SECID-1 Field type: 02030000 - User ID data fields Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

(continued)

Fieldname List Terminal and Operator Profile Fields

Chapter 7. ALRTVCAU Audit File Report 7-47

Field Description

USERSEC2 SECID 2.

Default label-1: SECID-2 Field type: 02030000 - User ID data fields Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

USERSEC3 SECID 3.

Default label-1: SECID-3 Field type: 02030000 - User ID data fields Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

USERSEC4 SECID 4.

Default label-1: SECID-4 Field type: 02030000 - User ID data fields Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

USERSEC5 SECID 5.

Default label-1: SECID-5 Field type: 02030000 - User ID data fields Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

USERIUID IUI ID.

Default label-1: IUI-ID Field type: 02030000 - User ID data fields Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

(continued)

Terminal and Operator Profile Fields Fieldname List

7-48 Auditing and Report Writing Guide

Field Description

USERIUPW IUI password.

Default label-1: IUI Default label-2: PASSWD Field type: 02030000 - User ID data fields Input data length: 6 Input data format: Character (C) Default output length: 6 Default output format: Character (C)

USEREXSC External security (YES or NO).

Default label-1: EXTERNAL Default label-2: SECURITY Field type: 02030000 - User ID data fields Input data length: 1 Input data format: Character (C) Default output length: 3 Default output format: Transformed (T)

C'Y'............T'YES'

C'N'............T'NO '

USEREXMD External security model.

Default label-1: EXTERNAL Default label-2: SECURITY Default label-3: MODEL Field type: 02030000 - User ID data fields Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

USERPWS Personal workstation (YES or NO).

Default label-1: PWS Field type: 02030000 - User ID data fields Input data length: 1 Input data format: Character (C) Default output length: 3 Default output format: Transformed (T)

C'Y'............T'YES'

C'N'............T'NO '

(continued)

Fieldname List Terminal and Operator Profile Fields

Chapter 7. ALRTVCAU Audit File Report 7-49

Field Description

USERREM Remote submission (YES or NO).

Default label-1: REM Field type: 02030000 - User ID data fields Input data length: 1 Input data format: Character (C) Default output length: 3 Default output format: Transformed (T)

C'Y'............T'YES'

C'N'............T'NO '

USERACT Action.

Default label-1: ACTION Field type: 02030000 - User ID data fields Input data length: 1 Input data format: Character (C) Default output length: 7 Default output format: Transformed (T)

C'*'............T'NONE '

C'C'............T'CANCEL '

C'W'............T'WTO/LOG'

C'L'............T'LOG '

USERMON Monitor code.

Default label-1: MONITOR Default label-2: CODE Field type: 02030000 - User ID data fields Input data length: 1 Input data format: Character (C) Default output length: 7 Default output format: Transformed (T)

C'*'............T'NONE '

C'C'............T'CANCEL '

C'W'............T'WTO/LOG'

C'L'............T'LOG '

USERCON Master console (YES or NO).

Default label-1: CON Field type: 02030000 - User ID data fields Input data length: 1 Input data format: Character (C) Default output length: 3 Default output format: Transformed (T)

C'Y'............T'YES'

C'N'............T'NO '

(continued)

Terminal and Operator Profile Fields Fieldname List

7-50 Auditing and Report Writing Guide

Field Description

USERCLB Controlled library (YES or NO).

Default label-1: CLB Field type: 02030000 - User ID data fields Input data length: 1 Input data format: Character (C) Default output length: 3 Default output format: Transformed (T)

C'Y'............T'YES'

C'N'............T'NO '

USEREXID External ID.

Default label-1: EXTERNAL Default label-2: ID Field type: 02030000 - User ID data fields Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

USERUPST User profile status.

Default label-1: UP Default label-2: STAT Field type: 02030000 - User ID data fields Input data length: 1 Input data format: Character (C) Default output length: 9 Default output format: Transformed (T)

C'A'............T'ACTIVE '

C'D'............T'DISABLED '

C'P'............T'PRELOADED'

C'V'............T'SUSPENDED'

C'K'............T'KEEP '

USERUDAT User-defined data.

Default label-1: USER Default label-2: DATA Field type: 02030000 - User ID data fields Input data length: 10 Input data format: Character (C) Default output length: 10 Default output format: Character (C)

(continued)

Fieldname List Terminal and Operator Profile Fields

Chapter 7. ALRTVCAU Audit File Report 7-51

Field Description

USERUDA2 User-defined data 2.

Default label-1: USER Default label-2: DATA 2 Field type: 02030000 - User ID data fields Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

USERCICS CICS user (YES or NO).

Default label-1: CICS Field type: 02030000 - User ID data fields Input data length: 1 Input data format: Character (C) Default output length: 3 Default output format: Transformed (T)

C'Y'............T'YES'

C'N'............T'NO '

USERBAT Batch user (YES or NO).

Default label-1: BATCH Field type: 02030000 - User ID data fields Input data length: 1 Input data format: Character (C) Default output length: 3 Default output format: Transformed (T)

C'Y'............T'YES'

C'N'............T'NO '

USERBEXP Batch user expire date

Default label-1: BATCH Default label-1: EXP-DATE Field type: 02030000 - User ID data fields Input data length: 4 Input data format: Hexidecimal (X) Default output length: 10 Default output format: Transformed (T) X'AFCBB7AD'.....T'01/01/1998' (or user-defined DATEFORM)

Secured Resource Fields Fieldname List

7-52 Auditing and Report Writing Guide

Secured Resource Fields

The following fieldnames can be included in any ALRTVCAU report SUBTITLE, FIELD, or FIELDS command statements. These fieldnames are contained in the ALRTVCAU input file resource update records (segment X'030x0000'). These fields will be printed only on report detail lines with other resource update record and common segment fieldnames.

Field Description

RESCTYPE Resource type (transaction, program, file, map, or field).

Default label-1: RESOURCE Default label-2: TYPE Field type: 03000000 - Secured resource update Input data length: 2 Input data format: Character (C) Default output length: 11 Default output format: Transformed (T)

C'TR'...........T'TRANSACTION'

C'PR'...........T'PROGRAM '

C'FF'...........T'FIELD '

C'FL'...........T'FILE '

C'MP'...........T'MAP '

RESCACTN Type of action (add or update).

Default label-1: ADD Default label-2: OR Default label-3: UPDATE Field type: 03000000 - Secured resource update Input data length: 1 Input data format: Character (C) Default output length: 6 Default output format: Transformed (T)

C'A'............T'ADD '

C'U'............T'UPDATE'

Fieldname List Secured Resource Fields

Chapter 7. ALRTVCAU Audit File Report 7-53

The 03010000 segment records can be used to produce a report showing all before and after information logged as a result of adding or updating any resource (transaction, program, file, or map) data with the online panels.

Field Description

RESPARMD Resource parameter description.

Default label-1: RESOURCE Default label-2: PARAMETER Default label-3: DESCRIPTION Field type: 03010000 - Secured resource information list Input data length: 1 Input data format: Hexadecimal (X) Default output length: 21 Default output format: Transformed (T)

X'01'......'NAME ' X'02'......'STATUS ' X'03'......'DESCRIPTION ' X'04'......'TRANSACTION FROM-TIME ' X'05'......'TRANSACTION TO-TIME ' X'06'......'PROGRAM FROM-TIME ' X'07'......'PROGRAM TO-TIME ' X'08'......'FILE FROM-TIME '

X'09'......'FILE TO-TIME ' X'0A'......'FILE ACCESS LEVEL ' X'0B'......'MAP FIELD NUMBER ' X'0C'......'MAP FIELD DISPLAY ' X'0D'......'MAP FIELD TITLE ' X'0E'......'FIELD REAL RESOURCE ' X'0F'......'FIELD RECORD FORMAT ' X'10'......'FIELD ADD ACTION '

X'11'......'FIELD BROWSE ACTION ' X'12'......'FIELD BROWSE RETURN CODE' X'13'......'FIELD BROWSE RECORD POS ' X'14'......'FIELD DELETE ACTION ' X'15'......'FIELD READ ACTION ' X'16'......'FIELD READ RETURN CODE ' X'17'......'FIELD READ RECORD POS'N ' X'18'......'FIELD UPDATE ACTION '

X'19'......'NUMBER OF SEGMENTS ' X'1A'......'FIELD DESCRIPTION ' X'1B'......'DATA POSITION ' X'1C'......'DATA LENGTH ' X'1D'......'DATA FORMAT ' X'1E'......'COMPARE OPERATOR ' X'1F'......'LOGICAL CONNECTOR ' X'20'......'DATA VALUE ' X'21'......'DATA VALUE 2 '

(continued)

Secured Resource

Information List

Secured Resource Fields Fieldname List

7-54 Auditing and Report Writing Guide

Field Description

RESPARMB Resource parameter value before update.

Default label-1: BEFORE Field type: 03010000 - Secured resource information list Input data length: 30 Input data format: Character (C) Default output length: 30 Default output format: Character (C)

RESPARMA Resource parameter value after update.

Default label-1: AFTER Field type: 03010000 - Secured resource information list Input data length: 30 Input data format: Character (C) Default output length: 30 Default output format: Character (C)

The 03020000 segment information can be used to produce reports about specific fields that can be updated in the resource records.

Field Description

RESCFLAG Indicates before or after data value.

Default label-1: BEFORE Default label-2: /AFTER Field type: 03020000 - Secured resource field values Input data length: 1 Input data format: Character (C) Default output length: 6 Default output format: Transformed (T)

C' '............T'N/A '

C'B'............T'BEFORE'

C'A'............T'AFTER '

RESCNAME Resource name.

Default label-1: RESOURCE Default label-2: NAME Field type: 03020000 - Secured resource field values Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

(continued)

Secured Resource

Field Values

Fieldname List Secured Resource Fields

Chapter 7. ALRTVCAU Audit File Report 7-55

Field Description

RESCTRAN Transaction ID.

Default label-1: TRAN Default label-2: ID Field type: 03020000 - Secured resource field values Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

RESCPROG Program name.

Default label-1: PROGRAM Default label-2: NAME Field type: 03020000 - Secured resource field values Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

RESCFILE File name.

Default label-1: FILE Default label-2: NAME Field type: 03020000 - Secured resource field values Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

RESCMAP Map name.

Default label-1: MAP Default label-2: NAME Field type: 03020000 - Secured resource field values Input data length: 7 Input data format: Character (C) Default output length: 7 Default output format: Character (C)

RESMPSET Mapset name.

Default label-1: MAPSET Default label-2: NAME Field type: 03020000 - Secured resource field values Input data length: 7 Input data format: Character (C) Default output length: 7 Default output format: Character (C)

(continued)

Secured Resource Fields Fieldname List

7-56 Auditing and Report Writing Guide

Field Description

RESMPREF Map reference number.

Default label-1: MAP Default label-2: REF Default label-3: NUM Field type: 03020000 - Secured resource field values Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

RESDESCR Resource description.

Default label-1: DESCRIPTION Field type: 03020000 - Secured resource field values Input data length: 30 Input data format: Character (C) Default output length: 30 Default output format: Character (C)

RESCSTAT Resource status.

Default label-1: STATUS Field type: 03020000 - Secured resource field values Input data length: 1 Input data format: Character (C) Default output length: 9 Default output format: Transformed (T)

C'A'............T'ACTIVE '

C'D'............T'DISABLED '

C'P'............T'PRELOADED'

C'M'............T'MONITOR '

C'S'............T'SAFE '

RESFRTIM Resource "from" time.

Default label-1: FROM Default label-2: TIME Field type: 03020000 - Secured resource field values Input data length: 4 Input data format: Character (C) Default output length: 5 Default output format: Transformed (T)

(continued)

Fieldname List Secured Resource Fields

Chapter 7. ALRTVCAU Audit File Report 7-57

Field Description

RESTOTIM Resource "to" time.

Default label-1: TO Default label-2: TIME Field type: 03020000 - Secured resource field values Input data length: 4 Input data format: Character (C) Default output length: 5 Default output format: Transformed (T)

RESCFLAC File access level.

Default label-1: INQUIRY Default label-2: OR Default label-3: UPDATE Field type: 03020000 - Secured resource field values Input data length: 1 Input data format: Character (C) Default output length: 7 Default output format: Transformed (T)

C'I'............T'INQUIRY'

C'U'............T'UPDATE '

RESFDRES Field resource name.

Default label-1: FIELD Default label-2: RESOURCE Default label-3: NAME Field type: 03020000 - Secured resource field values Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

RESRNAME Real resource.

Default label-1: FIELD Default label-2: REAL Default label-3: RESOURCE Field type: 03020000 - Secured resource field values Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

(continued)

Secured Resource Fields Fieldname List

7-58 Auditing and Report Writing Guide

Field Description

RESMAPF# Map field number.

Default label-1: MAP Default label-2: FLD Default label-3: NBR Field type: 03020000 - Secured resource field values Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

RESMAPFD Map field display indicator.

Default label-1: MAP Default label-2: FLD Default label-3: DSP Field type: 03020000 - Secured resource field values Input data length: 1 Input data format: Character (C) Default output length: 3 Default output format: Transformed (T)

C'Y'............T'YES'

C'N'............T'NO '

RESMAPFT Map field title.

Default label-1: MAP Default label-2: FIELD Default label-3: TITLE Field type: 03020000 - Secured resource field values Input data length: 20 Input data format: Character (C) Default output length: 20 Default output format: Character (C)

Fieldname List Secured Resource Fields

Chapter 7. ALRTVCAU Audit File Report 7-59

The type 03040000 fields allow you to select and print the data that makes up the field resource definitions for files. The type 03040100 fields allow you to select and print the data that makes up the segments in a field resource definition for a file.

Field Description

RESFRFMT Field record format.

Default label-1: FIELD Default label-2: RECORD Default label-3: FORMAT Field type: 03040000 - Field resource field values Input data length: 1 Input data format: Character (C) Default output length: 8 Default output format: Transformed (T)

C'F'......'FIXED '

C'V'......'VARIABLE'

RESFAACT Field ADD action.

Default label-1: FIELD Default label-2: ADD Default label-3: ACTION Field type: 03040000 - Field resource field values Input data length: 1 Input data format: Character (C) Default output length: 6 Default output format: Transformed (T)

C'A'......'ALLOW '

C'R'......'RETURN CODE'

C'V'......'VIOLATION '

RESFBACT Field BROWSE action.

Default label-1: FIELD Default label-2: BROWSE Default label-3: ACTION Field type: 03040000 - Field resource field values Input data length: 1 Input data format: Character (C) Default output length: 6 Default output format: Transformed (T)

C'A'......'ALLOW '

C'R'......'RETURN CODE'

C'V'......'VIOLATION '

(continued)

Field Resource

Field Values for

Files

Secured Resource Fields Fieldname List

7-60 Auditing and Report Writing Guide

Field Description

RESFBRET Field BROWSE return code.

Default label-1: FIELD Default label-2: BROWSE Default label-3: RET-CD Field type: 03040000 - Field resource field values Input data length: 1 Input data format: Hexadecimal (X) Default output length: 2 Default output format: Hexadecimal (X)

RESFBRPO Field BROWSE record position.

Default label-1: FIELD Default label-2: BROWSE Default label-3: REC-PO Field type: 03040000 - Field resource field values Input data length: 2 Input data format: Hexadecimal (X) Default output length: 5 Default output format: Zoned decimal (Z)

RESFRACT Field DELETE action.

Default label-1: FIELD Default label-2: DELETE Default label-3: ACTION Field type: 03040000 - Field resource field values Input data length: 1 Input data format: Character (C) Default output length: 6 Default output format: Transformed (T)

C'A'.....'ALLOW '

C'R'.....'RETURN CODE'

C'V'.....'VIOLATION '

RESFDACT Field READ action.

Default label-1: FIELD Default label-2: READ Default label-3: ACTION Field type: 03040000 - Field resource field values Input data length: 1 Input data format: Character (C) Default output length: 6 Default output format: Transformed (T)

C'A'.....'ALLOW '

C'R'.....'RETURN CODE'

C'V'.....'VIOLATION '

(continued)

Fieldname List Secured Resource Fields

Chapter 7. ALRTVCAU Audit File Report 7-61

Field Description

RESFRRET Field READ return code.

Default label-1: FIELD Default label-2: READ Default label-3: RET-CD Field type: 03040000 - Field resource field values Input data length: 1 Input data format: Hexadecimal (X) Default output length: 2 Default output format: Hexadecimal (X)

RESFRRPO Field READ record position.

Default label-1: FIELD Default label-2: READ Default label-3: REC-PO Field type: 03040000 - Field resource field values Input data length: 2 Input data format: Hexadecimal (X) Default output length: 5 Default output format: Zoned decimal (Z)

RESFUACT Field UPDATE-1: FIELD Default label-2: UPDATE Default label-3: ACTION Field type: 03040000 - Field resource field values Input data length: 1 Input data format: Character (C) Default output length: 6 Default output format: Transformed (T)

C'A'.....'ALLOW '

C'R'.....'RETURN CODE'

C'V'.....'VIOLATION '

RESF#SEG Number of segments.

Default label-1: NUM Default label-2: OF Default label-3: SEGS Field type: 03040000 - Field resource field values Input data length: 1 Input data format: Hexadecimal (X) Default output length: 1 Default output format: Zoned decimal (Z)

(continued)

Secured Resource Fields Fieldname List

7-62 Auditing and Report Writing Guide

Field Description

RESFDESC Field description.

Default label-1: FIELD Default label-2: DESCRIPTION Field type: 03040100 - Field resource segments Input data length: 15 Input data format: Character (C) Default output length: 15 Default output format: Character (C)

RESFDPOS Data position.

Default label-1: DATA Default label-2: POSITION Field type: 03040100 - Field resource segments Input data length: 2 Input data format: Hexadecimal (X) Default output length: 5 Default output format: Zoned decimal (Z)

RESFDLEN Data length.

Default label-1: DATA Default label-2: LENGTH Field type: 03040100 - Field resourcesegments Input data length: 2 Input data format: Hexadecimal (X) Default output length: 5 Default output format: Zoned decimal (Z)

RESFDFMT Data format.

Default label-1: DATA Default label-2: FORMAT Field type: 03040100 - Field resource segments Input data length: 1 Input data format: Character (C) Default output length: 11 Default output format: Character (C)

C'C'.....'CHARACTER '

C'P'.....'PACKED '

C'X'.....'HEXADECIMAL'

(continued)

Fieldname List Secured Resource Fields

Chapter 7. ALRTVCAU Audit File Report 7-63

Field Description

RESFDCOM Compare operator.

Default label-1: COMPARE Default label-2: OPERATOR Field type: 03040100 - Field resource segments Input data length: 1 Input data format: Hexadecimal (X) Default output length: 11 Default output format: Character (C)

X'C3'.....'CHARACTER '

X'D7'.....'PACKED '

X'E7'.....'HEXADECIMAL'

RESFCONN Logical connector.

Default label-1: LOGICAL Default label-2: CONNECTOR Field type: 03040100 - Field resource segments Input data length: 1 Input data format: Hexadecimal (X) Default output length: 3 Default output format: Character (C)

X'80'.....'AND'

X'40'.....'OR'

RESFVALU Data value.

Default label-1: DATA Default label-2: VALUE Field type: 03040100 - Field resource segments Input data length: 16 Input data format: Character (C) Default output length: 16 Default output format: Character (C)

RESFVAL2 Data value 2.

Default label-1: DATA Default label-2: VALUE Field type: 03040100 - Field resource segments Input data length: 16 Input data format: Character (C) Default output length: 16 Default output format: Character (C)

(continued)

Secured Resource Fields Fieldname List

7-64 Auditing and Report Writing Guide

The type 03050000 fields allow you to select and print the data that makes up the field resource definitions for maps. The type 03050100 fields allow you to select and print the data that makes up the segments in a field resource definition for a map.

Field Description

RESMMSET Field mapset name.

Default label-1: FIELD Default label-2: MAPSET Default label-3: NAME Field type: 03050000 - Field resource segments Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

RESM#SEG Number of segments.

Default label-1: NUM Default label-2: OF Default label-3: SEGS Field type: 03050000 Input data length: 1 Input data format: Hexadecimal (X) Default output length: 1 Default output format: Zoned decimal (Z)

RESMDESC Field description.

Default label-1: FIELD Default label-2: DESCRIPTION Field type: 03050100 Input data length: 15 Input data format: Character (C) Default output length: 15 Default output format: Character (C)

RESMROW Field row.

Default label-1: FLD Default label-2: ROW Field type: 03050100 Input data length: 1 Input data format: Hexadecimal (X) Default output length: 2 Default output format: Zoned decimal (Z)

(continued)

Field Resource

Field Values for

Maps

Fieldname List Secured Resource Fields

Chapter 7. ALRTVCAU Audit File Report 7-65

Field Description

RESMCOL Field column.

Default label-1: FLD Default label-2: COL Field type: 03050100 Input data length: 1 Input data format: Hexadecimal (X) Default output length: 3 Default output format: Zoned decimal (Z)

RESMDLEN Data length.

Default label-1: DATA Default label-2: LENGTH Field type: 03050100 Input data length: 2 Input data format: Hexadecimal (X) Default output length: 5 Default output format: Zoned decimal (Z)

RESMDCOM Compare operator.

Default label-1: COMPARE Default label-2: OPERATOR Field type: 03050100 Input data length: 1 Input data format: Hexadecimal (X) Default output length: 11 Default output format: Character (C)

X'C3'.....'CHARACTER '

X'D7'.....'PACKED '

X'E7'.....'HEXADECIMAL'

RESMCONN Logical connector.

Default label-1: LOGICAL Default label-2: CONNECTOR Field type: 03050100 - Field resource segments Input data length: 1 Input data format: Hexadecimal (X) Default output length: 3 Default output format: Character (C)

X'80'.....'AND'

X'40'.....'OR'

(continued)

Secured Resource Fields Fieldname List

7-66 Auditing and Report Writing Guide

Field Description

RESMVALU Data value.

Default label-1: DATA Default label-2: VALUE Field type: 03050100 - Field resource segments Input data length: 16 Input data format: Character (C) Default output length: 16 Default output format: Character (C)

RESMVAL2 Data value 2.

Default label-1: DATA Default label-2: VALUE Field type: 03050100 - Field resource segments Input data length: 16 Input data format: Character (C) Default output length: 16 Default output format: Character (C)

Fieldname List Secured Resource Authorization Fields

Chapter 7. ALRTVCAU Audit File Report 7-67

Secured Resource Authorization Fields

The following fieldnames can be included in any ALRTVCAU report SUBTITLE, FIELD, or FIELDS command statements. These fieldnames are contained in the ALRTVCAU input file secured resource authorization records (segment X'040x0000'). These fields will be printed only on report detail lines with other secured resource authorization and common segment fieldnames.

Field Description

AUTHIDTP Type of ID affected (terminal or operator).

Default label-1: TERMINAL Default label-2: OR Default label-3: OPERATOR Field type: 04000000 - Secured Resource Authorization Input data length: 1 Input data format: Character (C) Default output length: 8 Default output format: Transformed (T)

C'O'............T'OPERATOR'

C'T'............T'TERMINAL'

AUTHMODE Mode of update (batch or online).

Default label-1: None Field type: 04000000 - Secured Resource Authorization Input data length: 1 Input data format: Character (C) Default output length: 6 Default output format: Transformed (T)

C'B'............T'BATCH '

C'O'............T'ONLINE'

AUTHTYPE Type of resource (transaction, program, file, map, or field).

Default label-1: RESOURCE Default label-2: TYPE Field type: 04000000 - Secured Resource Authorization Input data length: 2 Input data format: Character (C) Default output length: 11 Default output format: Transformed (T)

C'TR'............T'TRANSACTION'

C'PR'............T'PROGRAM '

C'FL'............T'FILE '

C'FS' ...........T'FIELD '

C'MP'............T'MAP '

(continued)

Secured Resource Authorization Fields Fieldname List

7-68 Auditing and Report Writing Guide

Field Description

AUTHACT Type of action (add or delete).

Default label-1: ADD Default label-2: OR Default label-3: DELETE Field type: 04000000 - Secured Resource Authorization Input data length: 1 Input data format: Character (C) Default output length: 6 Default output format: Transformed (T)

C'A'............T'ADD '

C'U'............T'DELETE'

The 04010000 segment records can be used to produce more specific reports concerning adding resources to or deleting resources from operators and terminals.

Field Description

AUTHID ID of terminal or operator affected.

Default label-1: UPDATED Default label-2: ID Field type: 04010000 - Secured resource authorization lists Input data length: 9 Input data format: Character (C) Default output length: 9 Default output format: Character (C)

AUTHOPER Name of operator affected.

Default label-1: OPERATOR Default label-2: NAME Field type: 04010000 - Secured resource authorization lists Input data length: 20 Input data format: Character (C) Default output length: 20 Default output format: Character (C)

(continued)

Secured Resource

Authorization Lists

Fieldname List Secured Resource Authorization Fields

Chapter 7. ALRTVCAU Audit File Report 7-69

Field Description

AUTHLIST List of resources updated.

Default label-1: RESOURCE Default label-2: LIST Field type: 04010000 - Secured resource authorization lists Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

AUTHALTR List of ALERT transactions updated.

Default label-1: ALRT Default label-2: TRAN Default label-3: LIST Field type: 04010000 - Secured resource authorization lists Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

AUTHFLAC Updated file access level (inquiry or update).

Default label-1: FILE Default label-2: ACCESS Default label-3: LEVEL Field type: 04010000 - Secured resource authorization lists Input data length: 1 Input data format: Character (C) Default output length: 6 Default output format: Transformed (T)

C'I'............T'INQUIRY'

C'U'............T'UPDATE '

AUTHMPRF Map reference number of affected maps.

Default label-1: MAP Default label-2: REFR Default label-3: NMBR Field type: 04010000 - Secured resource authorization lists Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

Activation and Deactivation Fields Fieldname List

7-70 Auditing and Report Writing Guide

Activation and Deactivation Fields

The following fieldnames can be included in any ALRTVCAU report SUBTITLE, FIELD, or FIELDS command statements. These fieldnames are contained in the ALRTVCAU input file activation and deactivation records (segment X'05000000'). These fields will be printed only on report detail lines with other activation or deactivation record and common segment fieldnames.

Field Description

ACTVSTAT Status of resource after update.

Default label-1: NEW Default label-1: STATUS Field type: 05000000 - Activate or deactivate information Input data length: 1 Input data format: Character (C) Default output length: 12 Default output format: Transformed (T)

C'A'............T'ACTIVATED '

C'D'............T'DE-ACTIVATED'

The 05010000 segment information can be used to produce reports about specific resources or resource types that have been activated or deactivated.

Field Description

ACTVTYPE Type of resource activated or deactivated.

Default label-1: RESOURCE Default label-2: TYPE Field type: 05010000 - Activate or deactivate information Input data length: 1 Input data format: Character (C) Default output length: 11 Default output format: Transformed (T)

C'R'............T'FIELD RSRC '

C'T'............T'TRANSACTION'

C'P'............T'PROGRAM '

C'F'............T'FILE '

C'M'............T'MAP '

C'R'............T'FIELD '

C'D'............T'TERMINAL '

C'O'............T'OPERATOR '

(continued)

Activation and

Deactivation Data

Fields

Fieldname List Activation and Deactivation Fields

Chapter 7. ALRTVCAU Audit File Report 7-71

Field Description

ACTVTRAN Transaction ID activated or deactivated.

Default label-1: TRAN Field type: 05010000 - Activate or deactivate information Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

ACTVPROG Program activated or deactivated.

Default label-1: PROGRAM Field type: 05010000 - Activate or deactivate information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

ACTVFILE File activated or deactivated.

Default label-1: FILENAME Field type: 05010000 - Activate or deactivate information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

ACTVMAP Map name activated or deactivated.

Default label-1: MAPNAME Field type: 05010000 - Activate or deactivate information Input data length: 7 Input data format: Character (C) Default output length: 7 Default output format: Character (C)

ACTVMAP# Map reference number activated or deactivated.

Default label-1: MAP Default label-2: REF Field type: 05010000 - Activate or deactivate information Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

(continued)

Activation and Deactivation Fields Fieldname List

7-72 Auditing and Report Writing Guide

Field Description

ACTVNAME Terminal or operator ID activated or deactivated.

Default label-1: AFFECTED Default label-2: ID Field type: 05010000 - Activate or deactivate information Input data length: 9 Input data format: Character (C) Default output length: 9 Default output format: Character (C)

ACTVTERM Terminal activated or deactivated.

Default label-1: TERM Field type: 05010000 - Activate or deactivate information Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

ACTVOPER Operator activated or deactivated.

Default label-1: OPERATOR Field type: 05010000 - Activate or deactivate information Input data length: 9 Input data format: Character (C) Default output length: 9 Default output format: Character (C)

ACTVFLDN Field resource activated or deactivated.

Default label-1: FIELD Default label-2: RESOURCE Field type: 05010000 - Activate or deactivate information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

ACTVFLDR Field real resource activated or deactivated.

Default label-1: REAL Default label-2: RESOURCE Field type: 05010000 - Activate or deactivate information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

Fieldname List Administrator Maintenance Fields

Chapter 7. ALRTVCAU Audit File Report 7-73

Administrator Maintenance Fields

The following fieldnames can be included in any ALRTVCAU report SUBTITLE, FIELD, or FIELDS command statements. These fieldnames are contained in the ALRTVCAU input file administrator maintenance records (segment X'06000000'). These fields will be printed only on report detail lines with other administrator maintenance and common segment fieldnames.

Field Description

ADMCTYPE Administrator change type (terminal or operator).

Default label-1: TERMINAL Default label-2: OR Default label-3: OPERATOR Field type: 06000000 - Administrator maintenance information Input data length: 1 Input data format: Character (C) Default output length: 8 Default output format: Transformed (T)

C'D'............T'TERMINAL'

C'O'............T'OPERATOR'

ADMCACT Administrator change action (change or reclaim).

Default label-1: CHANGE Default label-2: OR Default label-3: RECLAIM Field type: 06000000 - Administrator maintenance information Input data length: 1 Input data format: Character (C) Default output length: 7 Default output format: Transformed (T)

C'C'............T'CHANGE '

C'R'............T'RECLAIM'

Administrator Maintenance Fields Fieldname List

7-74 Auditing and Report Writing Guide

The 06010000 segment records can be used to produce reports on specific administrator maintenance activity logged as a result of using the administrator change and reclaim functions ADCT, ADRT, ADCO, and ADRO.

Field Description

ADMCNAME Administrator change: affected terminal or operator.

Default label-1: AFFECTED Default label-2: ID Field type: 06010000 - Administrator maintenance data values Input data length: 9 Input data format: Character (C) Default output length: 9 Default output format: Character (C)

ADMCTERM Administrator change: terminal ID.

Default label-1: ADMN Default label-2: CHNG Default label-3: TERM Field type: 06010000 - Administrator maintenance data values Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

ADMCOPER Administrator change: operator ID.

Default label-1: ADMINSTR Default label-2: CHANGE Default label-3: OPERATOR Field type: 06010000 - Administrator maintenance data values Input data length: 9 Input data format: Character (C) Default output length: 9 Default output format: Character (C)

ADMCFROM Administrator change: original administrator.

Default label-1: ADMINSTR Default label-2: CHANGED Default label-3: FROM Field type: 06010000 - Administrator maintenance data values Input data length: 9 Input data format: Character (C) Default output length: 9 Default output format: Character (C)

(continued)

Administrator

Maintenance Fields

Data Values

Fieldname List Administrator Maintenance Fields

Chapter 7. ALRTVCAU Audit File Report 7-75

Field Description

ADMCINTO Administrator change: new administrator.

Default label-1: ADMINSTR Default label-2: CHANGED Default label-3: TO Field type: 06010000 - Administrator maintenance data values Input data length: 9 Input data format: Character (C) Default output length: 9 Default output format: Character (C)

ADMCSTAT Administrator change status: temporary or permanent.

Default label-1: TEMPORARY Default label-2: OR Default label-3: PERMANENT Field type: 06010000 - Administrator maintenance data values Input data length: 1 Input data format: Character (C) Default output length: 9 Default output format: Transformed (T)

C'T'............T'TEMPORARY'

C'P'............T'PERMANENT'

Location Information Fields Fieldname List

7-76 Auditing and Report Writing Guide

Location Information Fields

The following fieldnames can be included in any ALRTVCAU report SUBTITLE, FIELD, or FIELDS command statements. These fieldnames are contained in the ALRTVCAU input file location records segment (X'070x0000'). These fields will be printed only on report detail lines with other location record and common segment fieldnames.

Field Description

LOCTYPE Location type (company, division, department, or section).

Default label-1: LOCATION Default label-2: TYPE Field type: 07000000 - Location ID maintenance Input data length: 2 Input data format: Character (C) Default output length: 10 Default output format: Transformed (T)

C'CO'...........T'COMPANY '

C'DI'...........T'DIVISION '

C'DP'...........T'DEPARTMENT'

C'SC'...........T'SECTION '

LOCACT Location activity (add or update).

Default label-1: ADD Default label-2: OR Default label-3: UPDATE Field type: 07000000 - Location ID maintenance Input data length: 1 Input data format: Character (C) Default output length: 6 Default output format: Transformed (T)

C'A'............T'ADD '

C'U'............T'UPDATE'

Fieldname List Location Information Fields

Chapter 7. ALRTVCAU Audit File Report 7-77

The 07010000 segment information can be used to produce very specific reports of changes to location information.

Field Description

LOCPARMD Location parameter description.

Default label-1: LOCATION Default label-2: PARAMETER Default label-3: DESCRIPTION Field type: 07010000 - Location ID information list Input data length: 1 Input data format: Hexadecimal (X) Default output length: 15 Default output format: Transformed (T)

X'01'......'LOCATION TYPE '

X'02'......'LOCATION ID '

X'03'......'LOCATION STATUS'

X'03'......'LOCATION NAME '

LOCPARMB Location parameter value before update.

Default label-1: BEFORE Field type: 07010000 - Location ID information list Input data length: 35 Input data format: Character (C) Default output length: 35 Default output format: Character (C)

LOCPARMA Location parameter value after update.

Default label-1: AFTER Field type: 07010000 - Location ID information list Input data length: 35 Input data format: Character (C) Default output length: 35 Default output format: Character (C)

LOCFLAG Indicates before or after data.

Default label-1: BEFORE Default label-2: /AFTER Field type: 07010000 - Location ID information list Input data length: 1 Input data format: Character (C) Default output length: 6 Default output format: Transformed (T)

C' '............T'N/A '

C'B'............T'BEFORE'

C'A'............T'AFTER '

(continued)

Location ID

Information List

Location Information Fields Fieldname List

7-78 Auditing and Report Writing Guide

Field Description

LOCID ID of location being changed.

Default label-1: LOCATION Default label-2: ID Field type: 07020000 - Location ID field values Input data length: 16 Input data format: Character (C) Default output length: 16 Default output format: Character (C)

LOCSTAT Location status.

Default label-1: LOCATION Default label-2: STATUS Field type: 07010000 - Location ID information list Input data length: 1 Input data format: Character (C) Default output length: 8 Default output format: Transformed (T)

C'A'............T'ACTIVE '

C'D'............T'DISABLED'

LOCNAME Location name.

Default label-1: LOCATION Default label-2: NAME Field type: 07010000 - Location ID information list Input data length: 35 Input data format: Character (C) Default output length: 35 Default output format: Character (C)

Fieldname List Password Change Field

Chapter 7. ALRTVCAU Audit File Report 7-79

Password Change Field

The following fieldname can be included in any ALRTVCAU report SUBTITLE, FIELD, or FIELDS command statements. This fieldname is contained in the ALRTVCAU input file operator password change records (OPWD) (segment X'08000000'). This field will be printed only on report detail lines with other operator password change record and common segment fieldnames.

Field Description

OPWDOPER Operator whose password was changed. (This field was formerly OPWDCHBY.)

Default label-1: OPERATOR Default label-2: PASSWORD Default label-3: CHANGED Field type: 08000000 - Security code change information Input data length: 9 Input data format: Character (C) Default output length: 9 Default output format: Character (C)

Program Refresh Fields Fieldname List

7-80 Auditing and Report Writing Guide

Program Refresh Fields

The following fieldnames can be included in any ALRTVCAU report SUBTITLE, FIELD, or FIELDS command statements. These fieldnames are contained in the ALRTVCAU input file program refresh records (REFR) (segment X'09000000'). These fields will be printed only on report detail lines with other program refresh records and common segment fieldnames.

Field Description

REFRPROG Refreshed program name.

Default label-1: REFRESHD Default label-2: PROGRAM Default label-3: NAME Field type: 09000000 - Program refresh information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

REFPRTYP Refreshed program type.

Default label-1: REFRESHD Default label-2: PROGRAM Default label-3: TYPE Field type: 09000000 - Program refresh information Input data length: 1 Input data format: Character (C) Default output length: 12 Default output format: Transformed (T)

C'M'............T'MONITOR PROG'

C'E'............T'EXIT PROGRAM'

C'L'............T'LOGO PROGRAM'

Fieldname List Optional Zap Fields

Chapter 7. ALRTVCAU Audit File Report 7-81

Optional Zap Fields

The following fieldnames can be included in any ALRTVCAU report SUBTITLE, FIELD, or FIELDS command statements. These fieldnames are contained in the ALRTVCAU input file optional zap records (VERS) (segment X'09000000'). These fields will be printed only on report detail lines with other optional zap records and common segment fieldnames.

Field Description

OPTZAPB Optional zap information before change.

Default label-1: OPTIONAL Default label-2: ZAP INFO Default label-3: (BEFORE) Field type: 0A000000 - Optional zap information Input data length: 15 Input data format: Hexadecimal (X) Default output length: 30 Default output format: Hexadecimal (X)

OPTZAPA Optional zap information after change.

Default label-1: OPTIONAL Default label-2: ZAP INFO Default label-3: (AFTER) Field type: 0A000000 - Optional zap information Input data length: 15 Input data format: Hexadecimal (X) Default output length: 30 Default output format: Hexadecimal (X)

Record Dump Information Fieldname List

7-82 Auditing and Report Writing Guide

Record Dump Information

The following fieldnames can be included in any ALRTVCAU report SUBTITLE, FIELD, or FIELDS command statements. These fieldnames are not themselves contained in any of the records in the audit file, but they will be included in the report if the FILEDUMP command is executed to get a listing of the audit records (diagnostic information). These fields are assigned a special segment ID of X'FF000000'.

Field Description

OFFSET Offset into record.

Default label-1: None Field type: FF000000 - Record dump information Input data length: 2 Input data format: Hexadecimal (X) Default output length: 4 Default output format: Hexadecimal (X)

RECORD Record data in hexadecimal and character format.

Default label-1: None Field type: FF000000 - Record dump information Input data length: 34 Input data format: Hexadecimal (X) Default output length: 72 Default output format: Transformed (T)

Sample ALRTVCAU Reports Introduction

Chapter 7. ALRTVCAU Audit File Report 7-83

Sample ALRTVCAU Reports

Introduction

Many different reports can be produced from the information in the BIM-ALERT/CICS audit file, depending on which types of changes to security you want to review. This section includes sample input commands and resulting output for a number of such reports. These sample reports should be considered examples from which further reports can be designed; they are not intended to be an exhaustive treatment of all reports that can be produced using the audit data.

The input statements of the sample ALRTVCAU reports that follow can be found in the BIM-ALERT installation library in member ALRTVCAU.J.

System Options Update Report

The following sample input can be used to produce a report showing changes to the current or permanent options, changes which affect the type of security processing BIM-ALERT/CICS performs.

// EXEC ALRTVREP,SIZE=256K

TITLES '** BIM-ALERT/CICS AUDIT INFORMATION **'

REPORT ALRTVCAU LINELEN(80)

SUBTITLE DATE LINE(2) LABEL('DATE:') CTLBREAK(P)

SUBTITLE ADMINID LINE(2) LABEL(' ADMIN ID:') JUSTIFY(C)

LENGTH(20)

SUBTITLE TRANID LINE(2) LABEL('FUNCTION:') JUSTIFY(R) LENGTH(8)

-

FORMAT(C)

SUBTITLE TIME LINE(3) LABEL('TIME:') CTLBREAK(P)

SUBTITLE ADMINAME LINE(3) LABEL('ADMIN NAME:') JUSTIFY(C)

LENGTH(20)

SUBTITLE SYSTEMID LINE(3) LABEL(' SYSID:') JUSTIFY(R)

SUBTITLE TRANDESC LINE(4) LABEL('ACTION:')

SUBTITLE LITERAL('= ') LINE(5) LENGTH(30)

SUBTITLE LITERAL('SECURITY OPTIONS') LINE(5) JUSTIFY(C)

SUBTITLE LITERAL('= ') LINE(5) LENGTH(30) JUSTIFY(R)

FIELD PARMVALD LABELS(N) JUSTIFY(L) FILLCHAR(.) LENGTH(32)

FIELD PARMVALB LABEL(BEFORE) JUSTIFY(C)

FIELD PARMVALA LABEL(AFTER) JUSTIFY(C)

SELECT IF TRANID EQ C'UCOP' OR TRANID EQ C'UPOP'

RUN

/*

Input

System Options Update Report Sample ALRTVCAU Reports

7-84 Auditing and Report Writing Guide

The preceding sample input produces the following report:

DATE: 03/23/2000 12:34:49 PAGE: 000002

** BIM-ALERT/CICS AUDIT INFORMATION **

DATE: 02/25/2000 ADMIN ID: FLL FUNCTION: UCOP

TIME: 14:40 ADMIN NAME: LINTON, FRED SYSID: VSE1CICS

ACTION: UPDATE CURRENT OPTIONS

= = = = = = = = = = = = = = = SECURITY OPTIONS = = = = = = = = = = = = = = =

BEFORE AFTER

------ -----

SYSTEM TRAN SECURITY............ ON OFF

SYSTEM PROG SECURITY............ OFF OFF

SYSTEM FILE SECURITY............ OFF OFF

TERMINAL TRAN SECURITY.......... OFF OFF

TERMINAL PROG SECURITY.......... OFF OFF

TERMINAL FILE SECURITY.......... OFF OFF

TERMINAL MAP SECURITY........... OFF OFF

OPERATOR TRAN SECURITY.......... ON OFF

OPERATOR PROG SECURITY.......... ON OFF

OPERATOR FILE SECURITY.......... ON OFF

OPERATOR MAP SECURITY........... OFF OFF

VIOLATION AUDITING.............. OFF OFF

TERMINAL SCHEDULING............. OFF OFF

DATE: 03/23/2000 12:34:49 PAGE: 000003

** BIM-ALERT/CICS AUDIT INFORMATION **

DATE: 02/26/2000 ADMIN ID: A FUNCTION: UCOP

TIME: 06:49 ADMIN NAME: N/A-ALERT NOT ACTIVE SYSID: VSE1CICS

ACTION: UPDATE CURRENT OPTIONS

= = = = = = = = = = = = = = = SECURITY OPTIONS = = = = = = = = = = = = = = =

BEFORE AFTER

------ -----

SYSTEM TRAN SECURITY............ OFF ON

SYSTEM PROG SECURITY............ OFF OFF

SYSTEM FILE SECURITY............ OFF OFF

TERMINAL TRAN SECURITY.......... OFF OFF

TERMINAL PROG SECURITY.......... OFF OFF

TERMINAL FILE SECURITY.......... OFF OFF

TERMINAL MAP SECURITY........... OFF OFF

OPERATOR TRAN SECURITY.......... OFF ON

OPERATOR PROG SECURITY.......... OFF ON

OPERATOR FILE SECURITY.......... OFF ON

OPERATOR MAP SECURITY........... OFF OFF

VIOLATION AUDITING.............. OFF OFF

TERMINAL SCHEDULING............. OFF OFF

Output

Sample ALRTVCAU Reports System Parameter Change Report

Chapter 7. ALRTVCAU Audit File Report 7-85

System Parameter Change Report

The following sample input can be used to produce a report showing all changes made to the system parameters. Because of the specified SELECT IF command, only those parameters that have been changed using the UPAR transaction will be included in the resulting report.

// EXEC ALRTVREP,SIZE=256K

REPORT ALRTVCAU

TITLES '** BIM-ALERT/CICS AUDIT INFORMATION **'

SUBTITLE SYSTEMID LINE(1) LABEL('SYSID :')

SUBTITLE ADMINID LINE(1) LABEL('ADMIN ID :') JUSTIFY(R) -

LENGTH(20)

SUBTITLE TRANID LINE(2) LABEL('FUNCTION:')

SUBTITLE PARMTYPE LINE(2) JUSTIFY(C)

SUBTITLE ADMINAME LINE(2) LABEL('ADMIN NAME:') JUSTIFY(R) -

LENGTH(20)

SUBTITLE TRANDESC LINE(3) LABEL('ACTION :')

SUBTITLE LITERAL('=') LINE(4) LENGTH(132)

SUBTITLE LITERAL(' SECURITY PARAMETERS ') LINE(4) JUSTIFY(C)

FIELD DATE LABEL(DATE) CTLBREAK(S)

FIELD TIME LABEL(TIME) CTLBREAK(S)

FIELD PARMVALD LABEL(N) JUSTIFY(L) FILLCHAR(.) LENGTH(40)

FIELD PARMVALB LABEL(<BEFORE) JUSTIFY(L)

FIELD PARMVALA LABEL(<AFTER) JUSTIFY(L)

SELECT IF PARMVALB NE PARMVALA AND TRANID EQ C'UPAR'

RUN

/*

The preceding sample input produces the following report:

DATE: 03/23/2000 12:48:58 PAGE: 000001

** BIM-ALERT/CICS AUDIT INFORMATION **

SYSID : VSE1CICS ADMIN ID : FLL

FUNCTION: UPAR SYSTEM PARAMETER ADMIN NAME: LINTON, FRED

ACTION : UPDATE SYSTEM PARMS

======================================================= SECURITY PARAMETERS ========================================================

DATE TIME BEFORE AFTER

---- ---- ------ -----

02/05/2000 13:58 DATE FORMAT............................. U C

02/05/2000 13:59 DATE FORMAT............................. C E

02/05/2000 14:00 DATE FORMAT............................. E U

02/06/2000 07:13 DATE FORMAT............................. U C

02/06/2000 07:13 DATE FORMAT............................. C E

02/06/2000 07:14 DATE FORMAT............................. E U

02/06/2000 15:56 DATE FORMAT............................. U C

02/11/2000 17:17 FORCE DELAY TIME........................ 0001 0000

02/12/2000 12:09 DATE FORMAT............................. U C

02/12/2000 13:28 DATE FORMAT............................. C U

02/16/2000 14:37 CONTROL SUFFIX.......................... 2 1

02/16/2000 16:31 CONTROL SUFFIX.......................... 1 2

02/20/2000 14:25 DATE FORMAT............................. U E

02/20/2000 14:51 DATE FORMAT............................. E C

02/25/2000 12:05 DYNAMIC TERMINALS....................... 00000 00020

02/25/2000 12:09 DATE FORMAT............................. C U

03/04/2000 08:43 DATE FORMAT............................. U C

03/04/2000 08:44 GROUP STAT/MAX VIOL..................... V A

03/04/2000 08:44 DATE FORMAT............................. C U

03/04/2000 08:45 USER SVC................................ 255 .

03/04/2000 12:49 CONSOLE VIOL DISPLAY.................... NO YES

03/04/2000 15:41 CONSOLE VIOL DISPLAY.................... YES NO

03/04/2000 16:18 DATE FORMAT............................. U C

03/10/2000 08:55 DATE FORMAT............................. C U

Input

Output

System Parameter Update Report Sample ALRTVCAU Reports

7-86 Auditing and Report Writing Guide

System Parameter Update Report

The following sample input can be used to produce a report showing all data logged by executing the UPAR function to update system parameters.

Note that this report, unlike the previous report, will include all data logged, whether or not it was changed, because no comparison of data fields is specified in the SELECT IF command.

// EXEC ALRTVREP,SIZE=256K

TITLES '** BIM-ALERT/CICS AUDIT INFORMATION **'

REPORT ALRTVCAU

SUBTITLE SYSTEMID LINE(1) LABEL('SYSID :')

SUBTITLE ADMINID LINE(1) LABEL('ADMIN ID :') JUSTIFY(R) -

LENGTH(20)

SUBTITLE TRANID LINE(2) LABEL('FUNCTION:')

SUBTITLE PARMTYPE LINE(2) JUSTIFY(C)

SUBTITLE ADMINAME LINE(2) LABEL('ADMIN NAME:') JUSTIFY(R) -

LENGTH(20)

SUBTITLE TRANDESC LINE(3) LABEL('FUNCTION:')

SUBTITLE LITERAL('=') LINE(4) LENGTH(132)

SUBTITLE LITERAL(' SECURITY PARAMETERS ') LINE(4) JUSTIFY(C)

FIELD DATE CTLBREAK(S)

FIELD TIME CTLBREAK(S)

FIELD PARMFLAG LABELS(NO) LENGTH(3)

FIELDS MAXVIOLA MAXCONSC CTRLSUFX EXTRAENT -

USEREXIT DYNATERM DUMMYTRM USERSVC NEWCODEN AGENCODE -

ALLTERMS ALLTRANS ALLPROGS ALLFILES FORCEDEL FORCEDSP -

OSTATMAX GSTATMAX MSGDELAY DATEFORM CONSVIOL UNSECTRM

SELECT IF TRANID EQ C'UPAR'

RUN

/*

The preceding sample input produces the following report:

DATE: 03/23/2000 13:08:26 PAGE: 000001

** BIM-ALERT/CICS AUDIT INFORMATION **

SYSID : VSE1CICS ADMIN ID : FLL

FUNCTION: UPAR SYSTEM PARAMETER ADMIN NAME: LINTON, FRED

FUNCTION: UPDATE SYSTEM PARMS

======================================================= SECURITY PARAMETERS ========================================================

MAX S USR NEW ALT ALL ALL ALL ALL FORCE FORC OP GP SN CON UNSECURD

MAX CON F EXT EXT DYNAM DUMM USR CDE GEN TRM TRN PRG FIL DELAY DISP ST ST MS DT VIO TERMINAL

DATE TIME VIO ATT # ENT REQ TERMS TERM SVC NTF CDE SEC SEC SEC SEC TIME TRAN MX MX DL FM DSP PROGRAM

---- ---- --- --- - --- --- ----- ---- --- --- --- --- --- --- --- ----- ---- -- -- -- -- --- --------

02/18/2000 08:11 BEF 010 003 0 010 NO 00000 DUMY . 005 NO NO NO NO NO 00:01 CSSN V V 3 U NO ________

02/18/2000 08:11 AFT 010 003 0 010 NO 00000 DUMY . 005 NO NO NO NO NO 00:01 CSSN V V 3 U NO ________

02/20/2000 14:25 BEF 010 003 0 010 NO 00000 DUMY . 005 NO NO NO NO NO 00:01 CSSN V V 3 U NO ________

02/20/2000 14:25 AFT 010 003 0 010 NO 00000 DUMY . 005 NO NO NO NO NO 00:01 CSSN V V 3 E NO ________

02/20/2000 14:51 BEF 010 003 0 010 NO 00000 DUMY . 005 NO NO NO NO NO 00:01 CSSN V V 3 E NO ________

02/20/2000 14:51 AFT 010 003 0 010 NO 00000 DUMY . 005 NO NO NO NO NO 00:01 CSSN V V 3 C NO ________

02/25/2000 12:05 BEF 010 003 0 010 NO 00000 DUMY . 005 NO NO NO NO NO 00:01 CSSN V V 3 C NO ________

02/25/2000 12:05 AFT 010 003 0 010 NO 00020 DUMY . 005 NO NO NO NO NO 00:01 CSSN V V 3 C NO ________

02/25/2000 12:09 BEF 010 003 0 010 NO 00020 DUMY . 005 NO NO NO NO NO 00:01 CSSN V V 3 C NO ________

02/25/2000 12:09 AFT 010 003 0 010 NO 00020 DUMY . 005 NO NO NO NO NO 00:01 CSSN V V 3 U NO ________

03/04/2000 08:43 BEF 010 003 0 010 NO 00020 DUMY . 005 NO NO NO NO NO 00:01 CSSN V V 3 U NO ________

03/04/2000 08:43 AFT 010 003 0 010 NO 00020 DUMY . 005 NO NO NO NO NO 00:01 CSSN V V 3 C NO ________

03/04/2000 08:44 BEF 010 003 0 010 NO 00020 DUMY 255 005 NO NO NO NO NO 00:01 CSSN V V 3 C NO ________

03/04/2000 08:44 AFT 010 003 0 010 NO 00020 DUMY . 005 NO NO NO NO NO 00:01 CSSN V V 3 U NO ________

03/04/2000 08:45 BEF 010 003 0 010 NO 00020 DUMY 255 005 NO NO NO NO NO 00:01 CSSN V V 3 U NO ________

03/04/2000 08:45 AFT 010 003 0 010 NO 00020 DUMY . 005 NO NO NO NO NO 00:01 CSSN V V 3 U NO ________

03/04/2000 12:49 BEF 010 003 0 010 NO 00020 DUMY . 005 NO NO NO NO NO 00:01 CSSN V V 3 U NO ________

03/04/2000 12:49 AFT 010 003 0 010 NO 00020 DUMY . 005 NO NO NO NO NO 00:01 CSSN V V 3 C NO ________

03/04/2000 15:41 BEF 010 003 0 010 NO 00020 DUMY . 005 NO NO NO NO NO 00:01 CSSN V V 3 C NO ________

03/04/2000 15:41 AFT 010 003 0 010 NO 00020 DUMY . 005 NO NO NO NO NO 00:01 CSSN V V 3 U NO ________

03/04/2000 16:18 BEF 010 003 0 010 NO 00020 DUMY . 005 NO NO NO NO NO 00:01 CSSN V V 3 U NO ________

03/04/2000 16:18 AFT 010 003 0 010 NO 00020 DUMY . 005 NO NO NO NO NO 00:01 CSSN V V 3 C NO ________

Input

Output

Sample ALRTVCAU Reports System Parameter Update Report

Chapter 7. ALRTVCAU Audit File Report 7-87

Global Terminal/Operator Parameter Change Report Sample ALRTVCAU Reports

7-88 Auditing and Report Writing Guide

Global Terminal/Operator Parameter Change Report

The following sample input can be used to produce a report showing all changes made to the global terminal and operator parameters using the UTOP function.

Note that all fields are to be displayed in a vertical format and all logged data is to be displayed whether or not it was changed. A report showing the same data in a horizontal format can be produced by selecting each field.

// EXEC ALRTVREP,SIZE=256K

TITLES '** BIM-ALERT/CICS AUDIT INFORMATION **'

REPORT ALRTVCAU

SUBTITLE SYSTEMID LINE(1) LABEL('SYSID :')

SUBTITLE ADMINID LINE(1) LABEL('ADMIN ID: ') JUSTIFY(R) -

LENGTH(20)

SUBTITLE TRANID LINE(2) LABEL('FUNCTION:')

SUBTITLE PARMTYPE LINE(2) JUSTIFY(C)

SUBTITLE ADMINAME LINE(2) LABEL('ADMIN NAME:') JUSTIFY(R) -

LENGTH(20)

SUBTITLE TRANDESC LINE(3) LABEL('ACTION :')

SUBTITLE LITERAL('=') LINE(4) LENGTH(132)

SUBTITLE LITERAL(' SECURITY PARAMETERS ') LINE(4) JUSTIFY(C)

FIELD DATE CTLBREAK(P) REPCHAR(' ')

FIELD TIME CTLBREAK(P) REPCHAR(' ')

FIELD PARMCHGI REPCHAR(' ')

FIELD PARMVALD LENGTH(40) FILLCHAR(.) JUSTIFY(L)

FIELDS PARMVALB PARMVALA

SELECT IF TRANID EQ C'UTOP'

RUN

/*

Input

Sample ALRTVCAU Reports Global Terminal/Operator Parameter Change Report

Chapter 7. ALRTVCAU Audit File Report 7-89

The preceding sample input produces the following report:

DATE: 03/23/2000 13:18:38 PAGE: 000001

** BIM-ALERT/CICS AUDIT INFORMATION **

SYSID : VSE1CICS ADMIN ID: FLL

FUNCTION: UTOP TERM/OPER SYSTEM PARM ADMIN NAME: LINTON, FRED

ACTION : UPDATE TERM/OPER PARMS

======================================================= SECURITY PARAMETERS ========================================================

SECURITY

CHG PARAMETER

DATE TIME IMM DESCRIPTION BEFORE AFTER

---- ---- --- ----------- ------ -----

02/27/2000 09:20 NO TERM LOGO NAME.......................... BIMLOGO BIMLOGO

TERM LOG OPTION......................... YES YES

TERM SIGNON PROGRAM..................... ________ ________

TERM SIGNOFF PROGRAM.................... ________ ________

TERM SCTY CODE PERIOD................... 090 090

TERM SCTY CODE MASK..................... NNNNNNNN NNNNNNNN

TERM PRINT PROFILE...................... NO NO

TERM DEFAULT AUTH....................... ALL ALL

TERM SCTY CODE HIST..................... 05 05

TERM MESSAGE FILE....................... S1SMS## S1SMS##

OPER LOG OPTION......................... YES YES

OPER SIGNON PROGRAM..................... ________ U1S610

OPER SIGNOFF PROGRAM.................... ________ ________

OPER SECURITY CODE PERIOD............... 100 100

OPER SECURITY CODE MASK................. NNNNNNNN NNNNNNNN

OPER PRINT PROFILE...................... NO NO

OPER DEFAULT AUTH....................... ALL ALL

OPER SECURITY CODE HISTORY.............. 05 05

OPER EXTERNAL SECURITY.................. NO NO

DATE: 03/23/2000 13:18:38 PAGE: 000002

** BIM-ALERT/CICS AUDIT INFORMATION **

SYSID : VSE1CICS ADMIN ID: FLL

FUNCTION: UTOP TERM/OPER SYSTEM PARM ADMIN NAME: LINTON, FRED

ACTION : UPDATE TERM/OPER PARMS

======================================================= SECURITY PARAMETERS ========================================================

SECURITY

CHG PARAMETER

DATE TIME IMM DESCRIPTION BEFORE AFTER

---- ---- --- ----------- ------ -----

03/04/2000 07:26 NO TERM LOGO NAME.......................... BIMLOGO BIMLOGO

TERM LOG OPTION......................... YES YES

TERM SIGNON PROGRAM..................... ________ ________

TERM SIGNOFF PROGRAM.................... ________ ________

TERM SCTY CODE PERIOD................... 090 090

TERM SCTY CODE MASK..................... NNNNNNNN NNNNNNNN

TERM PRINT PROFILE...................... NO ONE

TERM DEFAULT AUTH....................... ALL ALL

TERM SCTY CODE HIST..................... 05 05

TERM MESSAGE FILE....................... S1SMS## S1SMS##

OPER LOG OPTION......................... YES YES

OPER SIGNON PROGRAM..................... U1S610 ________

OPER SIGNOFF PROGRAM.................... ________ ________

OPER SECURITY CODE PERIOD............... 100 100

OPER SECURITY CODE MASK................. NNNNNNNN NNNNNNNN

OPER PRINT PROFILE...................... NO NO

OPER DEFAULT AUTH....................... ALL ALL

OPER SECURITY CODE HISTORY.............. 05 05

OPER EXTERNAL SECURITY.................. NO NO

Output

Resource Name Update Report Sample ALRTVCAU Reports

7-90 Auditing and Report Writing Guide

Resource Name Update Report

The following sample input can be used to produce a report showing the names of all secured resources that have been updated.

Note that the resulting report will not specify exactly what changes were made to secured resources. Instead, this report format provides a global method of determining which resources have been changed in some way or other.

// EXEC ALRTVREP,SIZE=256K

TITLES '** BIM-ALERT/CICS AUDIT INFORMATION **'

REPORT ALRTVCAU

SUBTITLE SYSTEMID LINE(1) LABEL('SYSID :')

SUBTITLE ADMINID LINE(1) LABEL('ADMIN ID :') JUSTIFY(R) -

LENGTH(20)

SUBTITLE TRANID LINE(2) LABEL('FUNCTION:') SORTPRTY(1) -

CTLBREAK(P)

SUBTITLE ADMINAME LINE(2) LABEL('ADMIN NAME:') JUSTIFY(R) -

LENGTH(20)

SUBTITLE TRANDESC LINE(3) LABEL('ACTION :')

SUBTITLE LITERAL('=') LINE(4) LENGTH(132)

SUBTITLE LITERAL(' SECURED RESOURCES ') LINE(4) JUSTIFY(C)

FIELD INFOTYPE REPCHAR(' ')

FIELD DATE LENGTH(15)

FIELDS TIME

FIELDS RESCTRAN RESCPROG RESCFILE RESCMAP RESMPSET RESMPREF

SELECT IF TRANTYPE(8) EQ T'RESOURCE'

RUN

/*

Input

Sample ALRTVCAU Reports Resource Name Update Report

Chapter 7. ALRTVCAU Audit File Report 7-91

The preceding sample input produces the following report:

DATE: 02/13/2000 12:40 PAGE: 000001

** BIM-ALERT/CICS AUDIT INFORMATION **

SYSID : TEST ADMIN ID : ERIC

FUNCTION: ASMP ADMIN NAME: KEHLER, ERIC

ACTION : ADD RESTRICTED MAP

======================================================== SECURED RESOURCES =========================================================

MAP

INFO TRAN PROGRAM FILE MAP MAPSET REF

TYPE DATE TIME ID NAME NAME NAME NAME NBR

---- ---- ---- ---- ------- ---- ---- ------ ---

SEC'D RESRC FIELD VALUES 01/12/2000 13:42 . . . S#M500 S1M500 0001

01/12/2000 13:47 . . . S#M510 S1M510 0005

01/12/2000 13:44 . . . S#M510 S1M510 0003

01/12/2000 13:45 . . . S#M510 S1M510 0004

01/12/2000 13:47 . . . S#M510 S1M510 0005

01/12/2000 13:45 . . . S#M510 S1M510 0004

01/12/2000 13:42 . . . S#M500 S1M500 0001

01/12/2000 13:43 . . . S#M500 S1M500 0002

01/12/2000 13:44 . . . S#M510 S1M510 0003

01/12/2000 13:43 . . . S#M500 S1M500 0002

DATE: 02/13/2000 12:40 PAGE: 000002

** BIM-ALERT/CICS AUDIT INFORMATION **

SYSID : TEST ADMIN ID : FLL

FUNCTION: ASTR ADMIN NAME: LINTON, FRED

ACTION : ADD SECURED TRANID

======================================================== SECURED RESOURCES =========================================================

MAP

INFO TRAN PROGRAM FILE MAP MAPSET REF

TYPE DATE TIME ID NAME NAME NAME NAME NBR

---- ---- ---- ---- ------- ---- ---- ------ ---

SEC'D RESRC FIELD VALUES 01/30/2000 11:43 BMGM . . . . .

01/04/2000 12:33 BIMO . . . . .

01/04/2000 12:33 BIMO . . . . .

01/04/2000 12:33 BIMV . . . . .

01/04/2000 12:33 BIMC . . . . .

01/02/2000 10:00 OPWD . . . . .

01/02/2000 10:00 OPWD . . . . .

01/04/2000 12:33 BIMV . . . . .

01/04/2000 12:33 BIMC . . . . .

01/30/2000 11:43 BMGM . . . . .

Output

Resource Update Report Sample ALRTVCAU Reports

7-92 Auditing and Report Writing Guide

Resource Update Report

The following sample input can be used to produce a report showing all changes made to secured resources.

// EXEC ALRTVREP,SIZE=256K

TITLES '** BIM-ALERT/CICS AUDIT INFORMATION **'

REPORT ALRTVCAU DATEFORM(DD,' ',MMM,' ',YYYY)

SUBTITLE SYSTEMID LINE(1) LABEL('SYSID :')

SUBTITLE ADMINID LINE(1) LABEL('ADMIN ID :') JUSTIFY(R) -

LENGTH(20)

SUBTITLE TRANID LINE(2) LABEL('FUNCTION:') SORTPRTY(1) -

CTLBREAK(P)

SUBTITLE ADMINAME LINE(2) LABEL('ADMIN NAME:') JUSTIFY(R) -

LENGTH(20)

SUBTITLE TRANDESC LINE(3) LABEL('ACTION :')

SUBTITLE LITERAL('=') LINE(4) LENGTH(132)

SUBTITLE LITERAL(' RESOURCE UPDATES ') LINE(4) JUSTIFY(C)

FIELD DATE LENGTH(11) SORTPRTY(2) CTLBREAK(S) REPCHAR(' ')

FIELD TIME SORTPRTY(3) CTLBREAK(S) REPCHAR(' ')

FIELDS RESPARMD RESPARMB RESPARMA

SELECT IF DATE GE D'01 JAN 2000' AND -

TRANTYPE(8) EQ T'RESOURCE'

RUN

/*

Input

Sample ALRTVCAU Reports Resource Update Report

Chapter 7. ALRTVCAU Audit File Report 7-93

The preceding sample input produces the following report:

DATE: 13 JAN 2000 12:43 PAGE: 000001

** BIM-ALERT/CICS AUDIT INFORMATION **

SYSID : TEST ADMIN ID : ERIC

FUNCTION: ASMP ADMIN NAME: KEHLER, ERIC

ACTION : ADD RESTRICTED MAP

======================================================== RESOURCE UPDATES ==========================================================

RESOURCE

PARAMETER

DATE TIME DESCRIPTION BEFORE AFTER

---- ---- ----------- ------ -----

12 JAN 2000 13:43 MAP FIELD DISPLAY . Y

13:45 MAP FIELD NUMBER . 001

13:47 MAP FIELD DISPLAY . Y

MAP FIELD NUMBER . 103

MAP FIELD TITLE . TEST FIELD 102 XXXX

MAP FIELD DISPLAY . Y

MAP FIELD NUMBER . 102

MAP FIELD TITLE . TEST FIELD 101 XXXX

MAP FIELD DISPLAY . Y

MAP FIELD NUMBER . 101

MAP FIELD TITLE . TEST FIELD 13 XXXXX

MAP FIELD DISPLAY . Y

MAP FIELD NUMBER . 013

DESCRIPTION . TEST MAP S#M510

STATUS . ACTIVE

NAME S#M510 S#M510

13:45 MAP FIELD TITLE . TEST FIELD 5

MAP FIELD DISPLAY . Y

MAP FIELD NUMBER . 005

MAP FIELD TITLE . TEST FIELD 4

MAP FIELD DISPLAY . Y

MAP FIELD NUMBER . 004

MAP FIELD TITLE . TEST FIELD 3

DATE: 13 JAN 2000 12:43 PAGE: 000002

** BIM-ALERT/CICS AUDIT INFORMATION **

SYSID : TEST ADMIN ID : ERIC

FUNCTION: ASMP ADMIN NAME: KEHLER, ERIC

ACTION : ADD RESTRICTED MAP

======================================================== RESOURCE UPDATES ==========================================================

RESOURCE

PARAMETER

DATE TIME DESCRIPTION BEFORE AFTER

---- ---- ----------- ------ -----

12 JAN 2000 13:45 MAP FIELD TITLE . TEST FIELD 1

MAP FIELD DISPLAY . Y

STATUS . ACTIVE

13:47 MAP FIELD TITLE . TEST FIELD 103 XXXX

13:45 DESCRIPTION . TEST MAP S#M510

13:44 MAP FIELD NUMBER . 005

MAP FIELD TITLE . TEST FIELD 5

13:45 NAME S#M510 S#M510

13:44 MAP FIELD DISPLAY . Y

STATUS . ACTIVE

MAP FIELD TITLE . TEST FIELD 1

MAP FIELD DISPLAY . Y

MAP FIELD TITLE . TEST FIELD 3

MAP FIELD NUMBER . 003

MAP FIELD NUMBER . 001

MAP FIELD DISPLAY . Y

DESCRIPTION . TEST MAP S#M510

DATE: 13 JAN 2000 12:43 PAGE: 000003

** BIM-ALERT/CICS AUDIT INFORMATION **

SYSID : TEST ADMIN ID : ERIC

FUNCTION: ASMP ADMIN NAME: KEHLER, ERIC

ACTION : ADD RESTRICTED MAP

======================================================== RESOURCE UPDATES ==========================================================

RESOURCE

PARAMETER

DATE TIME DESCRIPTION BEFORE AFTER

---- ---- ----------- ------ -----

12 JAN 2000 13:42 MAP FIELD NUMBER . 002

DESCRIPTION . TEST MAP S#M550

STATUS . ACTIVE

NAME S#M500 S#M500

Output

Resource Activation and Deactivation Report Sample ALRTVCAU Reports

7-94 Auditing and Report Writing Guide

Resource Activation and Deactivation Report

The following sample input can be used to produce a report showing all activation and deactivation activity against all secured resources:

// EXEC ALRTVREP,SIZE=256K

TITLES '** BIM-ALERT/CICS AUDIT INFORMATION **'

REPORT ALRTVCAU

SUBTITLE SYSTEMID LINE(1) LABEL('SYSID :')

SUBTITLE ADMINID LINE(1) LABEL('ADMIN ID :') JUSTIFY(R) -

LENGTH(20)

SUBTITLE TRANTYPE LINE(2) LABEL('FUNCTION:')

SUBTITLE ADMINAME LINE(2) LABEL('ADMIN NAME:') JUSTIFY(R) -

LENGTH(20)

SUBTITLE LITERAL('=') LINE(3) LENGTH(132)

SUBTITLE LITERAL(' ACTIVATE/DEACTIVATE RESOURCES ') LINE(3) -

JUSTIFY(C)

FIELD DATE SORTPRTY(1) REPCHAR(' ') CTLBREAK(S)

FIELD TIME SORTPRTY(2)

FIELDS ACTVTYPE ACTVSTAT ACTVTRAN ACTVPROG ACTVFILE ACTVMAP

FIELDS ACTVMAP# ACTVOPER ACTVTERM

SELECT IF TRANTYPE(8) EQ T'ACTIVATE'

RUN

/*

The preceding sample input produces the following report:

DATE: 03/12/2000 14:46 PAGE: 000001

** BIM-ALERT/CICS AUDIT INFORMATION **

SYSID : TEST ADMIN ID : FLL

FUNCTION: ACTIVATE ADMIN NAME: LINTON, FRED

================================================== ACTIVATE/DEACTIVATE RESOURCES ===================================================

RESOURCE NEW MAP

DATE TIME TYPE STATUS TRAN PROGRAM FILENAME MAPNAME REF OPERATOR TERM

---- ---- -------- ------ ---- ------- -------- ------- --- -------- ----

01/27/2000 12:19 TERMINAL ACTIVATED . . . . . . BC34

12:19 TERMINAL ACTIVATED . . . . . . BC32

01/28/2000 07:55 TERMINAL ACTIVATED . . . . . . BC32

11:49 TERMINAL ACTIVATED . . . . . . BC22

11:44 TRANSACTION ACTIVATED BMGM . . . . . .

07:54 TERMINAL ACTIVATED . . . . . . BC34

07:34 TERMINAL DE-ACTIVATED . . . . . . BC34

07:34 TERMINAL DE-ACTIVATED . . . . . . BC32

02/01/2000 13:57 TERMINAL ACTIVATED . . . . . . BC13

09:06 TERMINAL ACTIVATED . . . . . . BC14

02/01/2000 17:35 OPERATOR ACTIVATED . . . . . GSWJBG .

17:35 TERMINAL ACTIVATED . . . . . . BC31

02/02/2000 14:21 OPERATOR ACTIVATED . . . . . JMM .

14:22 OPERATOR ACTIVATED . . . . . JMM .

02/28/2000 16:16 TERMINAL ACTIVATED . . . . . . BC12

03/08/2000 10:56 FILE DE-ACTIVATED . . S1SAUDT . . . .

13:16 FILE DE-ACTIVATED . . S1SECLG . . . .

Input

Output

Sample ALRTVCAU Reports Administrator Change Activity Report

Chapter 7. ALRTVCAU Audit File Report 7-95

Administrator Change Activity Report

The following sample input can be used to produce a report showing all changes made to operator and terminal administrative ownership privileges using the ADCT, ACRT, ADCO, or ADRO functions:

// EXEC ALRTVREP,SIZE=256K

TITLES '** BIM-ALERT/CICS AUDIT INFORMATION **'

REPORT ALRTVCAU TIMEFORM(HH : MM : SS)

SUBTITLE SYSTEMID LINE(1) LABEL('SYSID :')

SUBTITLE TRANDESC LINE(2) LABEL('ACTION :')

SUBTITLE ADMINID LINE(1) LABEL('ADMIN ID :') JUSTIFY(R) -

LENGTH(20)

SUBTITLE ADMINAME LINE(2) LABEL('ADMIN NAME:') JUSTIFY(R) -

LENGTH(20)

SUBTITLE LITERAL('=') LINE(3) LENGTH(132)

SUBTITLE LITERAL(' ADMINISTRATOR CHANGE ACTIVITY ') LINE(3) -

JUSTIFY(C)

FIELD DATE REPCHAR(' ') CTLBREAK(P)

FIELD TIME REPCHAR(") CTLBREAK(S) LENGTH(8)

FIELD TRANID REPCHAR(") LABEL(TRAN) LENGTH(4)

FIELD LITERAL(' ')

FIELD ADMCSTAT LABEL(N) REPCHAR(' ') MISSCHAR(' ')

FIELD LITERAL(ADMINISTRATOR) REPCHAR(")

FIELD ADMCACT LABEL(N) REPCHAR(")

FIELD LITERAL(FOR) REPCHAR(' ')

FIELD ADMCTYPE LABEL(N) REPCHAR(")

FIELD ADMCNAME LABEL(N) JUSTIFY(L)

FIELD LITERAL('FROM ADMIN:') REPCHAR(' ')

FIELD ADMCFROM JUSTIFY(L) LABEL(N) REPCHAR(")

FIELD LITERAL('TO ADMIN:') REPCHAR(' ')

FIELD ADMCINTO JUSTIFY(L) LABEL(N) REPCHAR(")

SELECT IF TRANTYPE(5) EQ T'ADMIN'

RUN

/*

Input

Administrator Change Activity Report Sample ALRTVCAU Reports

7-96 Auditing and Report Writing Guide

The preceding sample input produces the following report:

DATE: 03/13/2000 12:51:23 PAGE: 000001

** BIM-ALERT/CICS AUDIT INFORMATION **

SYSID : TEST ADMIN ID : ERIC

ACTION : CHANGE OPERATOR ADMIN ADMIN NAME: KEHLER, ERIC

================================================== ADMINISTRATOR CHANGE ACTIVITY ===================================================

DATE TIME TRAN

---- ---- ----

03/13/2000 06:06:09 ADCO PERMANENT ADMINISTRATOR CHANGE FOR OPERATOR DICKM2 FROM ADMIN: ERIC TO ADMIN: FLL

" " " " " JSTECHER " "

" " " " Y2TEST " "

03/13/2000 06:08:51 ADCT TEMPORARY ADMINISTRATOR CHANGE FOR TERMINAL BC12 FROM ADMIN: FLL TO ADMIN: ERIC

" " " " " BC13 " "

" " " " " BC22 " "

" " " " " BC32 " "

" " " " " BC33 " "

" " " " " DUMY " "

" " " " " Q008 " "

" " " " " YR2K " "

03/13/2000 06:09:22 ADRT ADMINISTRATOR RECLAIM FOR TERMINAL BC12 FROM ADMIN: ERIC TO ADMIN: FLL

" " " " " BC13 " "

" " " " " BC22 " "

" " " " " BC32 " "

" " " " " BC33 " "

" " " " " DUMY " "

" " " " " Q008 " "

" " " " " YR2K " "

Output

Sample ALRTVCAU Reports Location Change Report

Chapter 7. ALRTVCAU Audit File Report 7-97

Location Change Report

The following sample input can be used to produce a report showing all changes made to the location information:

// EXEC ALRTVREP,SIZE=256K

TITLES '** BIM-ALERT/CICS AUDIT INFORMATION **'

REPORT ALRTVCAU TIMEFORM(HH : MM : SS)

SUBTITLE SYSTEMID LINE(1) LABEL('SYSID :')

SUBTITLE TRANTYPE LINE(2) LABEL('TYPE :')

SUBTITLE ADMINID LINE(1) LABEL('ADMIN ID :') JUSTIFY(R) -

LENGTH(20)

SUBTITLE ADMINAME LINE(2) LABEL('ADMIN NAME:') JUSTIFY(R) -

LENGTH(20)

SUBTITLE LITERAL('=') LINE(3) LENGTH(132)

SUBTITLE LITERAL(' LOCATION CHANGE ACTIVITY ') LINE(3) -

JUSTIFY(C)

FIELD DATE REPCHAR(' ') CTLBREAK(S)

FIELD TIME REPCHAR(") CTLBREAK(S) LENGTH(8)

FIELD TRANID REPCHAR(") LABEL(TRAN) LENGTH(4)

FIELDS LOCFLAG LOCID LOCSTAT LOCNAME

SELECT IF TRANTYPE(8) EQ T'LOCATION'

RUN

/*

The preceding sample input produces the following report:

DATE: 02/26/2000 06:29:00 PAGE: 000001

** BIM-ALERT/CICS AUDIT INFORMATION **

SYSID : VSE1CICS ADMIN ID : ERIC

TYPE : LOCATION ADMIN NAME: KEHLER, ERIC

==================================================== LOCATION CHANGE ACTIVITY ======================================================

BEFORE LOCATION LOCATION LOCATION

DATE TIME TRAN /AFTER ID STATUS NAME

---- ---- ---- ------ -------- -------- --------

02/25/2000 12:12:31 ADPT BEFORE BIMCLBSSUPP . .

" " AFTER BIMCLBSSUPP ACTIVE COLUMBUS DEVELOPMENT_____________

02/25/2000 12:14:51 UCOM BEFORE BIM ACTIVE B I MOYLE ASSOCIATES, INC.________

" " AFTER BIM ACTIVE B I MOYLE ASSOCIATES, INC.

02/25/2000 12:15:26 UDPT BEFORE BIMCLBSDEVL ACTIVE COLUMBUS DEVELOPMENT

" " AFTER BIMCLBSDEVL ACTIVE COLUMBUS DEVELOPMENT

02/25/2000 12:15:36 UDPT BEFORE BIMCLBSSUPP ACTIVE COLUMBUS DEVELOPMENT_____________

" " AFTER BIMCLBSSUPP ACTIVE COLUMBUS SUPPORT

02/25/2000 12:18:32 UDPT BEFORE BIMSNTASUPP ACTIVE SANTA ANA SUPPORT__________

" " AFTER BIMSNTASUPP ACTIVE SANTA ANA SUPPORT

02/25/2000 12:18:43 UDPT BEFORE BIMSNTADEVL ACTIVE SANTA ANA DEVELOPMENT____________

" " AFTER BIMSNTADEVL ACTIVE SANTA ANA DEVELOPMENT

02/25/2000 12:45:29 UDIV BEFORE BIMCLBS ACTIVE BIM OHIO OFFICE_________________

" " AFTER BIMCLBS ACTIVE BIM OHIO OFFICE

02/25/2000 12:45:46 UDIV BEFORE BIM0000 ACTIVE ( N/A )

" " AFTER BIM0000 DISABLED ( N/A )

02/25/2000 12:46:55 ASCT BEFORE BIMSNTADEVLEPIC . .

" " AFTER BIMSNTADEVLEPIC ACTIVE BIM-EPIC/VSE

02/25/2000 12:47:59 ASCT BEFORE BIMCLBSDEVLALRT . .

" " AFTER BIMCLBSDEVLALRT ACTIVE BIM-ALERT

02/25/2000 12:47:59 ASCT BEFORE BIMCLBSDEVLFAQS . .

" " AFTER BIMCLBSDEVLFAQS ACTIVE BIM-FAQS

02/25/2000 12:52:32 UDIV BEFORE BIM0000 DISABLED ( N/A )

" " AFTER BIM0000 DISABLED ( N/A )

02/25/2000 12:53:10 UDPT BEFORE BIMCLBS0000 ACTIVE ( N/A )

" " AFTER BIMCLBS0000 DISABLED ( N/A )

02/25/2000 12:53:26 UDPT BEFORE BIMSNTA0000 ACTIVE ( N/A )

" " AFTER BIMSNTA0000 DISABLED ( N/A )

02/25/2000 12:53:38 UDPT BEFORE BIMMPLS0000 ACTIVE ( N/A )

Input

Output

Operator Profile Change Report Sample ALRTVCAU Reports

7-98 Auditing and Report Writing Guide

Operator Profile Change Report

The following sample input can be used to produce a report showing all changes made to selected fields in the operator profile records:

// EXEC ALRTVREP,SIZE=256K

TITLES '** BIM-ALERT/CICS AUDIT INFORMATION **'

REPORT ALRTVCAU

SUBTITLE SYSTEMID LINE(1) LABEL('SYSID :')

SUBTITLE TRANTYPE LINE(2) LABEL('TYPE :')

SUBTITLE ADMINID LINE(1) LABEL('ADMIN ID :') JUSTIFY(R) -

LENGTH(20) -

SORTPRTY(1) CTLBREAK(P)

SUBTITLE ADMINAME LINE(2) LABEL('ADMIN NAME:') JUSTIFY(R) -

LENGTH(20)

SUBTITLE LITERAL('=') LINE(3) LENGTH(132)

SUBTITLE LITERAL(' OPERATOR CHANGE ACTIVITY ') LINE(3) -

JUSTIFY(C)

FIELD DATE REPCHAR(' ') CTLBREAK(S) SORTPRTY(2)

FIELD TIME REPCHAR(' ') CTLBREAK(S) SORTPRTY(3)

FIELD TRANID REPCHAR(") LABEL(TRAN) LENGTH(4)

FIELDS TMOPFLAG TMOPERID TMOPERNM TMOPITLM TMOPDEVC TMOPALT1

FIELDS TMOPALT2 TMOPGRP

SELECT IF TRANID EQ C'UAUP'

RUN

/*

The preceding sample input produces the following report:

DATE: 01/29/2000 14:12 PAGE: 000001

** BIM-ALERT/CICS AUDIT INFORMATION **

SYSID : TEST ADMIN ID : LFL

TYPE : TERMOPER ADMIN NAME: LINTON, FRED

==================================================== OPERATOR CHANGE ACTIVITY ======================================================

INACT OPER OPER OPER

BEFORE OPERATOR TIME PRIM ALRT ALRT TERM

DATE TIME TRAN /AFTER ID USER NAME LIMT DEVC TRM1 TRM2 GRP

---- ---- ---- ------ -------- --------- ----- ---- ---- ---- ----

01/29/2000 11:35 UAUP BEFORE EDP EDP 00:01 . . . ALL

" AFTER EDP EDP 01:01 N480 N481 . ALL

01/29/2000 12:53 UAUP BEFORE EDP EDP 01:01 N480 N481 . ALL

" AFTER EDP EDP 01:01 N480 N481 N482 ALL

01/29/2000 13:16 UAUP BEFORE EDP EDP 01:01 N480 N481 N482 ALL

" AFTER EDP EDP 01:01 N480 N481 N482 ALL

Input

Output

Sample ALRTVCAU Reports Operator Profile Change Report

Chapter 7. ALRTVCAU Audit File Report 7-99

8-1

8

ALRTVVAU Audit File Report (VSE)

This chapter describes the ALRTVVAU audit file report, which you can use to select and display information from the BIM-ALERT/VSE audit file.

Introduction .............................................................................................................. 8-3 General Information ............................................................................................. 8-3 Sample JCL .......................................................................................................... 8-3 Input Record Description ...................................................................................... 8-4 Field Information .................................................................................................. 8-8

Fieldname List ........................................................................................................ 8-10 Common Segment Fields .................................................................................... 8-10 Extended User Fields .......................................................................................... 8-16 Jobmask Fields ................................................................................................... 8-21 SECID Maintenance Fields ................................................................................. 8-26 DASD Dataset Maintenance Fields ..................................................................... 8-31 Tape Dataset Maintenance Fields........................................................................ 8-35 Resource Maintenance Fields .............................................................................. 8-39 Library Maintenance Fields ................................................................................ 8-43 Rules Table Maintenance Fields ......................................................................... 8-47 Control File Maintenance Fields ......................................................................... 8-50 Node Information Fields ..................................................................................... 8-56 Remote Submittal Information Fields .................................................................. 8-58

Sample ALRTVVAU Reports ................................................................................. 8-60 Introduction ........................................................................................................ 8-60 DASD Dataset Change Report ............................................................................ 8-61 Resource Change Report ..................................................................................... 8-62 Control File Maintenance Report ........................................................................ 8-63

8-2 Auditing and Report Writing Guide

Introduction General Information

Chapter 8. ALRTVVAU Audit File Report 8-3

Introduction

General Information

Information contained in the BIM-ALERT/VSE audit file is available for selection and display in the ALRTVVAU report type. This information includes changes made to the following:

Extended user information JOBMASK records SECID records DASD, tape, library, and other resource datasets The rules table The control file

To report on changes to batch user profiles, use the ALRTVCAU report type, as described in Chapter 7.

This report type requires the BIM-ALERT/VSE audit file, or a VSAM copy of the file, as input. It will also accept a sequential tape or disk file of variable-length records as input.

The phase ALRTVVAU is loaded by ALRTVREP when this report type is specified on a REPORT command statement. ALRTVVAU reads the input file and formats the data for the report.

Sample JCL

The following sample JCL can be used to execute any ALRTVVAU report:

// JOB ALRTVVAU BIM-ALERT/VSE audit file report

// LIBDEF PHASE,SEARCH=.... <== optional

// DLBL IJSYSUC,'user.catalog.name',,VSAM <== optional

// DLBL SORTWK1,'SORTWK1.SYS001.WORKFILE',0000,VSAM, <== optional

DISP=(,DELETE),RECORDS=2000,RECSIZE=4096 <== optional

// DLBL S1SAUDT,'ALERT.S1SAUDT.V51',,VSAM

// EXEC ALRTVREP,SIZE=256K

.

.

/*

/&

Input Dataset

I/O Module Name

Input Record Description Introduction

8-4 Auditing and Report Writing Guide

Input Record Description

Each BIM-ALERT/VSE audit file record contains an 18-byte record key and one of several subordinate information field types (segments).

The common segment contains control information about the record. It is contained in every record type.

The 01000000 segment contains the global information regarding changes to the extended user information. (Such changes are made with transactions AUSR and UUSR.) This is the information necessary to identify a USER record.

User Information Data List (Type 01010000)

The 01010000 segment fields can be used to produce a report of all before and after data concerning changes to the extended user records. This report will be produced in a vertical format, with multiple output lines per record (one line per field).

User Information Data Values (Type 01020000)

The type 01020000 fields allow you to select and report on specific extended user record fields to limit the report to very specific information.

User Information Task ID Build Parameters (Type 01030000)

The type 01030000 fields allow you to select and report on specific extended user record TASKID build parameters.

The type 03000000 fields can be used to produce a listing of all the jobmask records that have been added or updated. The report does not show the changes that were made; rather, it shows which jobmask records were changed.

Jobmask Data List (Type 03010000)

The type 03010000 fields produce a complete listing of all before and after data for each field in the jobmask records. This report will be produced in a vertical format, with multiple output lines per record (one line per field).

Jobmask Data Values (Type 03020000)

The type 03020000 fields allow you to select and report on specific data fields (for example, Mask) in a jobmask record.

The type 05000000 fields show a global list of all SECID records that have been changed. This list does not show the changes that were made; rather, it shows which SECID records were changed.

Introduction

Common

Information (Type

00000000)

Extended User

Maintenance (Type

01000000)

Jobmask

Maintenance (Type

03000000)

SECID Information

(Type 05000000)

Introduction Input Record Description

Chapter 8. ALRTVVAU Audit File Report 8-5

SECID Data List (Type 05010000)

The type 05010000 fields can be used to produce reports of all before and after SECID data logged as a result of any SECID change. The report will be produced in a vertical format, with multiple lines of output per record (one line per field).

SECID Data Values (Type 05020000)

The type 05020000 fields can be used to produce reports of before and after data for specific SECID record fields.

The type 06000000 fields can be used to produce a global report of all DASD dataset records that have been changed. This report does not show the changes that were made; rather, it shows which DASD dataset records were changed.

DASD Dataset Data List (Type 06010000)

The type 06010000 fields can be used to produce reports showing all before and after DASD dataset information logged as a result of any DASD dataset update. The report is produced in a vertical format, with multiple lines of output per record (one line per field).

DASD Dataset Data Values (Type 06020000)

The type 06020000 fields can be used to produce reports of before and after DASD dataset data for specific fields.

The type 07000000 fields can be used to produce a global report of all tape dataset records that have been changed. This report does not show the changes that were made; rather, it shows which tape dataset records were changed.

Tape Dataset Data List (Type 07010000)

The type 07010000 fields can be used to produce reports showing all before and after tape dataset information logged as a result of any tape dataset update. The report is produced in a vertical format, with multiple lines of output per record (one line per field).

Tape Dataset Data Values (Type 07020000)

The type 07020000 fields can be used to produce reports of before and after tape dataset data for specific fields.

The type 08000000 fields can be used to produce a global report of all resource records that have been changed. This report does not show the changes that were made; rather, it shows which resource records were changed.

Resource Data List (Type 08010000)

The type 08010000 fields can be used to produce reports showing all before and after resource information logged as a result of any resource update. The report is produced in a vertical format, with multiple lines of output per record (one line per field).

Resource Data Values (Type 08020000)

The type 08020000 fields can be used to produce reports of before and after resource data for specific fields.

DASD Dataset

Maintenance

Information (Type

06000000)

Tape Dataset

Maintenance

Information (Type

07000000)

Resource

Maintenance

Information (Type

08000000)

Input Record Description Introduction

8-6 Auditing and Report Writing Guide

The type 09000000 fields can be used to produce a global report of all library records that have been changed. This report does not show the changes that were made; rather, it shows which library records were changed.

Library Data List (Type 09010000)

The type 09010000 fields can be used to produce reports showing all before and after library information logged as a result of any resource update. The report is produced in a vertical format, with multiple lines of output per record (one line per field).

Library Data Values (Type 09020000)

The type 09020000 fields can be used to produce reports of before and after library data for specific fields.

The type 0A0x0000 fields can be used to produce a report of all before and after data logged as a result of executing CALR to perform rules table maintenance. The report will be produced in a vertical format, with multiple lines per audit record (one line per field).

Rules Table Maintenance Values (Type 0A010000)

The type 0A010000 fields can be used to produce reports of before and after rules table maintenance data.

Rules Table Before/After Values (Type 0A020000)

The type 0A020000 fields can be used to produce reports of before and after rules table maintenance data for specific fields.

The type 0B0x0000 fields can be used to produce a report of all before and after data logged as a result of executing SCFL to perform control file maintenance. The report will be produced in a vertical format, with multiple lines per audit record (one line per field).

Control File Maintenance Values (Type 0B010000)

The type 0B010000 fields can be used to produce reports of before and after control file maintenance data.

Control File Before/After Values (Type 0B020000)

The type 0B020000 fields can be used to produce reports of before and after control file maintenance data for specific fields.

Control File Monitor Parameters (Type 0B030000)

The type 0B030000 fields can be used to produce reports of monitor parameters and monitor suspend parameters changed in the control file record.

The type C00x0000 fields can be selected to produce a report of node name data changed in the system control file record.

Node Name Before/After Values (Type C0010000)

Library

Maintenance

Information (Type

09000000)

Rules Table

Maintenance Data

List (Type

0A0x0000)

Control File

Maintenance Data

List (Type

0B0x0000)

Node Information

(Type C00x0000)

Introduction Input Record Description

Chapter 8. ALRTVVAU Audit File Report 8-7

The type C0010000 fields can be used to produce reports of all before and after node name parameters changed in the system control file record.

Node Name Parameters (Type C0020000)

The type C0020000 fields can be used to produce a report of before and after node name parameter changes for specific fields.

The type C10x0000 fields can be selected to produce a report of remote submittal data changed in the system control file record.

Remote Submittal Parameter Descriptions (Type C1010000)

The type C1010000 fields can be used to produce a report of all before and after remote submittal parameters changed in the system control file record.

Remote Submittal Parameters (Type C1020000)

The type C1020000 fields can be used to produce a report of before and after data for specific fields, such as target classes.

Remote Submittal Parameters (Type C1030000)

The type C1030000 fields can be used to produce a report of before and after data for specific fields, such as target SYSIDs.

Remote Submittal

Information (Type

C10x0000)

Field Information Introduction

8-8 Auditing and Report Writing Guide

Field Information

Report output is comprised of one or more data fields extracted from an input dataset and formatted according to default or user specifications. Each data field is selected from a pre-defined list of ALRTVVAU fieldnames.

At report generation time, each fieldname selected is assigned a report column, positioned from left to right across the report page in the order in which the fieldnames were specified.

Data corresponding to the selected fieldname is located, extracted from the physical input record by the ALRTVVAU I/O module, and moved to, or transformed into, the output report column, using either the default values described in the fieldname entries below, or as specified by the user in a FIELD command statement.

The following information is provided for each ALRTVVAU fieldname:

Heading Description

Group Field: YES Indicates that the fieldname being defined is a group fieldname containing several individual fieldnames within the group. The individual fieldnames are listed. If the group fieldname is specified in the SUBTITLE, FIELD, or FIELDS command

statement, input data represented by all individual fieldnames within the group will be printed as a single field.

If the individual fieldnames are specified in a command statement, each fieldname is assigned its own column in the report output detail line.

Field type Each fieldname is defined as a particular field type. By definition, type 00000000 information is present in every input record. Following the type 00000000 common segment information, ALRTVVAU records will contain one subordinate type of field information.

Default label-n Default label information is positioned in the output report, if requested, at the top of each page of output. Up to three labels can be specified for each field; they will be placed above the report column reserved for the fieldname.

Occurrences: variable Indicates that the field is defined within a variable-occurrence segment. This fieldname, if included on any FIELD or FIELDS command statement, will generate a report detail line for every occurrence of the information in the record.

Belongs to group Indicates a higher level group fieldname which can be included on any SUBTITLE, FIELD, or FIELDS command statement to display the data represented by this fieldname.

Input data length Represents the defined length of the data in the input record corresponding to the fieldname. If the length is indicated as variable, then the length of the data field has no pre-defined length, and the amount of data present is defined in each individual input record.

(continued)

Introduction Field Information

Chapter 8. ALRTVVAU Audit File Report 8-9

Heading Description

Input data format Indicates that the data in the input record is in one of the following formats:

X Hexadecimal or binary C Printable characters P Packed-decimal

Default output length This numeric value is the default value used to determine the number of character positions to be reserved in the output report detail line for the column in which the data will be positioned. This value can be increased or decreased by the use of the LENGTH keyword on a FIELD command statement.

Default output format One of the following output formats is assigned by default for each fieldname; it determines how the data will appear in the output report:

C Character. The input data is simply moved from the input record to the report detail line. Each non-printable characters is translated to a period (.).

X Hexadecimal. Each byte or character in the input field is translated to its two-character hexadecimal equivalent.

Z Zoned-decimal. The input data field, up to a length of four, is treated as a binary number and converted to its decimal equivalent. By default, zoned-decimal formatted output fields are zero-suppressed and right-justified in the report column. Users can override the field justification value by using the JUSTIFY keyword on the FIELD command statement. Zero-suppression can be overridden by specifying NOTRUNC on the FIELD or SUBTITLE command statement.

T Transformed. The input data field is replaced by an alternate value, either as set forth in the transformation table shown or as determined by some other programmed transformation algorithm, such as is performed on BIM-ALERT/VSE TERMPHON field.

Users can override the field output format value by using the FORMAT keyword on the FIELD command statement.

Common Segment Fields Fieldname List

8-10 Auditing and Report Writing Guide

Fieldname List

Common Segment Fields

The following field names can be included in any ALRTVVAU report SUBTITLE, FIELD, or FIELDS command statements. These fieldnames are contained in the common segment of all input records and, if specified, will be printed on all detail lines of the report.

Field Description

KEY Input record key.

Field type: 00000000 - Common segment information Default label-1: RECORD KEY Input data length: 18 Input data format: Hexadecimal (X) Default output data length: 36 Default output data format: Hexadecimal (X)

RECLEN Input record length.

Field type: 00000000 - Common segment information Default label-1: INPUT Default label-2: RECORD Default label-3: LENGTH Input data length: 2 Input data format: Hexadecimal (X) Default output data length: 4 Default output data format: Zoned-decimal (Z)

DSNAME Input file dataset name.

Field type: 00000000 - Common segment information Default label-1: INPUT Default label-2: DATASET Default label-3: NAME Input data length: 44 Input data format: Character (C) Default output data length: 44 Default output data format: Character (C)

(continued)

Fieldname List Common Segment Fields

Chapter 8. ALRTVVAU Audit File Report 8-11

Field Description

TRANID CICS transaction ID creating the audit record.

Field type: 00000000 - Common segment information Default label-1: TRAN Default label-2: ID Input data length: 4 Input data format: Character (C) Default output data length: 4 Default output data format: Character (C)

DATE Date change was made.

Field type: 00000000 - Common segment information Default label-1: CHANGE Default label-2: DATE Input data length: 4 Input data format: Hexidecimal (X) Default output data length: 10 Default output data format: Transformed (T) X'AFCBB7AD'.....T'01/01/1998' (or user-defined DATEFORM)

TIME Time change was made.

Field type: 00000000 - Common segment information Default label-1: CHANGE Default label-2: TIME Input data length: 4 Input data format: Hexidecimal (X) Default output data length: 5 Default output data format: Transformed (T) X'AFCBB7AD'.....T' 08:25 ' (or user-defined TIMEFORM)

SYSTEMID CICS SYSID where change was made.

Field type: 00000000 - Common segment information Default label-1: SYSID Input data length: 8 Input data format: Character (C) Default output data length: 8 Default output data format: Character (C)

ADMINAME Name of administrator or subadministrator who made the change.

Field type: 00000000 - Common segment information Default label-1: ADMIN Default label-1: NAME Input data length: 20 Input data format: Character (C) Default output data length: 20 Default output data format: Character (C)

(continued)

Common Segment Fields Fieldname List

8-12 Auditing and Report Writing Guide

Field Description

AUDACT Action processed (addition, deletion, update).

Field type: 00000000 - Common segment information Default label-1: ACTION Default label-2: TAKEN Input data length: 1 Input data format: Character (C) Default output data length: 8 Default output data format: Character (C)

C'A'............T'ADDITION'

C'D'............T'DELETE '

C'C'............T'UPDATE '

C'S'............T'UPDATE '

C'U'............T'UPDATE '

ADMINID Operator number of administrator or subadministrator who made the change.

Field type: 00000000 - Common segment information Default label-1: ADMIN Default label-2: NUMBER Input data length: 9 Input data format: Character (C) Default output data length: 9 Default output data format: Character (C)

DATEFMT Date format.

Field type: 00000000 - Common segment information Default label-1: DATE Default label-2: FORMAT Input data length: 1 Input data format: Character (C) Default output data length: 8 Default output data format: Transformed (T)

C'C'............T'CANADIAN'

C'E'............T'EUROPEAN'

C'U'............T'USA '

(continued)

Fieldname List Common Segment Fields

Chapter 8. ALRTVVAU Audit File Report 8-13

Field Description

RECCODE Record code.

Field type: 00000000 - Common segment information Default label-1: RECORD Default label-2: CODE Input data length: 2 Input data format: Character (C) Default output data length: 2 Default output data format: Character (C)

INFOTYPE Information type. Describes the type of information contained in the field or record.

Field type: 00000000 - Common segment information Default label-1: INFO Default label-2: TYPE Input data length: 4 Input data format: Hexadecimal (X) Default output length: 26 Default output format: Transformed (T)

X'00000000'..T'COMMON SEGMENT INFO '

X'01000000'..T'EXTENDED USER INFO '

X'01010000'..T'EXTENDED USER DATA LIST '

X'01020000'..T'EXTENDED USER DATA VALUES'

X'01030000'..T'USER TASK ID BUILD '

X'01040000'..T'USER SEQUENCE INFORMATION'

X'01050000'..T'USER SEQUENCE BEFORE/AFTER'

X'02000000'..T'USER PROFILE INFO '

X'02010000'..T'USER PROFILE DATA LIST '

X'02020000'..T'USER PROFILE DATA VALUES '

X'03000000'..T'JOBMASK INFORMATION '

X'03010000'..T'JOBMASK DATA LIST '

X'03020000'..T'JOBMASK DATA VALUES '

X'03030000'..T'JOBMASK SEQUENCE INFO '

X'03040000'..T'JOBMASK SEQ BEFORE/AFTER '

X'05000000'..T'SECID INFORMATION '

X'05010000'..T'SECID DATA LIST '

X'05020000'..T'SECID DATA VALUES '

X'06000000'..T'DASD DATASET INFO '

X'06010000'..T'DASD DATASET DATA LIST '

X'06020000'..T'DASD DATASET DATA VALUES '

X'07000000'..T'TAPE DATASET INFO '

X'07010000'..T'TAPE DATASET DATA LIST '

X'07020000'..T'TAPE DATASET DATA VALUES '

X'08000000'..T'RESOURCE INFORMATION '

X'08010000'..T'RESOURCE DATA LIST '

X'08020000'..T'RESOURCE DATA '

X'08020000'..T'RESOURCE BEFORE/AFTER '

X'09000000'..T'LIBRARY INFO '

X'09010000'..T'LIBRARY PARM VALUES '

X'09020000'..T'LIBRARY BEFORE/AFTER '

X'0A010000'..T'CONVERT RULES PARM VALUES'

X'0A020000'..T'CONVERT RULES BEF/AFT '

X'0B010000'..T'SYSTEM CNTL FILE PARMS '

X'0B020000'..T'SYSTEM CNTL FILE BEF/AFT '

X'0B030000'..T'SYSTEM CNTL MONITOR PARMS'

X'C0010000'..T'NODE NAME BEFORE/AFTER '

X'C0020000'..T'NODE NAME PARAMETERS '

X'C1010000'..T'REMOTE SUBMIT BEF/AFTER '

X'C1020000'..T'REMOTE SUBMIT PARAMETERS '

X'C1030000'..T'REMOTE SUBMIT PARAMETERS '

X'E0010000'..T'XPCC SUBMIT BEFORE/AFTER '

X'E0020000'..T'XPCC SUBMIT PARAMETERS '

SEQNUM Output detail line sequence number.

Field type: 00000000 - Common segment information Default label-1: REPORT Default label-2: LINE Default label-3: NUMBER Input data length: 4 Input data format: Hexadecimal (X) - Binary fullword Default output length: 6 Default output format: Zoned-decimal (Z)

(continued)

Common Segment Fields Fieldname List

8-14 Auditing and Report Writing Guide

Field Description

INRECNUM Physical input record sequence number, assigned by the ALRTVVAU I/O module when the input record is read.

Field type: 00000000 - Common segment information Default label-1: INPT Default label-2: RECD Default label-3: NMBR Input data length: 4 Input data format: Hexadecimal (X) - Binary fullword Default output length: 6 Default output format: Zoned-decimal (Z)

TABLEID Table number contained in record.

Field type: 00000000 - Common segment information Default label-1: TABLE Default label-1: ID Input data length: 2 Input data format: Character (C) Default output data length: 2 Default output data format: Character (C)

SERNUM Record serial number.

Field type: 00000000 - Common segment information Default label-1: SERIAL Default label-2: NUMBER Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

CTLNUM Record control number.

Field type: 00000000 - Common segment information Default label-1: CONTROL Default label-2: NUMBER Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

(continued)

Fieldname List Common Segment Fields

Chapter 8. ALRTVVAU Audit File Report 8-15

Field Description

BEFAFT Before or after indicator.

Field type: 00000000 - Common segment information Default label-1: BEFORE Default label-2: /AFTER Input data length: 1 Input data format: Hexadecimal (X) Default output length: 6 Default output format: Transformed (T)

X'00'.....T'BEFORE'

X'FF'.....T'AFTER '

Extended User Fields Fieldname List

8-16 Auditing and Report Writing Guide

Extended User Fields

The following fieldnames can be included in any ALRTVVAU report SUBTITLE, FIELD, or FIELDS command statements. These fieldnames are contained in the ALRTVVAU input file extended user records (segment X'010x0000'). These fields will be printed only on report detail lines with other segment 01xxxxxx record and common segment fieldnames.

Field Description

UJFLDNM Job entry field name.

Field type: 01000000 - Extended user information Default label-1: J-E Default label-2: FIELD Default label-3: NAME Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

UJFLDPO Job entry field position.

Field type: 01000000 - Extended user information Default label-1: J-E Default label-2: FIELD Default label-3: POS Input data length: 2 Input data format: Character (C) Default output length: 2 Default output format: Character (C)

UJFLDLIT Job entry field literal.

Field type: 01000000 - Extended user information Default label-1: J-E Default label-2: FIELD Default label-3: LIT Input data length: 16 Input data format: Character (C) Default output length: 16 Default output format: Character (C)

Fieldname List Extended User Fields

Chapter 8. ALRTVVAU Audit File Report 8-17

The 01010000 segment fields will produce a report containing all the before and after values logged as a result of updating the extended user data. (This is done with transactions AUSR and UUSR). This report will be displayed in a vertical format, with multiple output lines per record (one line per field).

Field Description

USRVALD Extended user field description.

Default label-1: EXTENDED USER Default label-2: PARAMETER Default label-3: DESCRIPTION Field type: 01010000 - Extended user data list Input data length: 1 Input data format: Hexadecimal (X) Default output length: 25 Default output format: Transformed (T)

X'01'....T'EXTENDED USER DESCRIPTION'

X'02'....T'EXTENDED USER SEQ FOR ASM'

X'03'....T'EXTENDED USER STATUS '

X'04'....T'EXTENDED USER ACTION '

X'05'....T'EXT-USER JOB-ENT FLD NAME'

X'06'....T'EXT-USER JOB-ENT FLD POS '

X'07'....T'EXT-USER JOB-ENT LITERAL '

X'08'....T'EXT-USER TASKID FLD NAME '

X'09'....T'EXT-USER TASKID FLD LEN '

X'0A'....T'EXT-USER TASKID FLD POS '

USRVALB Extended user value before update.

Default label-1: BEFORE Field type: 01010000 - Extended user data list Input data length: 30 Input data format: Character (C) Default output length: 30 Default output format: Character (C)

USRVALA Extended user value after update.

Default label-1: AFTER Field type: 01010000 - Extended user data list Input data length: 30 Input data format: Character (C) Default output length: 30 Default output format: Character (C)

Extended User

Data List

Extended User Fields Fieldname List

8-18 Auditing and Report Writing Guide

The 01020000 segment fields allow you to produce a report by selecting specific extended user fields.

Field Description

UCOMMENT Extended user comment.

Default label-1: EXTENDED Default label-1: USER Default label-1: DESCRIPTION Field type: 01020000 - Extended user values Input data length: 30 Input data format: Character (C) Default output length: 30 Default output format: Character (C)

UASMSEQ Extended user comment.

Default label-1: EXT Default label-1: USER Default label-1: SEQUENCE Field type: 01020000 - Extended user values Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

USTATUS Extended user status.

Default label-1: EXT Default label-1: USER Default label-1: STATUS Field type: 01020000 - Extended user values Input data length: 1 Input data format: Character (C) Default output length: 8 Default output format: Transformed (T)

C'A'...........T'ACTIVE '

C'D'...........T'DISABLED'

C'L'...........T'LOG '

C'M'...........T'MONITOR '

C'T'...........T'AUDIT '

C'W'...........T'WTO/LOG '

(continued)

Extended User

Values

Fieldname List Extended User Fields

Chapter 8. ALRTVVAU Audit File Report 8-19

Field Description

UACTION Extended user action.

Default label-1: EXT Default label-1: USER Default label-1: ACTION Field type: 01020000 - Extended user values Input data length: 1 Input data format: Character (C) Default output length: 7 Default output format: Transformed (T)

C'*'...........T'NONE '

C'C'...........T'CANCEL '

C'W'...........T'WTO/LOG'

C'L'...........T'LOG '

UJEFLNM Extended user job entry field name.

Default label-1: EXTUSR Default label-1: JOB-ENT Default label-1: FLDNAME Field type: 01020000 - Extended user values Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

UJEFLPO Extended user job entry field position.

Default label-1: EXTUSR Default label-1: JOB-ENT Default label-1: FLDPOS Field type: 01020000 - Extended user values Input data length: 2 Input data format: Character (C) Default output length: 2 Default output format: Character (C)

UJEFLLI Extended user job entry literal.

Default label-1: EXTUSR Default label-1: JOB-ENT Default label-1: LITERAL Field type: 01020000 - Extended user values Input data length: 16 Input data format: Character (C) Default output length: 16 Default output format: Character (C)

Extended User Fields Fieldname List

8-20 Auditing and Report Writing Guide

The 01030000 segment fields allow you to select and report on specific extended-user record task ID build parameters.

Field Description

UTSKFLN Extended user TASKID field name.

Default label-1: EXTUSR Default label-2: TASKID Default label-3: FLDNAME Field type: 01030000 - User task ID build Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

UTSKFLL Extended user TASKID field length.

Default label-1: EXTUSR Default label-2: TASKID Default label-3: FLDLEN Field type: 01030000 - User task ID build Input data length: 2 Input data format: Character (C) Default output length: 2 Default output format: Character (C)

UTSKFLP Extended user TASKID field position.

Default label-1: EXTUSR Default label-2: TASKID Default label-3: FLDPOS Field type: 01030000 - User task ID build Input data length: 2 Input data format: Character (C) Default output length: 2 Default output format: Character (C)

User Task ID Build

Values

Fieldname List Jobmask Fields

Chapter 8. ALRTVVAU Audit File Report 8-21

Jobmask Fields

The following fieldnames can be included in any ALRTVVAU report SUBTITLE, FIELD, or FIELDS command statements. These fieldnames are contained in the ALRTVVAU input file jobmask records (segment X'030x0000'). These fields will be printed only on report detail lines with other jobmask update record and common segment fieldnames.

Field Description

JMSKTASK Jobmask TASKID this rule applies to.

Default label-1: JOBMASK Default label-2: TASKID Field type: 03000000 - Jobmask fields Input data length: 16 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

The 03010000 segment records can be used to produce a report showing all before and after information logged as a result of adding or updating jobmask data. (This is done with transactions AJOB and UJOB). The report produced is in vertical format with multiple output lines per audit record (one line per field).

Field Description

JOBVALD Jobmask parameter description.

Default label-1: JOBMASK Default label-2: PARAMETER Default label-3: DESCRIPTION Field type: 03010000 - Jobmask fields data list Input data length: 1 Input data format: Hexadecimal (X) Default output length: 26 Default output format: Transformed (T)

X'01'....T'JOBMASK DESCRIPTION '

X'02'....T'JOBMASK ASSEMBLER SEQUENCE'

X'03'....T'JOBMASK STATUS '

X'04'....T'JOBMASK ACTION '

X'05'....T'JOBMASK TASKID '

X'06'....T'JOBMASK BUILD OPERATORS '

(continued)

Jobmask Fields

Data List

Jobmask Fields Fieldname List

8-22 Auditing and Report Writing Guide

Field Description

JOBVALB Jobmask parameter value before update.

Default label-1: BEFORE Field type: 03010000 - Jobmask field data list Input data length: 30 Input data format: Character (C) Default output length: 30 Default output format: Character (C)

JOBVALA Jobmask parameter value before update.

Default label-1: AFTER Field type: 03010000 - Jobmask field data list Input data length: 30 Input data format: Character (C) Default output length: 30 Default output format: Character (C)

The 03020000 segment information can be used to produce reports to report on specific fields that can be updated in the jobmask records.

Field Description

JMSKDESC Jobmask description.

Default label-1: JOBMASK Default label-2: DESCRIPTION Field type: 03020000 - Jobmask field data values Input data length: 30 Input data format: Character (C) Default output length: 30 Default output format: Character (C)

JMSKSEQ Jobmask sequence to read into assembler.

Default label-1: JOBMASK Default label-2: SEQUENCE Field type: 03020000 - Jobmask field data values Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

(continued)

Jobmask Field

Data Values

Fieldname List Jobmask Fields

Chapter 8. ALRTVVAU Audit File Report 8-23

Field Description

JMSKSTAT Jobmask status.

Default label-1: JOBMASK Default label-2: STATUS Field type: 03020000 - Jobmask field data values Input data length: 1 Input data format: Character (C) Default output length: 8 Default output format: Transformed (T)

C'A'...........T'ACTIVE ' C'D'...........T'DISABLED' C'L'...........T'LOG ' C'M'...........T'MONITOR ' C'T'...........T'AUDIT ' C'W'...........T'WTO/LOG '

JMSKACT Jobmask action.

Default label-1: JOBMASK Default label-2: ACTION Field type: 03020000 - Jobmask field data values Input data length: 1 Input data format: Character (C) Default output length: 7 Default output format: Transformed (T)

C'*'............T'NONE ' C'C'............T'CANCEL ' C'W'............T'WTO/LOG' C'L'............T'LOG '

JMSKSECL Jobmask sequence to read into assembler.

Default label-1: JOBMASK Default label-2: SECID Default label-3: LENGTH Field type: 03020000 - Jobmask field data values Input data length: 1 Input data format: Hexadecimal (X) Default output length: 1 Default output format: Zoned-decimal (Z)

JMSKTSID Jobmask TASKID this rule applies to.

Default label-1: JOBMASK Default label-2: SECID Default label-3: TASKID Field type: 03020000 - Jobmask field data values Input data length: 16 Input data format: CHaracter (C) Default output length: 8 Default output format: Character (C)

Jobmask Fields Fieldname List

8-24 Auditing and Report Writing Guide

(continued)

Fieldname List Jobmask Fields

Chapter 8. ALRTVVAU Audit File Report 8-25

Field Description

JMSKBLD Jobmask build operators.

Default label-1: JOBMASK Default label-2: BUILD Default label-3: OPERATORS Field type: 03020000 - Jobmask field data values Input data length: 16 Input data format: CHaracter (C) Default output length: 8 Default output format: Character (C)

SECID Maintenance Fields Fieldname List

8-26 Auditing and Report Writing Guide

SECID Maintenance Fields

The following fieldnames can be included in any ALRTVVAU report SUBTITLE, FIELD, or FIELDS command statements. These fieldnames are contained in the ALRTVVAU input file SECID maintenance records (segment X'050x0000'). These fields will be printed only on report detail lines with other SECID maintenance record and common segment fieldnames.

Field Description

SECID Security ID.

Default label-1: SECID Field type: 05000000 - SECID maintenance fields Input data length: 16 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

The 05010000 segment information can be used to produce reports showing all SECID maintenance activity. The report is produced in a vertical format, with multiple lines per SECID maintenance record (one line per field).

Field Description

SECVALD SECID parameter description.

Default label-1: SECID Default label-2: PARAMETER Default label-3: DESCRIPTION Field type: 05010000 - SECID maintenance data list Input data length: 1 Input data format: Hexadecimal (X) Default output length: 24 Default output format: Transformed (T)

X'01'.........T'SECID ASSEMBLER SEQUENCE'

X'02'.........T'SECID LENGTH '

X'03'.........T'SECID STATUS '

X'04'.........T'SECID PASSWORD TYPE '

X'05'.........T'SECID DESCRIPTION '

X'06'.........T'SECID ACTION '

X'07'.........T'SECID SOURCE '

X'08'.........T'SECID PASSWORD '

X'09'.........T'SECID MODE '

X'0A'.........T'SECID NODE '

X'0B'.........T'SECID RJEUID '

(continued)

SECID

Maintenance Data

List

Fieldname List SECID Maintenance Fields

Chapter 8. ALRTVVAU Audit File Report 8-27

Field Description

SECVALB SECID parameter value before change.

Default label-1: BEFORE Field type: 05010000 - SECID maintenance data list Input data length: 30 Input data format: Character (C) Default output length: 30 Default output format: Character (C)

SECVALA SECID parameter value after change.

Default label-1: AFTER Field type: 05010000 - SECID maintenance data list Input data length: 30 Input data format: Character (C) Default output length: 30 Default output format: Character (C)

The 05020000 segment information can be used to produce reports showing before and after data for individual fields contained in the SECID maintenance records.

Field Description

SECSEQ SECID sequence.

Default label-1: SECID Default label-2: RECORD Default label-3: SEQUENCE Field type: 05020000 - SECID maintenance fields Input data length: 8 Input data format: Hexadecimal (X) Default output length: 8 Default output format: Character (C)

SECSTAT SECID status.

Default label-1: SECID Default label-2: STATUS Field type: 05020000 - SECID maintenance fields Input data length: 1 Input data format: Character (C) Default output length: 8 Default output format: Transformed (T)

C'A'...........T'ACTIVE '

C'D'...........T'DISABLED'

C'L'...........T'LOG '

C'M'...........T'MONITOR '

C'T'...........T'AUDIT '

C'W'...........T'WTO/LOG '

SECID

Maintenance Fields

SECID Maintenance Fields Fieldname List

8-28 Auditing and Report Writing Guide

(continued)

Fieldname List SECID Maintenance Fields

Chapter 8. ALRTVVAU Audit File Report 8-29

Field Description

SECPWTYP SECID password type.

Default label-1: SECID Default label-2: PSWD Default label-3: TYPE Field type: 05020000 - SECID maintenance fields Input data length: 1 Input data format: Character (C) Default output length: 5 Default output format: Transformed (T)

C'I'............T'// ID'

C'P'............T'POWER'

SECDESC SECID description.

Default label-1: SECID Default label-2: DESCRIPTION Field type: 05020000 - SECID maintenance fields Input data length: 30 Input data format: Character (C) Default output length: 30 Default output format: Character (C)

SECIACT SECID action.

Default label-1: SECID Default label-3: ACTION Field type: 05020000 - SECID maintenance fields Input data length: 1 Input data format: Character (C) Default output length: 7 Default output format: Transformed (T)

C'*'............T'NONE '

C'C'............T'CANCEL '

C'W'............T'WTO/LOG'

C'L'............T'LOG '

SECSOURC SECID source.

Default label-1: SECID Default label-3: SOURCE Field type: 05020000 - SECID maintenance fields Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

(continued)

SECID Maintenance Fields Fieldname List

8-30 Auditing and Report Writing Guide

Field Description

SECMODE SECID mode.

Default label-1: SECID Default label-3: MODE Field type: 05020000 - SECID maintenance fields Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

SECNODE SECID RJE node.

Default label-1: SECID Default label-3: RJENODE Field type: 05020000 - SECID maintenance fields Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

SECRUID SECID RJE user ID.

Default label-1: SECID Default label-3: RJEUID Field type: 05020000 - SECID maintenance fields Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

Fieldname List DASD Dataset Maintenance Fields

Chapter 8. ALRTVVAU Audit File Report 8-31

DASD Dataset Maintenance Fields

The following fieldnames can be included in any ALRTVVAU report SUBTITLE, FIELD, or FIELDS command statements. These fieldnames are contained in the ALRTVVAU input file DASD dataset maintenance records (segment X'06000000'). These fields will be printed only on report detail lines with other DASD dataset maintenance and common segment fieldnames.

Field Description

DASDDSNM DASD dataset name.

Default label-1: DASD Default label-2: DATASET Default label-3: NAME Field type: 06000000 - DASD dataset maintenance information Input data length: 44 Input data format: Character (C) Default output length: 44 Default output format: Character (C)

DASDVOL DASD dataset volume serial number.

Default label-1: DASD Default label-2: VOLSER Default label-3: NUMBER Field type: 06000000 - DASD dataset maintenance information Input data length: 6 Input data format: Character (C) Default output length: 6 Default output format: Character (C)

DASD Dataset Maintenance Fields Fieldname List

8-32 Auditing and Report Writing Guide

The 06010000 segment records can be used to produce reports which show all before and after data logged as a result of any DASD dataset maintenance activity. The report is produced in a vertical format, with multiple output lines per record (one line per field).

Field Description

DASDVALD DASD dataset parameter description.

Default label-1: DASD DATASET Default label-2: PARAMETER Default label-3: DESCRIPTION Field type: 06010000 - DASD dataset data list Input data length: 1 Input data format: Hexadecimal (X) Default output length: 17 Default output format: Transformed (T)

X'01'...........T'DASD SECID '

X'02'...........T'DASD ACTION '

X'03'...........T'DASD ACCESS LEVEL'

X'04'...........T'DASD DESCRIPTION '

X'05'...........T'DASD STATUS '

DASDVALB DASD dataset value before change.

Default label-1: BEFORE Field type: 06010000 - DASD dataset data list Input data length: 30 Input data format: Character (C) Default output length: 30 Default output format: Character (C)

DASDVALA DASD dataset value after change.

Default label-1: AFTER Field type: 06010000 - DASD dataset data list Input data length: 30 Input data format: Character (C) Default output length: 30 Default output format: Character (C)

DASD Dataset Data

List

Fieldname List DASD Dataset Maintenance Fields

Chapter 8. ALRTVVAU Audit File Report 8-33

The 06020000 segment records can be used to report on before and after data for individual DASD dataset fields.

Field Description

DASDSEC DASD dataset SECID/program.

Default label-1: DASD Default label-2: SECID/ Default label-3: PROGRAM Field type: 06020000 - DASD dataset data values Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

DASDIACT DASD action.

Default label-1: DASD Default label-2: ACTION Field type: 06020000 - DASD dataset data values Input data length: 1 Input data format: Character (C) Default output length: 7 Default output format: Transformed (T)

C'*'............T'NONE '

C'C'............T'CANCEL '

C'W'............T'WTO/LOG'

C'L'............T'LOG '

DASDACCS DASD access level.

Default label-1: DASD Default label-2: ACCESS Default label-3: LEVEL Field type: 06020000 - DASD dataset data values Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

DASDDESC DASD description.

Default label-1: DASD Default label-2: DESCRIPTION Field type: 06020000 - DASD dataset data values Input data length: 30 Input data format: Character (C) Default output length: 30 Default output format: Character (C)

(continued)

DASD Dataset Data

Values

DASD Dataset Maintenance Fields Fieldname List

8-34 Auditing and Report Writing Guide

Field Description

DASDSTAT DASD status.

Default label-1: DASD Default label-2: STATUS Field type: 06020000 - DASD dataset data values Input data length: 1 Input data format: Character (C) Default output length: 8 Default output format: Transformed (T)

C'A'...........T'ACTIVE '

C'D'...........T'DISABLED'

C'L'...........T'LOG '

C'M'...........T'MONITOR '

C'T'...........T'AUDIT '

C'W'...........T'WTO/LOG '

Fieldname List Tape Dataset Maintenance Fields

Chapter 8. ALRTVVAU Audit File Report 8-35

Tape Dataset Maintenance Fields

The following fieldnames can be included in any ALRTVVAU report SUBTITLE, FIELD, or FIELDS command statements. These fieldnames are contained in the ALRTVVAU input file tape dataset maintenance records segment (X'07000000'). These fields will be printed only on report detail lines with other tape dataset maintenance and common segment fieldnames.

Field Description

TAPEDSNM Tape dataset name.

Default label-1: TAPE Default label-2: DATASET Default label-3: NAME Field type: 07000000 - TAPE dataset maintenance information Input data length: 44 Input data format: Character (C) Default output length: 44 Default output format: Character (C)

Tape Dataset Maintenance Fields Fieldname List

8-36 Auditing and Report Writing Guide

The 07010000 segment records can be used to produce reports which show all before and after data logged as a result of any tape dataset maintenance activity. The report is produced in a vertical format, with multiple output lines per record (one line per field).

Field Description

TAPEVALD Tape dataset parameter description.

Default label-1: TAPE DATASET Default label-2: PARAMETER Default label-3: DESCRIPTION Field type: 07010000 - Tape dataset data list Input data length: 1 Input data format: Hexadecimal (X) Default output length: 17 Default output format: Transformed (T)

X'01'...........T'TAPE SECID '

X'02'...........T'TAPE ACTION '

X'03'...........T'TAPE ACCESS LEVEL'

X'04'...........T'TAPE DESCRIPTION '

X'05'...........T'TAPE STATUS '

TAPEVALB Tape dataset value before change.

Default label-1: BEFORE Field type: 07010000 - Tape dataset data list Input data length: 30 Input data format: Character (C) Default output length: 30 Default output format: Character (C)

TAPEVALA Tape dataset value after change.

Default label-1: AFTER Field type: 07010000 - Tape dataset data list Input data length: 30 Input data format: Character (C) Default output length: 30 Default output format: Character (C)

Tape Dataset Data

List

Fieldname List Tape Dataset Maintenance Fields

Chapter 8. ALRTVVAU Audit File Report 8-37

The 07020000 segment records can be used to report on before and after data for individual tape dataset fields.

Field Description

TAPESEC Tape dataset SECID/program.

Default label-1: TAPE Default label-2: SECID/ Default label-3: PROGRAM Field type: 07020000 - Tape dataset data values Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

TAPEIACT Tape action.

Default label-1: TAPE Default label-2: ACTION Field type: 07020000 - Tape dataset data values Input data length: 1 Input data format: Character (C) Default output length: 7 Default output format: Transformed (T)

C'*'............T'NONE '

C'C'............T'CANCEL '

C'W'............T'WTO/LOG'

C'L'............T'LOG '

TAPEACCS Tape access level.

Default label-1: TAPE Default label-2: ACCESS Default label-3: LEVEL Field type: 07020000 - Tape dataset data values Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

TAPEDESC Tape description.

Default label-1: TAPE Default label-2: DESCRIPTION Field type: 07020000 - Tape dataset data values Input data length: 30 Input data format: Character (C) Default output length: 30 Default output format: Character (C)

(continued)

Tape Dataset Data

Values

Tape Dataset Maintenance Fields Fieldname List

8-38 Auditing and Report Writing Guide

Field Description

TAPESTAT Tape status.

Default label-1: TAPE Default label-2: STATUS Field type: 07020000 - Tape dataset data values Input data length: 1 Input data format: Character (C) Default output length: 8 Default output format: Transformed (T)

C'A'...........T'ACTIVE '

C'D'...........T'DISABLED'

C'L'...........T'LOG '

C'M'...........T'MONITOR '

C'T'...........T'AUDIT '

C'W'...........T'WTO/LOG '

Fieldname List Resource Maintenance Fields

Chapter 8. ALRTVVAU Audit File Report 8-39

Resource Maintenance Fields

The following fieldnames can be included in any ALRTVVAU report SUBTITLE, FIELD, or FIELDS command statements. These fieldnames are contained in the ALRTVVAU input file resource maintenance records (segment X'08000000'). These fields will be printed only on report detail lines with other resource maintenance and common segment fieldnames.

Field Description

RESCLASS Resource class.

Default label-1: RESOURCE Default label-2: CLASS Field type: 08000000 - Resource maintenance information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

RESNAME Resource name.

Default label-1: RESOURCE Default label-2: NAME Field type: 08000000 - Resource maintenance information Input data length: 52 Input data format: Character (C) Default output length: 52 Default output format: Character (C)

Resource Maintenance Fields Fieldname List

8-40 Auditing and Report Writing Guide

The 08010000 segment records can be used to produce reports which show all before and after data logged as a result of any resource maintenance activity. The report is produced in a vertical format, with multiple output lines per record (one line per field).

Field Description

RESVALD Resource parameter description.

Default label-1: RESOURCE Default label-2: PARAMETER Default label-3: DESCRIPTION Field type: 08010000 - Resource data list Input data length: 1 Input data format: Hexadecimal (X) Default output length: 21 Default output format: Transformed (T)

X'01'...........T'RESOURCE SECID '

X'02'...........T'RESOURCE ACTION '

X'03'...........T'RESOURCE ACCESS LEVEL'

X'04'...........T'RESOURCE DESCRIPTION '

X'05'...........T'RESOURCE STATUS '

RESVALB Resource value before change.

Default label-1: BEFORE Field type: 08010000 - Resource data list Input data length: 30 Input data format: Character (C) Default output length: 30 Default output format: Character (C)

RESVALA Resource value after change.

Default label-1: AFTER Field type: 08010000 - Resource data list Input data length: 30 Input data format: Character (C) Default output length: 30 Default output format: Character (C)

Resource Data List

Fieldname List Resource Maintenance Fields

Chapter 8. ALRTVVAU Audit File Report 8-41

The 08020000 segment records can be used to report on before and after data for individual resource fields.

Field Description

RESSECID Resource SECID/program.

Default label-1: RESOURCE Default label-2: SECID/ Default label-3: PROGRAM Field type: 08020000 - Tape dataset data values Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

RESIACT Resource action.

Default label-1: RESOURCE Default label-2: ACTION Field type: 08020000 - Resource data values Input data length: 1 Input data format: Character (C) Default output length: 7 Default output format: Transformed (T)

C'*'............T'NONE '

C'C'............T'CANCEL '

C'W'............T'WTO/LOG'

C'L'............T'LOG '

RESACCS Resource access level.

Default label-1: RESOURCE Default label-2: ACCESS Default label-3: LEVEL Field type: 08020000 - Resource data values Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

RESDESC Resource description.

Default label-1: RESOURCE Default label-2: DESCRIPTION Field type: 08020000 - Resource data values Input data length: 30 Input data format: Character (C) Default output length: 30 Default output format: Character (C)

(continued)

Resource Data

Values

Resource Maintenance Fields Fieldname List

8-42 Auditing and Report Writing Guide

Field Description

RESSTAT Resource status.

Default label-1: RESOURCE Default label-2: STATUS Field type: 08020000 - Resource data values Input data length: 1 Input data format: Character (C) Default output length: 8 Default output format: Transformed (T)

C'A'...........T'ACTIVE '

C'D'...........T'DISABLED'

C'L'...........T'LOG '

C'M'...........T'MONITOR '

C'T'...........T'AUDIT '

C'W'...........T'WTO/LOG '

Fieldname List Library Maintenance Fields

Chapter 8. ALRTVVAU Audit File Report 8-43

Library Maintenance Fields

The following fieldnames can be included in any ALRTVVAU report SUBTITLE, FIELD, or FIELDS command statements. These fieldnames are contained in the ALRTVVAU input file library maintenance records (segment X'09000000'). These fields will be printed only on report detail lines with other library maintenance and common segment fieldnames.

Field Description

LIBCLASS Library class.

Default label-1: LIBRARY Default label-2: CLASS Field type: 09000000 - Library maintenance information Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

LIBNAME Library name.

Default label-1: LIBRARY Default label-2: NAME Field type: 09000000 - Resource maintenance information Input data length: 52 Input data format: Character (C) Default output length: 52 Default output format: Character (C)

Library Maintenance Fields Fieldname List

8-44 Auditing and Report Writing Guide

The 09010000 segment records can be used to produce reports which show all before and after data logged as a result of any library maintenance activity. The report is produced in a vertical format, with multiple output lines per record (one line per field).

Field Description

LIBVALD Library parameter description.

Default label-1: LIBRARY Default label-2: PARAMETER Default label-3: DESCRIPTION Field type: 09010000 - Library data list Input data length: 1 Input data format: Hexadecimal (X) Default output length: 20 Default output format: Transformed (T)

X'01'...........T'LIBRARY SECID '

X'02'...........T'LIBRARY ACTION '

X'03'...........T'LIBRARY ACCESS LEVEL'

X'04'...........T'LIBRARY DESCRIPTION '

X'05'...........T'LIBRARY STATUS '

LIBVALB Library value before change.

Default label-1: BEFORE Field type: 09010000 - Library data list Input data length: 30 Input data format: Character (C) Default output length: 30 Default output format: Character (C)

LIBVALA Library value after change.

Default label-1: AFTER Field type: 09010000 - Library data list Input data length: 30 Input data format: Character (C) Default output length: 30 Default output format: Character (C)

Library Data List

Fieldname List Library Maintenance Fields

Chapter 8. ALRTVVAU Audit File Report 8-45

The 09020000 segment records can be used to report on before and after data for individual library fields.

Field Description

LIBSECID Library SECID/program.

Default label-1: LIBRARY Default label-2: SECID/ Default label-3: PROGRAM Field type: 09020000 - Library data values Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

LIBIACT Library action.

Default label-1: LIBRARY Default label-2: ACTION Field type: 09020000 - Library data values Input data length: 1 Input data format: Character (C) Default output length: 7 Default output format: Transformed (T)

C'*'............T'NONE '

C'C'............T'CANCEL '

C'W'............T'WTO/LOG'

C'L'............T'LOG '

LIBACCS Library access level.

Default label-1: LIBRARY Default label-2: ACCESS Default label-3: LEVEL Field type: 09020000 - Library data values Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

LIBDESC Library description.

Default label-1: LIBRARY Default label-2: DESCRIPTION Field type: 09020000 - Library data values Input data length: 30 Input data format: Character (C) Default output length: 30 Default output format: Character (C)

(continued)

Library Data

Values

Library Maintenance Fields Fieldname List

8-46 Auditing and Report Writing Guide

Field Description

LIBSTAT Library status.

Default label-1: LIBRARY Default label-2: STATUS Field type: 09020000 - Library data values Input data length: 1 Input data format: Character (C) Default output length: 8 Default output format: Transformed (T)

C'A'...........T'ACTIVE '

C'D'...........T'DISABLED'

C'L'...........T'LOG '

C'M'...........T'MONITOR '

C'T'...........T'AUDIT '

C'W'...........T'WTO/LOG '

LIBCLB Controlled library (YES or NO).

Default label-1: LIB Default label-2: CLB Field type: 09020000 - Resource data values Input data length: 1 Input data format: Character (C) Default output length: 3 Default output format: Transformed (T)

C'Y'...........T'YES'

C'N'...........T'NO '

Fieldname List Rules Table Maintenance Fields

Chapter 8. ALRTVVAU Audit File Report 8-47

Rules Table Maintenance Fields

The following fieldnames can be included in any ALRTVVAU report SUBTITLE, FIELD, or FIELDS command statements. These fieldnames are contained in the ALRTVVAU input file rules table maintenance records (segment X'0A0x0000'). These fields will be printed only on report detail lines with other rules table maintenance and common segment fieldnames.

Field Description

CALRVALD Rules table maintenance parameter description.

Default label-1: CALR Default label-2: PARAMETER Default label-3: DESCRIPTION Field type: 0A010000 - Convert rules parameter values Input data length: 1 Input data format: Hexadecimal (X) Default output length: 24 Default output format: Transformed (T)

X'01'...........T'CALR RUN TYPE '

X'02'...........T'CALR TABLE NUMBER '

X'03'...........T'CALR TABLE NAME '

X'04'...........T'CALR SID PARAMETER '

X'05'...........T'CALR EXEC PARAMETER '

X'06'...........T'CALR TABLE DISPOSITION '

X'07'...........T'CALR TABLE LIBRARY NAME'

CALRVALB Rules table maintenance value before change.

Default label-1: BEFORE Field type: 0A010000 - Convert rules parameter values Input data length: 16 Input data format: Character (C) Default output length: 16 Default output format: Character (C)

CALRVALA Rules table maintenance value after change.

Default label-1: AFTER Field type: 0A010000 - Convert rules parameter values Input data length: 16 Input data format: Character (C) Default output length: 16 Default output format: Character (C)

Rules Table Maintenance Fields Fieldname List

8-48 Auditing and Report Writing Guide

The 0A020000 segment records can be used to report on before and after data for individual rules table maintenance fields.

Field Description

CALRRTYP CALR run type.

Default label-1: CALR Default label-2: RUN Default label-3: TYPE Field type: 0A020000 - Convert rules before/after Input data length: 3 Input data format: Character (C) Default output length: 21 Default output format: Transformed (T)

C'X '.....T'CONVERT '

C'XX '.....T'CONVERT/ASSEMBLE '

C'XXX'.....T'CONVERT/ASSEMBLE/LOAD'

CALRTNUM CALR table number.

Default label-1: CALR Default label-2: TABLE Default label-3: NUMBER Field type: 0A020000 - Convert rules before/after Input data length: 2 Input data format: Character (C) Default output length: 2 Default output format: Character (C)

CALRTNAM CALR table name.

Default label-1: CALR Default label-2: TABLE Default label-3: NAME Field type: 0A020000 - Convert rules before/after Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

CALRSID CALR SID parameter.

Default label-1: CALR Default label-2: SID Default label-3: PARAMETER Field type: 0A020000 - Convert rules before/after Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

(continued)

Rules Table

Maintenance Data

Values

Fieldname List Rules Table Maintenance Fields

Chapter 8. ALRTVVAU Audit File Report 8-49

Field Description

CALREXEC CALR EXEC parameter.

Default label-1: CALR Default label-2: EXEC Default label-3: PARAMETER Field type: 0A020000 - Convert rules before/after Input data length: 16 Input data format: Character (C) Default output length: 16 Default output format: Character (C)

CALRTDSP CALR table disposition.

Default label-1: CALR Default label-2: TABLE Default label-3: DISP Field type: 0A020000 - Convert rules before/after Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

CALRLIBR CALR library name.

Default label-1: CALR Default label-2: TABLE Default label-3: LIBRARY Field type: 0A020000 - Convert rules before/after Input data length: 16 Input data format: Character (C) Default output length: 16 Default output format: Character (C)

Control File Maintenance Fields Fieldname List

8-50 Auditing and Report Writing Guide

Control File Maintenance Fields

The following fieldnames can be included in any ALRTVVAU report SUBTITLE, FIELD, or FIELDS command statements. These fieldnames are contained in the ALRTVVAU input file control file maintenance records (segment X'0B0x0000'). These fields will be printed only on report detail lines with other control file maintenance and common segment fieldnames.

Field Description

SCFLVALD Control file maintenance parameter description.

Default label-1: SCFL Default label-2: PARAMETER Default label-3: DESCRIPTION Field type: 0B010000 - System control file parameters Input data length: 1 Input data format: Hexadecimal (X) Default output length: 26 Default output format: Transformed (T)

X'01'........T'SCFL RUN TYPE '

X'02'........T'SCFL PRODUCT CODE '

X'03'........T'SCFL TABLE NAME '

X'04'........T'SCFL SID PARM '

X'05'........T'SCFL CHECK $$B PARM '

X'06'........T'SCFL LOG FULL PARM '

X'07'........T'SCFL TEST PARM '

X'08'........T'SCFL WTO PARM '

X'09'........T'SCFL PROTECT PARM '

X'0A'........T'SCFL LOG PARM '

X'0B'........T'SCFL LOG EXEC PARM '

X'0C'........T'SCFL IDENCR PARM '

X'0D'........T'SCFL LOGSER PARM '

X'0E'........T'SCFL CARDIN PARM '

X'0F'........T'SCFL CANCEL PARM '

X'10'........T'SCFL EMERGENCY JOBNAME '

X'11'........T'SCFL EMERGENCY PASSWORD '

X'12'........T'SCFL MONITOR PARMS '

X'13'........T'SCFL MONITOR SUSPEND PARMS'

SCFLVALB Control file maintenance value before change.

Default label-1: BEFORE Field type: 0B010000 - System control file parameters Input data length: 20 Input data format: Character (C) Default output length: 20 Default output format: Character (C)

(continued)

Fieldname List Control File Maintenance Fields

Chapter 8. ALRTVVAU Audit File Report 8-51

Field Description

SCFLVALA Control file maintenance value after change.

Default label-1: AFTER Field type: 0B010000 - System control file parameters Input data length: 20 Input data format: Character (C) Default output length: 20 Default output format: Character (C)

The 0B020000 segment records can be used to report on before and after data for individual rules table maintenance fields.

Field Description

SCFLRTYP SCFL run type.

Default label-1: SCFL Default label-2: RUN Default label-3: TYPE Field type: 0B020000 - System control file before/after Input data length: 6 Input data format: Character (C) Default output length: 6 Default output format: Character (C)

SCFLTNAM SCFL table name.

Default label-1: SCFL Default label-2: TABLE Default label-3: NAME Field type: 0B020000 - System control file before/after Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

(continued)

Control File

Maintenance Data

Values

Control File Maintenance Fields Fieldname List

8-52 Auditing and Report Writing Guide

Field Description

SCFLSID SCFL SID parameter.

Default label-1: SCFL Default label-2: SID Default label-3: PARM Field type: 0B020000 - System control file before/after Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

SCFLCK$B SCFL check $$B parameter.

Default label-1: SCFL Default label-2: CHK Default label-3: $$B Field type: 0B020000 - System control file before/after Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

SCFLFULL SCFL LOGFULL parameter.

Default label-1: SCFL Default label-2: LOGFULL Default label-3: PARM Field type: 0B020000 - System control file before/after Input data length: 6 Input data format: Character (C) Default output length: 6 Default output format: Character (C)

SCFLTEST SCFL TEST parameter.

Default label-1: SCFL Default label-2: TEST Default label-3: PARM Field type: 0B020000 - System control file before/after Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

(continued)

Fieldname List Control File Maintenance Fields

Chapter 8. ALRTVVAU Audit File Report 8-53

Field Description

SCFLWTO SCFL WTO parameter.

Default label-1: SCFL Default label-2: WTO Default label-3: PARM Field type: 0B020000 - System control file before/after Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

SCFLPRO SCFL PROTECT parameter.

Default label-1: SCFL Default label-2: PROT Default label-3: PARM Field type: 0B020000 - System control file before/after Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

SCFLLOG SCFL LOG parameter.

Default label-1: SCFL Default label-2: LOG Default label-3: PARM Field type: 0B020000 - System control file before/after Input data length: 4 Input data format: Character (C) Default output length: 4 Default output format: Character (C)

SCFLLEXC SCFL LOGEXEC parameter.

Default label-1: SCFL Default label-2: LOG Default label-3: EXEC Field type: 0B020000 - System control file before/after Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

(continued)

Control File Maintenance Fields Fieldname List

8-54 Auditing and Report Writing Guide

Field Description

SCFLIDEN SCFL IDENCR parameter.

Default label-1: SCFL Default label-2: IDENCR Default label-3: PARM Field type: 0B020000 - System control file before/after Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

SCFLLSER SCFL LOGSER parameter.

Default label-1: SCFL Default label-2: LOGSER Default label-3: PARM Field type: 0B020000 - System control file before/after Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

SCFLCARD SCFL CARDIN parameter.

Default label-1: SCFL Default label-2: CARDIN Default label-3: PARM Field type: 0B020000 - System control file before/after Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

SCFLCNCL SCFL CANCEL parameter.

Default label-1: SCFL Default label-2: CANCEL Default label-3: PARM Field type: 0B020000 - System control file before/after Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

(continued)

Fieldname List Control File Maintenance Fields

Chapter 8. ALRTVVAU Audit File Report 8-55

Field Description

SCFLEJOB SCFL emergency override jobname.

Default label-1: SCFL Default label-2: EMERGENCY Default label-3: JOBNAME Field type: 0B020000 - System control file before/after Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

SCFLMON SCFL monitor parameters.

Default label-1: SCFL Default label-2: MONITOR Default label-3: PARMS Field type: 0B030000 - System control monitor parameters Input data length: 20 Input data format: Character (C) Default output length: 20 Default output format: Character (C)

SCFLMONS SCFL monitor suspend parameters.

Default label-1: SCFL Default label-2: MONITOR Default label-3: SUSPEND Field type: 0B030000 - System control monitor parameters Input data length: 3 Input data format: Character (C) Default output length: 3 Default output format: Character (C)

Node Information Fields Fieldname List

8-56 Auditing and Report Writing Guide

Node Information Fields

The following fieldnames can be included in any ALRTVVAU report SUBTITLE, FIELD, or FIELDS command statements. These fieldnames are contained in the ALRTVVAU node information records (segment X'C00x0000').

Field Description

NODEVALD Node name parameter description.

Default label-1: NODENAME Default label-2: PARAMETER Default label-3: DESCRIPTION Field type: C0010000 - Node name before/after Input data length: 1 Input data format: Hexadecimal (X) Default output length: 26 Default output format: Transformed (T)

X'01'......'NODE NAME '

X'02'......'NODE OPERATING SYSTEM CODE'

X'03'......'NODE ORIGIN/TARGET '

X'04'......'NODE SECURED SYSTEM '

NODEVALB Node name parameter value before update.

Default label-1: BEFORE Field type: C0010000 - Node name before/after Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

NODEVALA Node name parameter value after update.

Default label-1: AFTER Field type: C0010000 - Node name before/after Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

NODENAME Node name.

Default label-1: NODE Default label-2: NAME Field type: C0020000 - Node name parameters Input data length: 8 Input data format: Character (C) Default output length: 8 Default output format: Character (C)

(continued)

Fieldname List Node Information Fields

Chapter 8. ALRTVVAU Audit File Report 8-57

Field Description

OPSYSCOD Operating system code.

Default label-1: OP Default label-2: SYS Default label-3: CODE Field type: C0020000 - Node name parameters Input data length: 1 Input data format: Character (C) Default output length: 1 Default output format: Character (C)

ORGTARGT Origin/Target/Both.

Default label-1: ORIGIN Default label-2: OR Default label-3: TARGET Field type: C0020000 - Node name parameters Input data length: 1 Input data format: Character (C) Default output length: 1 Default output format: Character (C)

SECDSYS Secured system (Y or N).

Default label-1: SEC Default label-2: SYS Field type: C0020000 - Node name parameters Input data length: 1 Input data format: Character (C) Default output length: 3 Default output format: Transformed (T)

C'Y'.....'YES'

C'N'.....'NO '

Remote Submittal Information Fields Fieldname List

8-58 Auditing and Report Writing Guide

Remote Submittal Information Fields

The following fieldnames can be included in any ALRTVVAU report SUBTITLE, FIELD, or FIELDS command statements. These fieldnames are contained in the ALRTVVAU remote submittal records (segment X'C10x0000').

Field Description

REMVALD Remote submittal parameter description.

Default label-1: REMOTE Default label-2: PARAMETER Default label-3: DESCRIPTION Field type: C1010000 - Remote submit before/after Input data length: 1 Input data format: Hexadecimal (X) Default output length: 30 Default output format: Transformed (T)

X'01'......'REMOTE SUBMITTAL TARGET CLASS '

X'02'......'REMOTE SUBMITTAL CLASS ID '

X'03'......'REMOTE SUBMITTAL TARGET SYSID '

X'04'......'REMOTE SUBMITTAL SYSID ID INFO'

REMVALB Remote submittal parameter value before update.

Default label-1: BEFORE Field type: C1010000 - Remote submit before/after Input data length: 1 Input data format: Character (C) Default output length: 1 Default output format: Character (C)

REMVALA Remote submittal parameter value after update.

Default label-1: AFTER Field type: C1010000 - Remote submit before/after Input data length: 1 Input data format: Character (C) Default output length: 1 Default output format: Character (C)

REMCLASS Target class.

Default label-1: TARGET Default label-2: CLASS Field type: C1020000 - Remote submit parameters Input data length: 1 Input data format: Character (C) Default output length: 1 Default output format: Character (C)

(continued)

Fieldname List Remote Submittal Information Fields

Chapter 8. ALRTVVAU Audit File Report 8-59

Field Description

REMCLSID Type of ID information.

Default label-1: TYPE Default label-2: OF Default label-3: ID Field type: C1020000 - Remote submit parameters Input data length: 1 Input data format: Character (C) Default output length: 1 Default output format: Transformed (T)

C'$'......'$$ JOB'

C'/'......'// ID '

C'N'......'NONE '

REMSYSID Target SYSID.

Default label-1: TARGET Default label-2: SYSID Field type: C1030000 - Remote submit parameters Input data length: 1 Input data format: Character (C) Default output length: 1 Default output format: Character (C)

REMSIDID Type of ID information.

Default label-1: TYPE Default label-2: OF Default label-3: ID Field type: C1030000 - Remote submit parameters Input data length: 1 Input data format: Character (C) Default output length: 1 Default output format: Transformed (T)

C'$'......'$$ JOB'

C'/'......'// ID '

C'N'......'NONE '

Introduction Sample ALRTVVAU Reports

8-60 Auditing and Report Writing Guide

Sample ALRTVVAU Reports

Introduction

Many different reports can be produced from the information in the BIM-ALERT/VSE audit file, depending on which types of changes you want to review. This section includes sample input commands and resulting output for several such reports. These sample reports are examples from which further reports can be designed; they are not intended to show all the reports that can be produced using the audit data.

The input statements of the sample ALRTVVAU reports that follow can be found in the BIM-ALERT installation library in member ALRTVVAU.J.

Sample ALRTVVAU Reports DASD Dataset Change Report

Chapter 8. ALRTVVAU Audit File Report 8-61

DASD Dataset Change Report

The following sample input can be used to produce a report showing changes made to DASD dataset records. Note the use of the SELECT IF command to limit the report to only those fields that changed.

// EXEC ALRTVREP,SIZE=256K

REPORT ALRTVVAU

TITLES 'B I M - A L E R T / V S E' -

'* * AUDIT FILE REPORT * *'

SUBTITLE DASDDSNM LABEL('DATASET NAME:') LINE(2) JUSTIFY(L) -

SORTPRTY(1)

SUBTITLE DASDVOL LABEL(' VOLSER:') LINE(3) JUSTIFY(L) -

SORTPRTY(2)

FIELD DATE SORTPRTY(3) CTLBREAK(S) REPCHAR(' ')

FIELD TIME SORTPRTY(4) CTLBREAK(Y) REPCHAR(' ')

FIELDS DASDVALD DASDVALB DASDVALA

SELECT IF TRANID EQ C'UDDS' AND DASDVALB NE DASDVALA

RUN

/*

The preceding sample input produces the following report:

DATE: 01/25/2000 09:15:13 PAGE: 000002

B I M - A L E R T / V S E

* * AUDIT FILE REPORT * *

DATASET NAME: =.=.=.=.=.=.=.=

VOLSER: .

DASD

CHANGE CHANGE PARAMETER

DATE TIME DESCRIPTION BEFORE AFTER

------ ------ ----------- ------ -----

08/22/1999 06:47:29 DASD STATUS A D

DASD STATUS A D

11/05/1999 10:32:14 DASD SECID SEC= =

13:51:11 DASD SECID SYSADMIN SYSA=

10:32:14 DASD STATUS D A

13:18:59 DASD STATUS A M

10:32:14 DASD DESCRIPTION ALLOW READ/UPDATE ALLOW READ ONLY ACCESS

10:32:13 DASD STATUS D A

10:42:02 DASD SECID SECADMIN SYSADMIN

10:32:14 DASD ACCESS LEVEL ALTER READ

10:32:13 DASD DESCRIPTION ALLOW ONLY READ ALLOW FULL ACCESS

DASD ACCESS LEVEL READ ALTER

11/12/1999 16:39:29 DASD STATUS M A

08/01/1999 11:05:35 DASD STATUS A D

08/22/1999 06:46:12 DASD STATUS D A

Input

Output

Resource Change Report Sample ALRTVVAU Reports

8-62 Auditing and Report Writing Guide

Resource Change Report

The following sample input can be used to produce a report showing all updates to resource records in a horizontal format.

A report showing the same information in a vertical format could be produced by specifying the fields RESVALB and RESVALA. The format shown here allows you to specify the individual fields to be included in the report.

// EXEC ALRTVREP,SIZE=256K

REPORT ALRTVVAU

TITLES 'B I M - A L E R T / V S E' -

'* * AUDIT FILE REPORT * *'

FIELD DATE CTLBREAK(S)

FIELD TIME CTLBREAK(S)

FIELDS ADMINID RESCLASS RESNAME RESSECID RESIACT RESACCS RESSTAT

SELECT IF TRANID EQ C'UDIT' OR - /* UPDATES TO DITTO RULES */

TRANID EQ C'USUB' OR - /* UPDATES TO SUBLIB RULES */

TRANID EQ C'ULMB' /* UPDATES TO LIBMEM RULES */

RUN

/*

The preceding sample input produces the following report:

DATE: 02/25/2000 10:37:52 PAGE: 000001

B I M - A L E R T / V S E

* * AUDIT FILE REPORT * *

RESOURCE RESOURCE

CHANGE CHANGE ADMIN RESOURCE MEMBER RESOURCE RESOURCE ACCESS RESOURCE

DATE TIME NUMBER CLASS NAME SECID ACTION LEVEL STATUS

------ ------ ------ -------- -------- -------- -------- -------- --------

01/01/2000 11:37:19 A LIBMEM COLSYS6.ALT493.AXPI1.PHASE SECADMIN NONE EXEC ACTIVE

01/01/2000 11:37:19 A LIBMEM COLSYS6.ALT493.AXPI1.PHASE SECADMIN WTO/LOG EXEC ACTIVE

01/01/2000 15:11:17 A LIBMEM COLSYS6.ALT493.=.= SECADMIN WTO/LOG EXEC ACTIVE

01/01/2000 15:11:17 A LIBMEM COLSYS6.ALT493.=.= SECADMIN NONE ALTER ACTIVE

01/24/2000 08:44:13 A LIBMEM COLSYS6.ALT493.=.= SECADMIN NONE ALTER ACTIVE

01/24/2000 08:44:13 A LIBMEM COLSYS6.ALT493.=.= SECADMIN NONE ALTER ACTIVE

01/25/2000 10:08:07 A SUBLIB BIMCOL.ALT50A = LOG ALTER ACTIVE

01/25/2000 10:08:07 A SUBLIB BIMCOL.ALT50A = WTO/LOG ALTER ACTIVE

01/25/2000 10:36:33 A DITTO COMMAND:NOPEN.DVT = WTO/LOG EXEC ACTIVE

01/25/2000 10:36:33 A DITTO COMMAND:NOPEN.DVT = NONE EXEC ACTIVE

Input

Output

Sample ALRTVVAU Reports Control File Maintenance Report

Chapter 8. ALRTVVAU Audit File Report 8-63

Control File Maintenance Report

The following sample input can be used to produce a control file maintenance change report. Specifying the SCFLVALx fields causes the report to be produced in vertical format. Because no selection criteria are specified, all fields will be printed, whether or not they were changed.

// EXEC ALRTVREP,SIZE=256K

REPORT ALRTVVAU

TITLES 'B I M - A L E R T / V S E' -

'* * AUDIT FILE REPORT * *'

FIELD DATE SORTPRTY(1) CTLBREAK(S) REPCHAR(' ')

FIELD TIME SORTPRTY(2) CTLBREAK(Y) REPCHAR(' ')

FIELDS SCFLVALD SCFLVALB SCFLVALA

SELECT IF TRANID EQ C'SCFL'

RUN

/*

The preceding sample input produces the following report:

DATE: 03/25/2000 10:49:01 PAGE: 000025

B I M - A L E R T / V S E

* * AUDIT FILE REPORT * *

SCFL

CHANGE CHANGE PARAMETER

DATE TIME DESCRIPTION BEFORE AFTER

------ ------ ----------- ------ -----

03/13/2000 05:59:47 SCFL EMERGENCY JOBNAME . .

SCFL LOGSER PARM . .

SCFL MONITOR PARMS ALL,LOGREQ,WTOREQ ALL,LOGREQ,WTOREQ

SCFL LOG EXEC PARM NO NO

SCFL MONITOR SUSPEND PARMS FA FA

SCFL EMERGENCY PASSWORD . .

SCFL CANCEL PARM NO NO

SCFL CARDIN PARM YES YES

SCFL IDENCR PARM YES YES

SCFL PROTECT PARM NO NO

SCFL WTO PARM REQ REQ

SCFL TEST PARM NO NO

SCFL LOG FULL PARM IGNORE IGNORE

SCFL CHECK $$B PARM NO NO

SCFL LOG PARM NO NO

SCFL SID PARM . .

SCFL TABLE NAME . .

SCFL RUN TYPE MODIFY MODIFY

Input

Output

A-1

A

Additional BIM-ALERT/VSE Reports

This appendix describes BIM-ALERT/VSE batch reports produced by auditing and batch report writing programs other than the BIM-ALERT batch report writer.

About This Appendix .......................................................................................... A-2 Log File Integrity Report ..................................................................................... A-3 Status Change Report .......................................................................................... A-4 Dataset Name Report ........................................................................................... A-7 User Entry Report .............................................................................................. A-10 Resource Class Report ....................................................................................... A-12 Program Execution Report ................................................................................. A-14 SECID/USER Job Summary Report ................................................................... A-15 Control Totals Reports ....................................................................................... A-16 SECID Authorized Resource Report .................................................................. A-17

About This Appendix

A-2 Auditing and Report Writing Guide

About This Appendix

The reports described in this appendix are batch reports produced by auditing and batch report writing programs other than the BIM-ALERT batch report writer. The reports produced by some of these programs can be duplicated or nearly duplicated by the BIM-ALERT batch report writer. In those cases, the description of the program includes a reference to the BIM-ALERT batch report writer report most similar to the program's output.

The following reports are provided in the current release of BIM-ALERT/VSE:

Log File Integrity Status Change Dataset Name Use Entry Resource Class Program Execution SECID/USER Job Summary Control Totals SECID Authorized Resource

Log File Integrity Report

Appendix A. Additional BIM-ALERT/VSE Reports A-3

Log File Integrity Report

The Log File Integrity Report summarizes all the log records read, on the basis of log event date. It shows the starting and ending log serial number for each date and notes any serial number exceptions. A serial number exception is recognized whenever serial numbers are not consecutive. Non-consecutive serial numbers can result from any of the following conditions:

A log file tape was omitted from the run.

A system crash occurred, or the CPU was shut down without shutting down the logger. This can cause overlapping or duplicate serial numbers, because the control file may not contain the correct starting serial number when the logger is started up again.

The log file data has been deliberately altered, possibly to cover up unauthorized access to a dataset or other resource.

(1)

CPUID=FF039001

(2) (3) (4) (5)

03/17/2000 START SERIAL NUMBER 019807 TIME 05:23:06 JOBNAME AXPL1

03/17/2000 END SERIAL NUMBER 019885 TIME 19:59:13 JOBNAME EPICPTFB

03/19/2000 START SERIAL NUMBER 019994 TIME 06:16:15 JOBNAME AXPL1

*EXC* SERIAL NUMBER 019994 TIME 06:16:15 JOBNAME AXPL1 * MISSING 019886-019993 (6)

03/19/2000 END SERIAL NUMBER 020166 TIME 21:18:55 JOBNAME VSE1CICS

The following list explains the numbered items in the preceding sample report:

1. The CPUID of the machine where the log event occurred.

2. The date of the log event.

3. The serial number of the log event.

4. The time of day of the log event.

5. The // JOB name of the job that produced the log event.

6. Serial numbers 19886-19993 were not found in any of the data read, but numbers before and after that range were present. Apparently the data from 3/18/2000 was omitted from the reports.

Description

Sample Report

Explanation of

Report

Status Change Report

A-4 Auditing and Report Writing Guide

Status Change Report

The Status Change Report tracks change activity affecting the overall operation of the BIM-ALERT/VSE system. The events shown in this report are as follows:

Event Description

BIM-ALERT/VSE system startup

Normally this occurs at IPL.

Logger start-up Normally this occurs at IPL, shortly after system start-up.

Rules table update The rules table is loaded at system start-up. The identity of the table loaded at that time is logged as part of the system start-up data. When a new rules table is loaded any other time, this is logged as a rules table update.

Rules table catalog A rules table can be cataloged into the library at any time. This event is logged as a rules table catalog.

BIM-ALERT/VSE system modification

Some of the BIM-ALERT/VSE options, normally specified at start-up time, can be modified later.

Inquiry The AXPL1 utility program accepts a MODE=INQUIRE parameter. This causes the current status of the BIM-ALERT/VSE options to be logged.

BIM-ALERT/VSE system shutdown

Normally this occurs as part of the operating system shutdown procedure, but it can occur at any time.

Logger shutdown BIM-ALERT/VSE system shutdown automatically shuts down the logger. However, the logger can also be shut down at other times by using the AXPL3 utility program.

Description

Status Change Report

Appendix A. Additional BIM-ALERT/VSE Reports A-5

(1) (2) (3) (4)

TYPE OF ACTION DATE TIME SERIAL OPTIONS IN FORCE AXP.STARTUP 03/17/2000 05:18:17 019816 (5) VER=5.0A CHK$$B=NO (6) EPW=XXXXXXXX | IPLPWD=XXXXXXXX | IPLNOSEC=XXXXXXXX | IDENCR=YES | DITTO=NO | LOGFULL=IGNORE |

OBJ=ALERTB1,TABLE ID=B1 | ASSEMBLED=01/22/2000--06:01:42 | UPDATED=01/22/2000--06:01:24 | SID=ALERTB1 | PASS=6937 | LOG=REQ | WTO=REQ | PROTECT=NO | LOGEXEC=NO | MONITOR=(JOB=XXXXXXXX,PWD=XXXXXXXX) V

MONITOR=(ALL,ALL,LOGREQ,WTOREQ) (6) LOG.START 03/17/2000 05:23:06 019807 (7) RULES.CATALG 03/18/2000 17:31:01 019962 (8) OBJ=ALERTB1 TABLE ID=B1 (9) ASSEMBLED 03/18/2000 17:31:00 | UPDATED 03/18/2000 17:29:15 | SID=AXPRULE V

PASS=1493 (9) AXP.MODIFY 03/18/2000 18:05:16 019981 (10) AXP.SHUTDOWN 03/18/2000 18:30:29 019986 (11) LOG.STOP 03/18/2000 18:30:41 019989 (12)

The following list explains the numbered items in the preceding sample Status Change Report:

1. TYPE OF ACTION describes the event being reported, such as start-up or shutdown.

2. DATE is the date of the event, in the format mm/dd/yyyy.

OPTIONS IN FORCE lists the BIM-ALERT/VSE system options that apply to the event. These are not shown for events that change only the status of the logger.

3. TIME is the time of day the event occurred, in the format hh:mm:ss.

4. SERIAL is the serial number of the log record that was written to record the event.

5. This detail line shows the data for a start-up of the BIM-ALERT/VSE system.

(continued)

Sample Report

Explanation of

Report

Status Change Report

A-6 Auditing and Report Writing Guide

6. These are the options selected for the start-up. They are shown in the keyword format in which they were read by the start-up utility AXPI1.

7. This detail line shows the time the logger was started.

8. This detail line shows the data for the catalog of a rules table.

9. These options describe the rules table that was cataloged. Other system options are not shown. The report data shown for a rules table update is similar to that shown for rules table catalog. The TYPE OF ACTION for a rules table update is RULES.UPDATE.

10. This detail line shows the data for a system modification run using utility program AXPI1. All the system options that are in effect after the modify run is complete are shown in the report. (These are not shown in the sample report.)

11. This detail line shows the data for a system shutdown. All the system options that are in effect at the time the system is shut down are shown in the report. (These are not shown in the sample report.)

12. This detail line shows the time the logger was shut down.

Dataset Name Report

Appendix A. Additional BIM-ALERT/VSE Reports A-7

Dataset Name Report

The Dataset Name Report shows log records generated as a result of access authorization checks for datasets. The report is sequenced on dataset name, and then by security ID within each unique dataset name.

The BIM-ALERT batch report writer can produce a report similar to this report. Sample input for producing that report is given on page 6-32.

(1) (3) (4) (5) (6)

DATASET NAME (7)VOLSER(8) (9) (10) (11) (12) (13) (14)(15) (16)

(2)SECID USER LS JOB NAME REQ/ALLOW SRCE MODE DATE TIME --TABLE--IDENTITY-- PTN PHASE REA EXC SERIAL

CICS.RSD SYSWK1

DEVELOP PCSMAINT C CICSICCF UPD/RD 0999 SPL 03/20/2000 19:29:29 B1 01/22/2000 06:01 F2 DFHSIP 17 M 68

DEVELOP PCSMAINT C CICSICCF UPD/RD 0999 SPL 03/20/2000 20:10:11 B1 01/22/2000 06:01 F2 DFHSIP 17 M 68

CICS.TD.INTRA SYSWK1

DEVELOP PCSMAINT C CICSICCF UPD/RD 0999 SPL 03/17/2000 05:19:48 B1 01/22/2000 06:01 F2 DFHSIP 17 M 68

DEVELOP PCSMAINT C CICSICCF UPD/RD 0999 SPL 03/17/2000 14:52:17 B1 01/22/2000 06:01 F2 DFHSIP 17 M 68

ICCF.LIBRARY SYSWK1

DEVELOP PCSMAINT C CICSICCF UPD/RD 0999 SPL 03/17/2000 05:19:28 B1 01/22/2000 06:01 F2 DTSANALS 17 M 68

DEVELOP PCSMAINT C CICSICCF UPD/RD 0999 SPL 03/17/2000 05:21:20 B1 01/22/2000 06:01 F2 DFHSIP 17 M 68

DEVELOP PCSMAINT C CICSICCF UPD/RD 0999 SPL 03/17/2000 14:51:45 B1 01/22/2000 06:01 F2 DTSANALS 17 M 68

P390CICS.DFHDMPA FBA001

UNKNOWN PG L VSE1CICS ALT/RD 0000 PNT 03/18/2000 06:00:45 B1 01/22/2000 06:01 F4 DFHSIP 17 M 68

The following explanation refers to the numbered notes in the preceding sample Dataset Name Report:

1. DATASET NAME shows the name of the dataset that was accessed.

2. SECID is the security ID of the job that requested access to the dataset.

3. USER LS is the user ID and the logon source code of the user submitting the job.

4. JOB NAME is the name from the // JOB statement.

5. REQ/ALLOW shows the level of access requested (REQ) and the highest level of access allowed (ALLOW). For example, RD/EX indicates read access was requested and execute access is the highest level allowed. Abbreviations of the levels of access are as follows:

EX Execute RD Read UPD Update ALT Alter

6. VOLSER shows the volume serial number of the dataset. For VSAM datasets, this is the VOLSER of the catalog in which the dataset is defined.

Description

Similar BIM-ALERT

Batch Report

Writer Report

Sample Report

Explanation of

Report

Dataset Name Report

A-8 Auditing and Report Writing Guide

(continued)

Dataset Name Report

Appendix A. Additional BIM-ALERT/VSE Reports A-9

7. SRCE shows the device address (source) by which the job entered the system.

8. MODE describes how the job entered the system. Possible values are as follows:

This Value Indicates the job entered

POW Via a POWER-controlled reader

SPL Via PUTSPOOL or XPCC

RJE Via a network facility defined with the PRMT and PLINE macros

PNT Via a network facility defined with the PNODE macro

EXT Outside the control of POWER

9. DATE is the date the log record was written, in the format mm/dd/yyyy.

10. TIME is the time of day the log record was written, in the format hhmmss.

11. TABLE IDENTITY shows the table ID and assembly date and time of the rules table that was in effect at the time the dataset was accessed.

12. PTN identifies the partition where the job was run.

13. PHASE is the name of the phase that was being executed when the dataset was opened.

14. REA shows a two-character reason code describing the type of action that initiated the log record. The meaning of each of these codes is detailed in the BIM-ALERT/VSE

Security Administrator's Guide.

15. EXC is an exception flag that highlights unusual or unexpected conditions. Values for this field are as follows:

Code Meaning

V A violation occurred. Access was denied.

M Access would have been denied, but was allowed because monitor mode was active.

O Access was allowed. Emergency override was in effect.

The EXC column is blank if a log record was written for a reason other than one of the exception conditions listed in the preceding table.

16. SERIAL shows the rules table serial number of the rule that caused the log record to be written. This corresponds to SEQUENCE NUMBER in the Rules Conversion Report from program AXPU002.

User Entry Report

A-10 Auditing and Report Writing Guide

User Entry Report

The User Entry Report shows data from log events that occurred during the job entry verification process. The report is sequenced on security ID, // ID USER, date, and time.

The BIM-ALERT batch report writer can produce a report similar to this report. Sample input for producing that report is given on page 6-34.

< - - - - - - - (1) - - - - - - > (3) (4) (5) (6) (7) (8) (9) (10) (11)

SECID USER LOGON SUBMIT RJEUSER RJENODE

POW NAME JOB# JOB NAME DATE TIME --TABLE--IDENTITY-- MODE SRCE PTN REA EXC SERIAL

< - - - - - - (2) - - - - - - >

DEVELOP FRED CMS CMS P390VSE

ALRTVVSC 31748 ALRTVVSC 03/20/2000 09:08:14 B1 01/22/2000 06:01 POW 000C BG 20

ALRTRPT 31780 ALRTRPT 03/20/2000 12:45:34 B1 01/22/2000 06:01 POW 0000 F5 20

UNKNOWN PG NOTVAL UNKNWN PG BIM

SRVTRACE 30849 SRVTRACE 03/17/2000 18:09:49 B1 01/22/2000 06:01 PNT 0000 BG 0D M

SRVTRACE 30851 SRVTRACE 03/17/2000 18:17:56 B1 01/22/2000 06:01 PNT 0000 BG 0D M

NO-USER NO-USER UNKNWN UNKNWN P390VSE

VSE1EDIT 31717 VSE1EDIT 03/19/2000 19:15:07 B1 01/22/2000 06:01 POW 000C Y1 07 M

VTAMSTRT 31712 VTAMSTRT 03/20/2000 05:43:00 B1 01/22/2000 06:01 POW 000C F3 07 M

The following explanation refers to the numbered notes in the preceding sample User Entry Report:

1. SECID is the security ID developed by the job entry verification process. USER is the // ID USER parameter. If no // ID statement is present, then NOUSER is shown here.

LOGON is the location from which the user submitted the job. For example, if a user submitted the job from a CMS machine, LOGON would show CMS.

SUBMIT is the facility used to perform the job submission. For example, if the job were submitted through JCLMAN, SUBMIT would show JCLMAN.

2. POW NAME is the POWER job name. Valid values are as follows:

JOB# The POWER queue entry number

JOBNAME The name from the // JOB statement

3. RJEUSER is the RJE User ID field from the POWER job header record.

(continued)

Description

Similar BIM-ALERT

Batch Report

Writer Report

Sample Report

Explanation of

Report

User Entry Report

Appendix A. Additional BIM-ALERT/VSE Reports A-11

4. RJENODE is the RJE node field from the POWER job header record.

5. TABLE IDENTITY shows the table ID and assembly date and time of the rules table that was in effect at the time the job entry verification was performed.

6. MODE describes how the job entered the system. Possible values are as follows:

This Value Indicates the job entered

POW Via a POWER-controlled reader

SPL Via PUTSPOOL or XPCC

RJEs Via a network facility defined with the PRMT and PLINE macros

PNT Via a network facility defined with the PNODE macro

EXT Outside the control of POWER

7. SRCE describes the device address by which the job entered the system.

8. PTN identifies the partition where the job was run.

9. REA shows a two-character code describing why the event was logged. The meaning of each of these codes is detailed in the BIM-ALERT/VSE Security Administrator's

Guide.

10. EXC is an exception flag that highlights unusual or unexpected conditions. Values for this field are as follows:

Code Meaning

V A violation occurred. Access was denied.

M Access would have been denied, but was allowed because monitor mode was active.

O Access was allowed. Emergency override was in effect.

The EXC column is blank if a log record was written for a reason other than one of the exception conditions in preceding table.

11. SERIAL shows the rules table serial number of the rule that caused the log record to be written. This corresponds to the SEQUENCE NUMBER on the Rules Conversion Report produced by program AXPU002 when the rules table was assembled.

Resource Class Report

A-12 Auditing and Report Writing Guide

Resource Class Report

The Resource Class Report shows log records generated as a result of access checks for resources. Resources as used in this context refers to access checks controlled by BIM-ALERT/VSE RESOURCE rules. The Resource Class Report groups together all data by resource class, and then groups resource names within each class.

The BIM-ALERT batch report writer can produce a report similar to this report. Sample input for producing that report is given on page 6-35.

Description

Similar BIM-ALERT

Batch Report

Writer Report

Resource Class Report

Appendix A. Additional BIM-ALERT/VSE Reports A-13

(1) (2)

RESCLASS RESNAME

SECID USER LS JOB NAME REQ/ALLOW SRCE MODE DATE TIME --TABLE--IDENTITY-- PTN PHASE REA EXC SERIAL

LIBMEM BIMCOL.ALT50A.AXPHJ19.OBJ

SECADMIN KEN P AXPHJ19 UPD/UPD 0000 PNT 03/26/2000 05:35:47 B1 03/26/2000 05:17 FB LIBR 18 L 84

LIBMEM BIMCOL.ALT50A.AXPHJ19D.PHASE

SECADMIN KEN L AXPHJ19D UPD/UPD 0000 PNT 03/26/2000 05:37:23 B1 03/26/2000 05:17 FB $LNKEDT 18 L 84

SECADMIN KEN L AXPHJ19D UPD/UPD 0000 PNT 03/26/2000 05:37:25 B1 03/26/2000 05:17 FB $LNKEDT 18 L 84

LIBMEM BIMCOL.ALT50A.AXPHJ19E.PHASE

SECADMIN KEN L AXPHJ19D UPD/UPD 0000 PNT 03/26/2000 05:37:24 B1 03/26/2000 05:17 FB $LNKEDT 18 L 84

SECADMIN KEN L AXPHJ19D UPD/UPD 0000 PNT 03/26/2000 05:37:25 B1 03/26/2000 05:17 FB $LNKEDT 18 L 84

LIBMEM BIMCOL.ALT50A.AXPI22F.PHASE

SECADMIN KEN P AXPI22F UPD/UPD 0000 PNT 03/26/2000 05:34:51 B1 03/26/2000 05:17 FB $LNKEDT 18 L 84

SECADMIN KEN P AXPI22F UPD/UPD 0000 PNT 03/26/2000 05:34:52 B1 03/26/2000 05:17 FB $LNKEDT 18 L 84

LIBMEM BIMCOL.ALT50A.AXPI24.PHASE

UNKNOWN UNK-USER Y CALR50A EX/NONE 0999 SPL 03/26/2000 05:17:31 B1 03/26/2000 05:17 BG AXPI1 1F M 84

LIBMEM BIMCOL.ALT50A.AXPRULE.PHASE

SECADMIN KEN L AXPRULE UPD/UPD 0000 PNT 03/26/2000 05:37:32 B1 03/26/2000 05:17 FB AXPR1 18 L 84

SECADMIN KEN L AXPRULE UPD/UPD 0000 PNT 03/26/2000 05:37:33 B1 03/26/2000 05:17 FB AXPR1 18 L 84

The following explanation refers to the numbered notes in the preceding sample Resource Class Report:

1. RESCLASS shows the resource class. Currently supported pre-defined resource classes are as follows:

LIBMEM LIBRARY SUBLIB CATALOG TAPELBL ULTAPE DITTO ENVRES JCxxxxxx XCOMSEND XCOMRECV

2. RESNAME shows the name of the resource. In the case of LIBRARY resource class, this item shows the library dataset name and file name.

The rest of the items in the Resource Class Report are the same as those in the Dataset Name Report; they are described beginning on page A-7.

Sample Report

Explanation of

Report

Program Execution Report

A-14 Auditing and Report Writing Guide

Program Execution Report

When the LOGEXEC=YES option is in force, BIM-ALERT/VSE writes a log record for each program execution (EXEC statement). These log records can be printed in a separate report using the report program SELECT REASON parameter. JCL to produce this type of report is included in the sample JCL (member AXPJCL50.J) cataloged into the BIM-ALERT residence sublibrary.

B I MOYLE ASSOCIATES, INC. BIM-ALERT/VSE 5.1A ** PROGRAM EXECUTION REPORT ** AXPL7 CPUID=FF039001 03/26/2000 PAGE 001

RESCLASS RESNAME

SECID USER LS JOB NAME REQ/ALLOW SRCE MODE DATE TIME --TABLE--IDENTITY-- PTN PHASE REA EXC SERIAL

EXECUTE AXPB001

SECADMIN EKEHLER C AXPB001 EX/EX 000C POW 03/26/2000 07:19:35 B1 03/26/2000 05:17 BG NO NAME 22 L

EXECUTE AXPL7

SECADMIN EKEHLER C ALERT50A EX/EX 000C POW 03/26/2000 07:29:30 B1 03/26/2000 05:17 FB NO NAME 22 L

EXECUTE BIMPUNCH

SECADMIN KEN L AXPSERV EX/EX 0000 PNT 03/26/2000 07:18:47 B1 03/26/2000 05:17 FB NO NAME 22 L

SECADMIN KEN L AXPSERV EX/EX 0000 PNT 03/26/2000 07:19:39 B1 03/26/2000 05:17 FB NO NAME 22 L

EXECUTE LIBR

OPERATNS ADMN C MULTSTEP EX/EX 0999 SPL 03/26/2000 07:24:53 B1 03/26/2000 05:17 BG NO NAME 22 L

OPERATNS ADMN C MULTSTEP EX/EX 0999 SPL 03/26/2000 07:28:48 B1 03/26/2000 05:17 BG NO NAME 22 L

SECADMIN KEN L AXPSERV EX/EX 0000 PNT 03/26/2000 07:19:43 B1 03/26/2000 05:17 FB NO NAME 22 L

EXECUTE PCSERPT

OPERATNS ADMN C MULTSTEP EX/EX 0999 SPL 03/26/2000 07:27:42 B1 03/26/2000 05:17 BG NO NAME 22 L

EXECUTE PCSEVRP

OPERATNS ADMN C MULTSTEP EX/EX 0999 SPL 03/26/2000 07:24:55 B1 03/26/2000 05:17 BG NO NAME 22 L

Description

Sample Report

SECID/USER Job Summary Report

Appendix A. Additional BIM-ALERT/VSE Reports A-15

SECID/USER Job Summary Report

The SECID/USER Job Summary Report summarizes the resources accessed by each job. Accessed resources are displayed in chronological sequence within each job. The report is sequenced primarily on security ID and User ID (USER field of // ID statement). This report is most useful when BIM-ALERT/VSE is performing full logging (or nearly full logging) of resources accessed, such as during monitor mode.

The BIM-ALERT batch report writer can produce a report similar to this report. Sample input for producing that report is given on page 6-37.

B I MOYLE ASSOCIATES, INC. BIM-ALERT/VSE 5.1A ** SECID/USER JOB SUMMARY ** AXPL11 CPUID=FF039001 03/26/2000 PAGE 001

SECID ASIBG USER FORSEC

POWER JOB JOB# DOS JOB DATE TIME MODE SRCE PTN LOGON

RESCLASS RESNAME VOLSER REQSTED ALLOWED PHASE

BGASI 00000 BGASI 03/11/2000 05:06:55 ASI BG ASI

DASDDS ALERT.S1SCTY.V50 CKD001 READ ALTER AXPWAIT

DASDDS BIM.EPIC.VSE.RECORDER UPDATE READ TSIDRFS

SECID DEVELOP USER DRJ

POWER JOB JOB# DOS JOB DATE TIME MODE SRCE PTN LOGON

RESCLASS RESNAME VOLSER REQSTED ALLOWED PHASE

MSHP50A 31374 MSHP50A 03/19/2000 07:49:55 PNT BG NOTVAL

DASDDS VSE.SYSTEM.HISTORY.FILE DOSRES ALTER READ MSHP

FAQSMAIN 00568 FAQSMAIN 03/25/2000 09:08:28 SPL 0999 Z1 CMS

LIBMEM COLSYS6.ALT493.AXPHJ4.PHASE EXEC ALTER FAQSVMX

CICSICCF 30372 CICSICCF 03/11/2000 05:08:02 SPL 0999 F2 CMS

DASDDS ICCF.LIBRARY SYSWK1 UPDATE READ DTSANALS

DASDDS CICS.DUMPA SYSWK1 UPDATE READ DFHSIP

DASDDS CICS.RSD SYSWK1 UPDATE READ DFHSIP

SECID OPERATNS USER ADMN

POWER JOB JOB# DOS JOB DATE TIME MODE SRCE PTN LOGON

RESCLASS RESNAME VOLSER REQSTED ALLOWED PHASE

GSPDSU 00657 GSPDSU 03/25/2000 02:30:07 SPL 0999 F6 CMS

DASDDS VSE.BIM.COLUMBUS.MON.BACKUP FBA001 ALTER READ GSPDSU

GSPDSU 00658 GSPDSU 03/25/2000 02:32:04 SPL 0999 F5 CMS

DASDDS VSE.BIM.COLUMBUS.VIO.BACKUP FBA001 ALTER READ GSPDSU

GSPDSU 00659 GSPDSU 03/25/2000 02:33:43 SPL 0999 F5 CMS

DASDDS VSE.BIM.COLUMBUS.EVT.BACKUP FBA001 ALTER READ GSPDSU

PCSEVBR 00660 PCSEVBR 03/25/2000 02:34:09 SPL 0999 F5 CMS

DASDDS VSE.BIM.COLUMBUS.EVT.EVENTS.BACKUP FBA001 ALTER READ PCSEVBR

Description

Similar BIM-ALERT

Batch Report

Writer Report

Sample Report

Control Totals Reports

A-16 Auditing and Report Writing Guide

Control Totals Reports

The log file archive/print job stream produces two Control Totals reports. The first, produced by program AXPL10, shows the number of records read from the log file and merged into the combined log file. The second, produced by program AXPL7, shows the number of records read from tape and from the combined log file, as well as the number of records written to tape.

Three sample Control Totals Reports follow. The first two were produced by running AXPL10 twice; the third was produced by running AXPL7.

** CONTROL TOTALS CPUID=FF400689 **

RECORDS COPIED FROM AXPLOG1 3370

RECORDS WRITTEN TO AXPLOG3 3370 (1)

AXPLOG3 RESET=YES (2)

AXPLOG1 COPY=YES

** CONTROL TOTALS CPUID=FF400689 **

RECORDS COPIED FROM AXPLOG1 27

RECORDS WRITTEN TO AXPLOG3 27 (1)

AXPLOG3 RESET=NO (2)

AXPLOG1 COPY=YES

NUMBER OF INPUT TAPE FILES 0

RECORDS READ FROM TAPES 0

RECORDS READ FROM VSAM 3,397 (3)

RECORDS WRITTEN TO TAPE 0

The following explanation refers to the numbered notes in the preceding sample Control Totals Reports:

1. This shows the number of log records written to the cumulative log file (AXPLOG3) from the current log file (AXPLOG1).

2. RESET=YES means that the cumulative file was emptied (reset) before records were copied from the current log file. RESET=NO means that the records from the current log file were added to those already in the cumulative file.

3. The total number of records read from the VSAM file by the report program matches the combined totals from the AXPL10 copy and reset jobs.

Description

Sample Report

Explanation of

Reports

SECID Authorized Resource Report

Appendix A. Additional BIM-ALERT/VSE Reports A-17

SECID Authorized Resource Report

All of the screens of the online rules definition facility are designed to show all the security IDs that can access a specific resource. In some cases, you may want to know all the resources a specific security ID may reference. A batch program, AXPB001, provides this reporting capability. This report takes the security IDs in the specified table (or a specific security ID if desired), actually goes through the authorization process, and produces a report of all the resources defined in that table that can be accessed by the security IDs. The JCL necessary to run this report is cataloged during the installation as member AXPAUTH.J.

The input to AXPB001 consists of a single input record (card image) that includes the following keyword parameters:

Parameter Description

TABLENUM=xx The table number from which you want the security IDs extracted. This parameter is required.

OBJ= The name by which the rules table was cataloged after assembly. This parameter is required.

SECID= A particular security ID you want run through the authorization process and reported on. This parameter is optional. If it is not included, all the security IDs in the specified table will be reported on.

All parameters must be included on the same record. They can be in any order, but they must be between columns 1-71, and they must be separated by at least one blank or comma.

Description

Input to AXPB001

SECID Authorized Resource Report

A-18 Auditing and Report Writing Guide

B I MOYLE ASSOCIATES, INC. BIM-ALERT/VSE 5.1A *** SECID AUTHORIZED RESOURCES ***AXPB001 TABLE=B1 03/26/2000 PAGE 1

TABLENUM=B1 OBJ=ALERTB1 SID=ALERTB1 SVC=NO SECID=SECADMIN

AXPB001 SVC=NO OBJ=ALERTB1 ID=B1 ASSEMBLED 03/26/2000 05:17:26 UPDATED 03/26/2000 05:17:07

----------------------------------------------------- SECID: SECADMIN ----------------------------------------------------

AUTHORIZED DATASETS - DASD

<- - - - - - - DATASET NAME - - - - - - - -> VOLSER RD UPD ALT <- - - - - - - DATASET NAME - - - - - - - -> VOLSER RD UPD ALT

+USERID.= * C C ALERT.AXPCTL.50A W * *

ALERT=.= * * * *BG.IJSYS=.= * * *

*F*.IJSYSLN * * * *F*.IJSYSPH W W W

*F*.IJSYS0* * * * =.=.=.=.=.=.=.= * C C

=.=.=.=.=.=.=.= CKD001 * * *

AUTHORIZED DATASETS - TAPE

<- - - - - - - DATASET NAME - - - - - - - -> VOLSER RD UPD ALT <- - - - - - - DATASET NAME - - - - - - - -> VOLSER RD UPD ALT

>>>>> NO AUTHORIZED TAPE DATASETS FOR THIS SECID <<<<<

AUTHORIZED RESOURCE - DITTO

<- - - - - - - - - MEMBERNAME - - - - - - - - -> EX RD UP AL <- - - - - - - - - MEMBERNAME - - - - - - - - -> EX RD UP AL

COMMAND:NOPEN.DVT *

AUTHORIZED RESOURCE - LIBMEM

<- - - - - - - - - MEMBERNAME - - - - - - - - -> EX RD UP AL <- - - - - - - - - MEMBERNAME - - - - - - - - -> EX RD UP AL

BIMCOL.ALT50A.AXPBR14.PHASE L * * * BIMCOL.ALT50A.=.= * * W C

BIMCOL.AXPOBJ.=.= * * W C BIMCOL.RULES50A.ALERTB1.PHASE W W W W

COLSYS6.ALT493.AXPI1.PHASE W * * * COLSYS6.ALT493.=.= * * * *

IJSYSRS.SYSLIB.ASMA90.PHASE W * * *

AUTHORIZED RESOURCE - LIBRARY

<- - - - - - - - - MEMBERNAME - - - - - - - - -> EX RD UP AL <- - - - - - - - - MEMBERNAME - - - - - - - - -> EX RD UP AL

VSE.BIM.COLUMBUS.LIBRARY:BIMCOL * * L L VSE.BIM.COLUMBUS.LIB6:COLSYS6 * * * *

VSE.PRD1.LIBRARY:PRD1 * * * * VSE.PRD2.LIBRARY:PRD2 * * * *

VSE.SYSRES.LIBRARY:IJSYSRS * * * *

AUTHORIZED RESOURCE - SUBLIB

<- - - - - - - - - MEMBERNAME - - - - - - - - -> EX RD UP AL <- - - - - - - - - MEMBERNAME - - - - - - - - -> EX RD UP AL

BIMCOL.ALT50A * * * W COLSYS6.ALT493 * * * *

Sample Report

SECID Authorized Resource Report

Appendix A. Additional BIM-ALERT/VSE Reports A-19

B-1

B

Additional BIM-ALERT/CICS Reports

This appendix describes BIM-ALERT/CICS batch reports produced by auditing and batch report writing programs other than the BIM-ALERT batch report writer.

Introduction ......................................................................................................... B-2 S1B100: Audit Trail Batch Report ...................................................................... B-3 S1B190: Violation, Sign-On, and Specification Reports ...................................... B-6 S1B192: Security Violation Query Report ......................................................... B-14 S1B500: System Transaction Security Report ................................................... B-15 S1B510: System Program Security Report ........................................................ B-16 S1B520: System File Security Report ................................................................ B-17 S1B530: System Map Security Report ............................................................... B-18 S1B540: Organizational Information Report ..................................................... B-19 S1B550: Operator Security Information Report ................................................. B-20 S1B560: Terminal Security Information Report ................................................ B-22 S1B570/S1B571: Operator/Terminal Authorized Resources .............................. B-24

Introduction

B-2 Auditing and Report Writing Guide

Introduction

The reports described in this appendix are batch reports produced by auditing and batch report writing programs other than the BIM-ALERT batch report writer. The reports produced by some of these programs can be duplicated or nearly duplicated by the BIM-ALERT batch report writer. In those cases, the description of the program includes a reference to the BIM-ALERT batch report writer report most similar to the program's output.

A number of batch reports can be produced with the self-documented job control contained in the BIM-ALERT source library supplied with the installation tape. The following table shows the programs provided and the reports each can produce:

Program Reports Produced

S1B100 Audit Trail Batch Report

S1B190 Violation, Sign-On, and Specification Reports

S1B192 Display/Print Attempted Violations (Query)

S1B500 System Transaction Security Report

S1B510 System Program Security Report

S1B520 System File Security Report

S1B530 System Map Security Report

S1B540 Organizational Information Report

S1B550 Operator Security Information Report

S1B560 Terminal Security Information Report

S1B570/S1B571 Operator/Terminal Authorized Resources Report

The following sections show sample JCL that can be used to produce the batch reports available in BIM-ALERT. This JCL is also provided in source member ALRTRPTS of the distribution tape. You must modify the JCL to suit your particular installation. For example, you must modify it if you use VSAM user catalogs.

About This

Appendix

Programs Provided

About the JCL

Provided

S1B100: Audit Trail Batch Report

Appendix B . Additional BIM-ALERT/CICS Reports B-3

S1B100: Audit Trail Batch Report

BIM-ALERT maintains an audit trail of security system changes. The audit trail includes records of changes made from BIM-ALERT file maintenance screens, real-time changes (such as deactivation of resources), and changes when levels of security are turned on or off. The audit trail contains the date and time of each change, the ID of the administrator who made the change, the name of the function used to make the change, and before- and after-images of the data.

S1B100 is the batch reporting program provided to generate reports of the audit data. The reports are generated using as input either the current audit file or the backup/archive file.

A number of keywords with associated data are provided in order to allow you to tailor the report to your needs. The keywords and input parameters are read by the program from SYSIPT. The S1B100 keywords and parameters are as follows:

Keyword Description Default

ADMIN=A1/(A1,A2,...A10) Use to select records from the file for specified administrators. Up to ten administrator numbers can be specified. If multiple administrators are specified, they must be enclosed in parentheses and separated by commas.

All administrators

FUNCTION=fn1/(fn1,fn2,...fn10) Use to select records from the file based upon the BIM-ALERT function that caused them to be created (ASTR, UCOP, UPAR, and so on). Up to ten functions can be specified per report. If multiple functions are selected, they must be enclosed in parentheses and separated by commas.

All functions

START-DATE=mm/dd/yyyy Use to specify the beginning date for the records to be selected. The date specified is included in the report.

01/01/0000

END-DATE=mm/dd/yyyy Use to specify the end date for the records to be included in the report. Audit records for the END-DATE specified are included.

12/31/9999

START-TIME=hh:mm:ss Use to specify the beginning time for records to be selected.

00:00:00

(continued)

Overview

S1B100 Input

Keywords

S1B100: Audit Trail Batch Report

B-4 Auditing and Report Writing Guide

Keyword Description Default

END-TIME=hh:mm:ss Use to specify the ending time for the records to be selected

Assume that the user codes the following:

START-DATE=03/01/2000,END-DATE=03/31/2000 START-TIME=14:00:00,END-TIME=16:00:00

The only records selected are those that were logged between the hours of 2:00 p.m. and 4:00 p.m. each day from March 1, 2000 through March 31, 2000, inclusive.

24:00:00

START-DATE-TIME=mm/dd/yyyy.hh:mm:ss Use to specify the beginning date and time for the records to be selected.

01/01/0000.00:00:00

END-DATE-TIME=mm/dd/yyyy.hh:mm:ss Use to specify the ending date and time for the records to be selected.

Suppose that the user codes the following:

START-DATE-TIME=03/01/2000.14:00:00 END-DATE-TIME=03/31/2000.16:00:00

This report will consist of all records logged from 2:00 p.m. on March 1, 2000 through 4:00 p.m. on March 31, 2000, inclusive.

12/31/9999.24:00:00

LINECOUNT=nn Use to specify the number of lines to print per page. 60

UPPER-CASE=YES/NO Use to direct the report writer to display all data in uppercase.

NO

INPUT-FILE=TAPE/DISK Use to specify the input device. If DISK is specified, the input will come from a backup disk file created by the backup/archive utility S1U100. If TAPE is specified, the input will come from a backup tape created by S1U100.

The current audit file, S1SAUDT

INPUT-DEVICE=SYSnnn Use to specify the logical unit assigned to the input file in the JCL.

SYS010

INPUT-BLOCKSIZE=nnnnn Use to specify the blocksize of the input tape or disk file.

8000

S1B100: Audit Trail Batch Report

Appendix B . Additional BIM-ALERT/CICS Reports B-5

The following jobstream prints all audit records from the current audit file S1SAUDT:

// JOB S1B100 PRINT BIM-ALERT AUDIT REPORT

// DLBL S1SMS##,'ALERT.S1SMS##.V51',,VSAM

// DLBL S1SAUDT,'ALERT.S1SAUDT.V51',,VSAM

// LIBDEF PHASE,SEARCH=???????.?????

// EXEC S1B100,SIZE=64K

/*

/&

The following jobstream uses a backup tape created by S1U100 as input. The only records selected are those logged by administrators A and B between 03/01/2000 and 03/07/2000 inclusive. Note that the input file name must be B100INP.

// JOB S1B100 PRODUCE BIM-ALERT AUDIT REPORT

// ASSGN SYS010,280

// TLBL B100INP,'AUDIT.BACKUP'

// DLBL S1SMS##,'ALERT.S1SMS##.V51',,VSAM

// LIBDEF PHASE,SEARCH=PRODLIB.ALERT

// EXEC S1B100,SIZE=64K

INPUT-FILE=TAPE,ADMIN=(A,B),START-DATE=03/01/2000,END-

DATE=03/07/2000

/*

/&

S1B100 Examples

S1B190: Violation, Sign-On, and Specification Reports

B-6 Auditing and Report Writing Guide

S1B190: Violation, Sign-On, and Specification Reports

This section shows the JCL necessary to produce reports using the security log file. Change the JCL to conform to your particular installation requirements.

You must run a sort on the file before producing each of these reports.

Similar reports can be produced using the BIM-ALERT batch report writer. Sample input is given on page 5-22.

Description

Prerequisite

Similar BIM-ALERT

Batch Report

Writer Reports

S1B190: Violation, Sign-On, and Specification Reports

Appendix B . Additional BIM-ALERT/CICS Reports B-7

// JOB S1B190A

* *******************************************************************

* ***** THIS IS THE RECORD LAYOUT OF THE SECURITY LOG FILE FIELDS

* ***** THAT WILL APPLY TO ALL -S1B190?- SORTS AND REPORT JOBS

* *******************************************************************

* ***** * POSITION * LENGTH * DESCRIPTION

* ***** * 1 * 1 * RECORD TYPE (1, 2 OR 3)

* ***** * 2 * 4 * DATE FIELD (PACKED)

* ***** * 10 * 4 * TIME FIELD (PACKED)

* ***** * 14 * 4 * TERMINAL FIELD

* ***** * 18 * 9 * ADMINISTRATOR NUMBER

* ***** * 37 * 16 * LOCATION CODE (CO,DIV,DEPT,SECT)

* ***** * 53 * 9 * OPERATOR FIELD

* ***** * 83 * 50 * VIOLATION DESCRIPTION FIELD

* *******************************************************************

* *******************************************************************

* ***** S1B190A PRODUCES A REPORT IN TIME SEQUENCE

* ***** NOTE CONTROL CARD - POSITIONS 1-4 = 'TIME'

* JOB SEQUENCE : 1 S1B190A SORT PHASE

// DLBL SORTOUT,'SORTOUT.LABEL'

// EXTENT SYS###,$$$$$$,1,0

// ASSGN SYS###,DISK,VOL=$$$$$$,SHR

// ASSGN SYS002,DISK,VOL=$$$$$$,SHR

// DLBL SORTIN1,'ALERT.S1SECLG.V51',,VSAM

// EXTENT SYS002,$$$$$$

// DLBL SORTWK1,'SORTWK1.LABEL',0

// EXTENT SYS###,$$$$$$,1,0

// ASSGN SYS###,DISK,VOL=$$$$$$,SHR

// EXEC SORT,SIZE=128K

SORT FIELDS=(1,1,A,37,16,A,2,4,A,10,4,A),FORMAT=BI,WORK=1,FILES=1

RECORD TYPE=F,LENGTH=150

INPFIL VSAM

OUTFIL BLKSIZE=150

END

/*

* JOB SEQUENCE : 2 S1B190A REPORT PHASE

// DLBL S1SEQLG,'SORTOUT.LABEL'

// EXTENT SYS###,$$$$$$,1,0

// ASSGN SYS###,DISK,VOL=$$$$$$,SHR

// ASSGN SYS020,READER

// DLBL S1SCTY,'ALERT.S1SCTY.V51',,VSAM

// DLBL S1SECLG,'ALERT.S1SECLG.V51',,VSAM

// DLBL S1SMS##,'ALERT.S1SMS##.V51',,VSAM

// EXEC S1B190,SIZE=200K

TIME

/*

/&

(continued)

Sample JCL

S1B190: Violation, Sign-On, and Specification Reports

B-8 Auditing and Report Writing Guide

// JOB S1B190B

* ***** S1B190B PRODUCES A REPORT IN OPERATOR SEQUENCE

* ***** NOTE CONTROL CARD - POSITIONS 1-4 = 'OPER'

* JOB SEQUENCE : 1 S1B190B SORT PHASE

// DLBL SORTOUT,'SORTOUT.LABEL'

// EXTENT SYS###,$$$$$$,1,0

// ASSGN SYS###,DISK,VOL=$$$$$$,SHR

// ASSGN SYS002,DISK,VOL=$$$$$$,SHR

// DLBL SORTIN1,'ALERT.S1SECLG.V51',,VSAM

// EXTENT SYS002,$$$$$$

// DLBL SORTWK1,'SORTWK1.LABEL',0

// EXTENT SYS###,$$$$$$,1,0

// ASSGN SYS###,DISK,VOL=$$$$$$,SHR

// EXEC SORT,SIZE=128K

SORT FIELDS=(1,1,A,37,16,A,53,9,A,2,4,A,10,4,A),FORMAT=BI,WORK=1, X

FILES=1

RECORD TYPE=F,LENGTH=150

INPFIL VSAM

OUTFIL BLKSIZE=150

END

/*

* JOB SEQUENCE : 2 S1B190B REPORT PHASE

// DLBL S1SEQLG,'SORTOUT.LABEL'

// EXTENT SYS###,$$$$$$,1,0

// ASSGN SYS###,DISK,VOL=$$$$$$,SHR

// ASSGN SYS020,READER

// DLBL S1SCTY,'ALERT.S1SCTY.V51',,VSAM

// DLBL S1SECLG,'ALERT.S1SECLG.V51',,VSAM

// DLBL S1SMS##,'ALERT.S1SMS##.V51',,VSAM

// EXEC S1B190,SIZE=200K

OPER

/*

/&

// JOB S1B190C

* ***** S1B190C PRODUCES A REPORT IN TERMINAL SEQUENCE

* ***** NOTE CONTROL CARD - POSITIONS 1-4 = 'TERM'

* JOB SEQUENCE : 1 S1B109C SORT PHASE

// DLBL SORTOUT,'SORTOUT.LABEL'

// EXTENT SYS###,$$$$$$,1,0

// ASSGN SYS###,DISK,VOL=$$$$$$,SHR

// ASSGN SYS002,DISK,VOL=$$$$$$,SHR

// DLBL SORTIN1,'ALERT.S1SECLG.V51',,VSAM

// EXTENT SYS002,$$$$$$

// DLBL SORTWK1,'SORTWK1.LABEL',0

// EXTENT SYS###,$$$$$$,1,0

// ASSGN SYS###,DISK,VOL=$$$$$$,SHR

// EXEC SORT,SIZE=128K

SORT FIELDS=(1,1,A,37,16,A,14,4,A,2,4,A,10,4,A),FORMAT=BI,WORK=1, X

FILES=1

RECORD TYPE=F,LENGTH=150

INPFIL VSAM

OUTFIL BLKSIZE=150

END

(continued)

S1B190: Violation, Sign-On, and Specification Reports

Appendix B . Additional BIM-ALERT/CICS Reports B-9

/*

* JOB SEQUENCE : 2 S1B109C REPORT PHASE

// DLBL S1SEQLG,'SORTOUT.LABEL'

// EXTENT SYS###,$$$$$$,1,0

// ASSGN SYS###,DISK,VOL=$$$$$$,SHR

// ASSGN SYS020,READER

// DLBL S1SCTY,'ALERT.S1SCTY.V51',,VSAM

// DLBL S1SECLG,'ALERT.S1SECLG.V51',,VSAM

// DLBL S1SMS##,'ALERT.S1SMS##.V51',,VSAM

// EXEC S1B190,SIZE=200K

TERM

/*

/&

// JOB S1B190D

* ***** S1B190D PRODUCES A REPORT IN ADMINISTRATOR / TIME SEQUENCE

* ***** NOTE CONTROL CARD - POSITIONS 1-9 = 'ADMN TIME'

* JOB SEQUENCE : 1 S1B190D SORT PHASE

// DLBL SORTOUT,'SORTOUT.LABEL'

// EXTENT SYS###,$$$$$$,1,0

// ASSGN SYS###,DISK,VOL=$$$$$$,SHR

// ASSGN SYS002,DISK,VOL=$$$$$$,SHR

// DLBL SORTIN1,'ALERT.S1SECLG.V51',,VSAM

// EXTENT SYS002,$$$$$$

// DLBL SORTWK1,'SORTWK1.LABEL',0

// EXTENT SYS###,$$$$$$,1,0

// ASSGN SYS###,DISK,VOL=$$$$$$,SHR

// EXEC SORT,SIZE=128K

SORT FIELDS=(1,1,A,18,9,A,37,16,A,2,4,A,10,4,A),FORMAT=BI,WORK=1, X

FILES=1

RECORD TYPE=F,LENGTH=150

INPFIL VSAM

OUTFIL BLKSIZE=150

END

/*

* JOB SEQUENCE : 2 S1B190D REPORT PHASE

// DLBL S1SEQLG,'SORTOUT.LABEL'

// EXTENT SYS###,$$$$$$,1,0

// ASSGN SYS###,DISK,VOL=$$$$$$,SHR

// ASSGN SYS020,READER

// DLBL S1SCTY,'ALERT.S1SCTY.V51',,VSAM

// DLBL S1SECLG,'ALERT.S1SECLG.V51',,VSAM

// DLBL S1SMS##,'ALERT.S1SMS##.V51',,VSAM

// EXEC S1B190,SIZE=200K

ADMN TIME

/*

/&

(continued)

S1B190: Violation, Sign-On, and Specification Reports

B-10 Auditing and Report Writing Guide

// JOB S1B190E

* ***** S1B190E PRODUCES A REPORT IN ADMINISTRATOR / OPERATOR SEQUENCE

* ***** NOTE CONTROL CARD - POSITIONS 1-9 = 'ADMN OPER'

* JOB SEQUENCE : 1 S1B190E SORT PHASE

// DLBL SORTOUT,'SORTOUT.LABEL'

// EXTENT SYS###,$$$$$$,1,0

// ASSGN SYS###,DISK,VOL=$$$$$$,SHR

// ASSGN SYS002,DISK,VOL=$$$$$$,SHR

// DLBL SORTIN1,'ALERT.S1SECLG.V51',,VSAM

// EXTENT SYS002,$$$$$$

// DLBL SORTWK1,'SORTWK1.LABEL',0

// EXTENT SYS###,$$$$$$,1,0

// ASSGN SYS###,DISK,VOL=$$$$$$,SHR

// EXEC SORT,SIZE=128K

SORT FIELDS=(1,1,A,18,9,A,37,16,A,53,9,A,2,4,A),FORMAT=BI,WORK=1, X

FILES=1

RECORD TYPE=F,LENGTH=150

INPFIL VSAM

OUTFIL BLKSIZE=150

END

/*

* JOB SEQUENCE : 2 S1B190E REPORT PHASE

// DLBL S1SEQLG,'SORTOUT.LABEL'

// EXTENT SYS###,$$$$$$,1,0

// ASSGN SYS###,DISK,VOL=$$$$$$,SHR

// ASSGN SYS020,READER

// DLBL S1SCTY,'ALERT.S1SCTY.V51',,VSAM

// DLBL S1SECLG,'ALERT.S1SECLG.V51',,VSAM

// DLBL S1SMS##,'ALERT.S1SMS##.V51',,VSAM

// EXEC S1B190,SIZE=200K

ADMN OPER

/*

/&

// JOB S1B190F

* ***** S1B190F PRODUCES A REPORT IN ADMINISTRATOR / TERMINAL SEQUENCE

* ***** NOTE CONTROL CARD - POSITIONS 1-9 = 'ADMN TERM'

* JOB SEQUENCE : 1 S1B190F SORT PHASE

// DLBL SORTOUT,'SORTOUT.LABEL'

// EXTENT SYS###,$$$$$$,1,0

// ASSGN SYS###,DISK,VOL=$$$$$$,SHR

// ASSGN SYS002,DISK,VOL=$$$$$$,SHR

// DLBL SORTIN1,'ALERT.S1SECLG.V51',,VSAM

// EXTENT SYS002,$$$$$$

// DLBL SORTWK1,'SORTWK1.LABEL',0

// EXTENT SYS###,$$$$$$,1,0

// ASSGN SYS###,DISK,VOL=$$$$$$,SHR

// EXEC SORT,SIZE=128K

SORT FIELDS=(1,1,A,18,9,A,37,16,A,14,4,A,2,4,A),FORMAT=BI,WORK=1, X

FILES=1

RECORD TYPE=F,LENGTH=150

INPFIL VSAM

OUTFIL BLKSIZE=150

END

(continued)

S1B190: Violation, Sign-On, and Specification Reports

Appendix B . Additional BIM-ALERT/CICS Reports B-11

/*

* JOB SEQUENCE : 2 S1B190F REPORT PHASE

// DLBL S1SEQLG,'SORTOUT.LABEL'

// EXTENT SYS###,$$$$$$,1,0

// ASSGN SYS###,DISK,VOL=$$$$$$,SHR

// ASSGN SYS020,READER

// DLBL S1SCTY,'ALERT.S1SCTY.V51',,VSAM

// DLBL S1SECLG,'ALERT.S1SECLG.V51',,VSAM

// DLBL S1SMS##,'ALERT.S1SMS##.V51',,VSAM

// EXEC S1B190,SIZE=200K

ADMN TERM

/*

/&

// JOB S1B190G

* ***** S1B190G PRODUCES A REPORT IN SIGNON-SIGNOFF / TIME SEQUENCE

* ***** NOTE CONTROL CARD - POSITIONS 1-4 = 'SIGN'

* JOB SEQUENCE : 1 S1B190G SORT PHASE

// DLBL SORTOUT,'SORTOUT.LABEL'

// EXTENT SYS###,$$$$$$,1,0

// ASSGN SYS###,DISK,VOL=$$$$$$,SHR

// ASSGN SYS002,DISK,VOL=$$$$$$,SHR

// DLBL SORTIN1,'ALERT.S1SECLG.V51',,VSAM

// EXTENT SYS002,$$$$$$

// DLBL SORTWK1,'SORTWK1.LABEL',0

// EXTENT SYS###,$$$$$$,1,0

// ASSGN SYS###,DISK,VOL=$$$$$$,SHR

// EXEC SORT,SIZE=128K

SORT FIELDS=(1,1,A,18,9,A,37,16,A,2,4,A,10,4,A),FORMAT=BI,WORK=1, X

FILES=1

RECORD TYPE=F,LENGTH=150

INPFIL VSAM

OUTFIL BLKSIZE=150

END

/*

* JOB SEQUENCE : 2 S1B190G REPORT PHASE

// DLBL S1SEQLG,'SORTOUT.LABEL'

// EXTENT SYS###,$$$$$$,1,0

// ASSGN SYS###,DISK,VOL=$$$$$$,SHR

// ASSGN SYS020,READER

// DLBL S1SCTY,'ALERT.S1SCTY.V51',,VSAM

// DLBL S1SECLG,'ALERT.S1SECLG.V51',,VSAM

// DLBL S1SMS##,'ALERT.S1SMS##.V51',,VSAM

// EXEC S1B190,SIZE=200K

SIGN

/*

/&

(continued)

S1B190: Violation, Sign-On, and Specification Reports

B-12 Auditing and Report Writing Guide

// JOB S1B190H

* ***** S1B190H PRODUCES A SPECIFICATION REPORT (NO SORT)

* ***** NOTE CONTROL CARD - POSITIONS 1-4 = 'SPEC'

// ASSGN SYS020,READER

// DLBL S1SCTY,'ALERT.S1SCTY.V51',,VSAM

// DLBL S1SECLG,'ALERT.S1SECLG.V51',,VSAM

// DLBL S1SMS##,'ALERT.S1SMS##.V51',,VSAM

// EXEC S1B190,SIZE=200K

SPEC

/*

/&

S1B190: Violation, Sign-On, and Specification Reports

Appendix B . Additional BIM-ALERT/CICS Reports B-13

The following is a sample S1B190 report. Each jobstream sorts this information in a different order. Consult the record layout at the front of the JCL stream to find the field positions available for sorting.

DATE: 03/26/2000 S1B190 5.0A BIM-ALERT/CICS COPYRIGHT 1997, PAGE

TIME: 12:20 B I MOYLE ASSOCIATES, INC. 1

* * SECURITY VIOLATION REPORT - REPORT SEQ: DATE/TIME * *

COMPANY: BIM B I MOYLEASSOCIATES, INC. DEPARTMENT: 0000 (N/A)

DIVISION: 0000 (N/A) SECTION: 0000 (N/A)

DATE TIME TERMINAL TELEPHONE SYSID OPERATOR OPERATOR NAME VIOLATION DESCRIPTION

---------- -------- -------- --------- ----- -------- ------------- ---------------------

01/20/2000 09:02:03 BC43 (000)000-0000 TEST **** - OPERATOR NOT SIGNED ON -

01/20/2000 09:02:17 BC43 (000)000-0000 TEST ROBERT ROBERT INCORRECT OPERATOR SECURITY CODE ENTERED

01/20/2000 09:02:25 BC43 (000)000-0000 TEST **** INCORRECT OPERATOR NUMBER ENTERED

01/20/2000 09:02:39 BC43 (000)000-0000 TEST ROBERT ROBERT INCORRECT OPERATOR SECURITY CODE ENTERED

01/20/2000 09:03:32 BC43 (000)000-0000 TEST **** - MAXIMUM CONSECUTIVE VIOLATIONS DETECTED -

01/20/2000 09:06:51 BC43 (000)000-0000 TEST ROBERT ROBERT - OPERATOR DISABLED DUE TO MAXIMUM VIOLATIONS -

01/20/2000 09:07:12 BC43 (000)000-0000 TEST ROBERT ROBERT - OPERATOR DISABLED DUE TO MAXIMUM VIOLATIONS -

01/20/2000 09:42:54 BC32 (000)000-0000 TEST FLL LINTON, FRED - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

01/20/2000 10:34:26 BC23 (000)000-0000 TEST ERIC KEHLER, ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

01/20/2000 10:43:37 TR93 (000)000-0000 TEST **** - OPERATOR NOT SIGNED ON -

01/20/2000 10:43:54 TR93 (000)000-0000 TEST JSTECHER STECHER, JIM INCORRECT OPERATOR SECURITY CODE ENTERED

01/20/2000 11:19:01 TR93 (000)000-0000 TEST **** - OPERATOR NOT SIGNED ON -

01/20/2000 11:19:04 TR93 (000)000-0000 TEST **** - OPERATOR NOT SIGNED ON -

01/20/2000 12:41:27 BC13 (000)000-0000 TEST ASOMAINT ASOMAINT - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

01/20/2000 12:48:27 TR93 (000)000-0000 TEST JSTECHER STECHER, JIM - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

01/20/2000 12:53:15 BC42 (000)000-0000 TEST **** - OPERATOR NOT SIGNED ON -

01/20/2000 12:58:43 BC43 (000)000-0000 TEST **** - OPERATOR NOT SIGNED ON -

01/20/2000 13:07:39 BC43 (000)000-0000 TEST **** - OPERATOR NOT SIGNED ON -

01/20/2000 14:17:34 BC13 (000)000-0000 TEST ASOMAINT ASOMAINT - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

01/20/2000 14:23:32 BC42 (000)000-0000 TEST ROBERT ROBERT - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

01/20/2000 15:54:33 BC32 (000)000-0000 TEST FLL LINTON, FRED - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

01/21/2000 15:57:27 BC32 (000)000-0000 TEST **** - OPERATOR NOT SIGNED ON -

01/21/2000 16:27:40 BC13 (000)000-0000 TEST **** - OPERATOR NOT SIGNED ON -

01/21/2000 16:28:03 BC12 (000)000-0000 TEST **** - OPERATOR NOT SIGNED ON -

01/21/2000 16:55:08 BC42 (000)000-0000 TEST **** - OPERATOR NOT SIGNED ON -

01/22/2000 05:58:33 BC22 (000)000-0000 TEST ERIC KEHLER, ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

01/22/2000 05:59:29 BC13 (000)000-0000 TEST **** - OPERATOR NOT SIGNED ON -

01/22/2000 07:20:14 BC13 (000)000-0000 TEST **** - OPERATOR NOT SIGNED ON -

01/22/2000 07:25:27 BC42 (000)000-0000 TEST ROBERT ROBERT INCORRECT OPERATOR SECURITY CODE ENTERED

01/22/2000 07:54:08 BC22 (000)000-0000 TEST ERIC KEHLER, ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

01/22/2000 10:16:40 BC22 (000)000-0000 TEST ERIC KEHLER, ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

01/22/2000 13:46:15 BC22 (000)000-0000 TEST ERIC KEHLER, ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

01/22/2000 14:00:13 BC13 (000)000-0000 TEST ASOMAINT ASOMAINT - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

01/22/2000 14:55:15 BC22 (000)000-0000 TEST ERIC KEHLER, ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

01/23/2000 06:03:49 BC22 (000)000-0000 TEST ERIC KEHLER, ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

01/23/2000 06:47:04 BC13 (000)000-0000 TEST **** - OPERATOR NOT SIGNED ON -

01/23/2000 07:03:19 BC22 (000)000-0000 TEST ERIC KEHLER, ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

01/23/2000 08:19:19 BC22 (000)000-0000 TEST ERIC KEHLER, ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

01/23/2000 12:18:58 BC22 (000)000-0000 TEST ERIC KEHLER, ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

01/23/2000 13:10:59 BC22 (000)000-0000 TEST ERIC KEHLER, ERIC - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

01/26/2000 07:53:32 BC32 (000)000-0000 TEST **** - OPERATOR NOT SIGNED ON -

01/26/2000 08:26:53 BC32 (000)000-0000 TEST FLL LINTON, FRED - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

01/26/2000 09:33:47 BC33 (000)000-0000 TEST **** - OPERATOR NOT SIGNED ON -

01/26/2000 10:10:27 BC33 (000)000-0000 TEST OPER1 OPER1 - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

01/26/2000 10:15:27 BC32 (000)000-0000 TEST FLL LINTON, FRED - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

01/26/2000 10:45:28 BC33 (000)000-0000 TEST OPER1 OPER1 - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

01/26/2000 12:55:04 BC32 (000)000-0000 TEST FLL LINTON, FRED - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

01/26/2000 12:56:03 BC33 (000)000-0000 TEST OPER1 OPER1 - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

01/26/2000 16:03:53 BC34 (000)000-0000 TEST **** - OPERATOR NOT SIGNED ON -

01/26/2000 16:49:12 BC33 (000)000-0000 TEST FLL LINTON, FRED - OPERATOR INACTIVE TIME LIMIT EXCEEDED -

Sample Report

S1B192: Security Violation Query Report

B-14 Auditing and Report Writing Guide

S1B192: Security Violation Query Report

This section shows the JCL necessary to process the violations in a query fashion. You can specify multiple parameter cards in a single execution of the program.

A similar report can be produced using the BIM-ALERT batch report writer. Sample input for producing that report is given on page 5-24.

* *******************************************************************

* ***** SECURITY VIOLATION QUERY REPORT

* *******************************************************************

* ***** THIS IS THE RECORD LAYOUT OF THE PARAMETER CARDS

* ***** THAT WILL APPLY TO - S1B192

* *******************************************************************

* ***** * POSITION * LENGTH * DESCRIPTION

* ***** A-* 1 * 2 * ADMINISTRATOR # (LEFT JUSTIFIED)

* ***** B-* 4 * 8 * FROM DATE (EDITED WITH /)

* ***** C-* 13 * 8 * TO DATE (EDITED WITH /)

* ***** D-* 22 * 5 * FROM TIME (EDITED WITH :)

* ***** E-* 28 * 5 * TO TIME (EDITED WITH :)

* ***** F-* 34 * 4 * TERMINAL ID

* ***** G-* 39 * 9 * OPERATOR ID

* ********** EXAMPLES *********************************************

* *****AA BBBBBBBB CCCCCCCC DDDDD EEEEE FFFF GGGGGGGGG

* *****A 03/01/82 03/31/82

* *****XX 03/15/82 03/15/82 14:00 15:00 AR01 SNEAKY

* *****03 77444

* *****ALL

* ***** NOTE - 'ALL' IN POSITIONS 1- 3 WILL SHOW EVERYTHING

* *****************************************************************

* *****************************************************************

// JOB S1B192

// ASSGN SYS020,READER

// DLBL S1SCTY,'ALERT.S1SCTY.V51',,VSAM

// DLBL S1SECLG,'ALERT.S1SECLG.V51',,VSAM

// DLBL S1SMS##,'ALERT.S1SMS##.V51',,VSAM

// EXEC S1B192,SIZE=200K

* ********************************

* * INSERT PARAMETER CARDS *

* * HERE!!!!! *

* ********************************

/*

/&

Description

Similar BIM-ALERT

Batch Report

Writer Report

Sample JCL

S1B500: System Transaction Security Report

Appendix B . Additional BIM-ALERT/CICS Reports B-15

S1B500: System Transaction Security Report

A similar report can be produced using the BIM-ALERT batch report writer. Sample input for producing that report is given on page 3-138.

// JOB S1B/RPTS PRINT SECURITY REPORTS

* S1B500 - SECURED TRANSACTIONS REPORT

// DLBL S1SCTY,'ALERT.S1SCTY.V51',,VSAM

// DLBL S1SMS##,'ALERT.S1SMS##.V51',,VSAM

// EXEC S1B500,SIZE=200K

/*

/&

The preceding JCL produces a report like the following:

DATE: 03/26/2000 S1B500 5.1A BIM-ALERT/CICS COPYRIGHT 1998, PAGE

TIME: 12:36 B I MOYLE ASSOCIATES,INC. 1

* * SYSTEM TRANSACTION SECURITY INFORMATION * *

TRAN STATUS ACCESS-TIME DESCRIPTIVE TRANSACTION NAME TRAN STATUS ACCESS-TIME DESCRIPTIVE TRANSACTION NAME

---- ------ ----------- --------------------------- ---- ------ ----------- ----------------------------

ALXP ACTIVE 00:01 / 24:00 BIM-ALERT/VSE MAIN TRANSACTION AXPT ACTIVE 00:01 / 24:00 BIM-ALERT/VSE ONLINE TEST

AX7A INACTV 00:01 / 24:00 BIM-ALERT/VSE ICCF MONITOR AX7B INACTV 00:01 / 24:00 BIM-ALERT/VSE ICCF MONITOR

AX7C INACTV 00:01 / 24:00 BIM-ALERT/VSE ICCF MONITOR BIMC ACTIVE 00:01 / 24:00 BIMC TRANSACTION

BIMO ACTIVE 00:01 / 24:00 BIMO TRANSACTION BIMV ACTIVE 00:01 / 24:00 BIMV TRANSACTION

BMGM SAFE 00:01 / 24:00 MAKE BMGM A SAFE TRANSACTION CECI ACTIVE 00:01 / 24:00 CICS COMMAND INTERPRETER

CEDA ACTIVE 00:01 / 24:00 CICS ONLINE RSRCE DEFINITION CEDF ACTIVE 00:01 / 24:00 CICS ONLINE DEBUG

CEMT ACTIVE 00:01 / 24:00 CICS MASTER TERMINAL CSMT ACTIVE 00:01 / 24:00 CICS MASTER TERMINAL

OPWD ACTIVE 00:01 / 24:00 OPWD TRANSACTION

Similar BIM-ALERT

Batch Report

Writer Report

Sample JCL

Sample Report

S1B510: System Program Security Report

B-16 Auditing and Report Writing Guide

S1B510: System Program Security Report

A similar report can be produced using the BIM-ALERT batch report writer. Sample input for producing that report is given on page 3-140.

// JOB S1B510 - SECURED PROGRAMS REPORT

// DLBL S1SCTY,'ALERT.S1SCTY.V51',,VSAM

// DLBL S1SMS##,'ALERT.S1SMS##.V51',,VSAM

// EXEC S1B510,SIZE=250K

/*

/&

DATE: 03/26/2000 S1B510 5.1A BIM-ALERT/CICS COPYRIGHT 1998, PAGE

TIME: 12:42 B I MOYLE ASSOCIATES, INC. 1

* * SYSTEM PROGRAM SECURITY INFORMATION * *

PROGRAM STATUS ACCESS-TIME DESCRIPTIVE PROGRAM NAME PROGRAM STATUS ACCESS-TIME DESCRIPTIVE PROGRAM NAME

------- ------ ----------- ------------------------ ------- ------ ----------- ------------------------

AXP10000 ACTIVE 00:01 / 24:00 BIM-ALERT/VSE MAIN MENU AXP720 ACTIVE 00:01 / 24:00 BIM-ALERT/VSE ONLINE TEST

BXP10000 P/ACTV 00:01 / 24:00 COMMAND LEVEL TEST PROGRAM BXP720 P/ACTV 00:01 / 24:00 COMMAND LEVEL TEST PROGRAM

PPY29001 P/ACTV 00:01 / 24:00 PAYROLL MASTER UPDATE PROG S10000 INACTV 00:01 / 24:00 BIM-ALERT/CICS MAIN MENU

S2S500 ACTIVE 02:00 / 23:00 TEST PROGRAM S2S500 S2S510 ACTIVE 03:00 / 24:00 TEST PROGRAM S2S510

S2S520 ACTIVE 04:00 / 21:00 TEST PROGRAM S2S520 S2S530 ACTIVE 05:00 / 23:00 TEST PROGRAM S2S530

S2S540 ACTIVE 06:00 / 24:00 TEST PROGRAM S2S540 S2S550 ACTIVE 07:00 / 24:00 TEST PROGRAM S2S550

S2S552 ACTIVE 08:00 / 21:00 TEST PROGRAM S2S552 S2S554 ACTIVE 09:00 / 22:00 TEST PROGRAM S2S554

S2S556 ACTIVE 10:00 / 21:00 TEST PROGRAM S2S556 S2S558 ACTIVE 11:00 / 24:00 TEST PROGRAM S2S558

S2S560 ACTIVE 12:00 / 20:00 TEST PROGRAM S2S560 S20000 ACTIVE 02:00 / 21:00 TEST PROGRAM S20000

Similar BIM-ALERT

Batch Report

Writer Report

Sample JCL

Sample Report

S1B520: System File Security Report

Appendix B . Additional BIM-ALERT/CICS Reports B-17

S1B520: System File Security Report

A similar report can be produced using the BIM-ALERT batch report writer. Sample input for producing that report is given on page 3-141.

// JOB S1B520 - SECURED FILES REPORT

// DLBL S1SCTY,'ALERT.S1SCTY.V51',,VSAM

// DLBL S1SMS##,'ALERT.S1SMS##.V51',,VSAM

// EXEC S1B520,SIZE=250K

/*

/&

DATE: 03/26/2000 S1B520 5.1A BIM-ALERT/CICS COPYRIGHT 1998, PAGE

TIME: 12:49 B I MOYLE ASSOCIATES, INC. 1

* * SYSTEM FILE SECURITY INFORMATION * *

FILENAME STATUS PROC ACCESS-TIME DESCRIPTIVE FILE NAME FILENAME STATUS PROC ACCESS-TIME DESCRIPTIVE FILE NAME

-------- ------ ---- ----------- --------------------- -------- ------ ---- ----------- ---------------------

ALERTXP ACTIVE UPDT 00:01/24:00 BIM-ALERT/VSE RULES FILE AXPCTL ACTIVE INQY 00:01/24:00 BIM-ALERT/VSE CONTROL FILE

AXPLOG1 ACTIVE INQY 00:01/24:00 BIM-ALERT/VSE LOG FILE S1SAUDT ACTIVE UPDT 00:01/24:00 BIM-ALERT AUDIT FILE

S1SCTY ACTIVE UPDT 00:01/24:00 BIM-ALERT/CICS RULES FILE S1SECLG ACTIVE UPDT 00:01/24:00 BIM-ALERT/CICS LOG FILE

S1SMS## ACTIVE UPDT 00:01/24:00 BIM-ALERT/CICS MESSAGE FILE S2LOCS ACTIVE UPDT 00:01/24:00 SECURITY ORGANIZATIONAL FILE

S2MAPS ACTIVE UPDT 00:01/24:00 MAP SECURITY FILE S2OPERS ACTIVE UPDT 00:01/24:00 OPERATOR SECURITY FILE

S2PROGS ACTIVE UPDT 00:01/24:00 PROGRAM SECURITY FILE S2SECLOG INACTV UPDT 00:01/24:00 SECURITY VIOLATION FILE

S2TERMS ACTIVE UPDT 00:01/24:00 TERMINAL SECURITY FILE S2TRANS ACTIVE UPDT 00:01/24:00 TRANSACTION SECURITY FILE

Similar BIM-ALERT

Batch Report

Writer Report

Sample JCL

Sample Report

S1B530: System Map Security Report

B-18 Auditing and Report Writing Guide

S1B530: System Map Security Report

A similar report can be produced using the BIM-ALERT batch report writer. Sample input for producing that report is given on page 3-142.

// JOB S1B530 - SECURED MAPS REPORT

// DLBL S1SCTY,'ALERT.S1SCTY.V51',,VSAM

// DLBL S1SMS##,'ALERT.S1SMS##.V51',,VSAM

// EXEC S1B530,SIZE=250K

/*

/&

DATE: 05/12/2000 S1B530 5.1A BIM-ALERT/CICS COPYRIGHT 1998, PAGE

TIME: 13:51 B I MOYLE ASSOCIATES, INC. 1

* * SYSTEM MAP DISPLAY SECURITY INFORMATION * *

------------------------------------------------------------------------------------------------------------------------------------

MAP NAME: S#M500 MAPSET NAME: S1M500 MAP REFERENCE NUMBER: 0001 MAP TITLE: TEST MAP S#M550 STATUS: ACTIVE

FIELD NO. DISPLAY FIELD NAME FIELD NO. DISPLAY FIELD NAME FIELD NO. DISPLAY FIELD NAME

--------- ------- ---------- --------- ------- ---------- --------- ------- ----------

002 YES TEST FIELD 2 005 YES TEST FIELD 5 008 YES TEST FIELD 8

009 YES TEST FIELD 9 010 YES TEST FIELD 10

MAP NAME: S#M500 MAPSET NAME: S1M500 MAP REFERENCE NUMBER: 0002 MAP TITLE: TEST MAP S#M500 STATUS: ACTIVE

FIELD NO. DISPLAY FIELD NAME FIELD NO. DISPLAY FIELD NAME FIELD NO. DISPLAY FIELD NAME

--------- ------- ---------- --------- ------- ---------- --------- ------- ----------

001 YES TEST FIELD 1 002 YES TEST FIELD 2 003 YES TEST FIELD 3

MAP NAME: S#M510 MAPSET NAME: S1M510 MAP REFERENCE NUMBER: 0003 MAP TITLE: TEST MAP S#M510 STATUS: ACTIVE

FIELD NO. DISPLAY FIELD NAME FIELD NO. DISPLAY FIELD NAME FIELD NO. DISPLAY FIELD NAME

--------- ------- ---------- --------- ------- ---------- --------- ------- ----------

001 YES TEST FIELD 1 003 YES TEST FIELD 3 005 YES TEST FIELD 5

MAP NAME: S#M510 MAPSET NAME: S1M510 MAP REFERENCE NUMBER: 0004 MAP TITLE: TEST MAP S#M510 STATUS: ACTIVE

FIELD NO. DISPLAY FIELD NAME FIELD NO. DISPLAY FIELD NAME FIELD NO. DISPLAY FIELD NAME

--------- ------- ---------- --------- ------- ---------- --------- ------- ----------

001 YES TEST FIELD 1 002 YES TEST FIELD 2 003 YES TEST FIELD 3

004 YES TEST FIELD 4 005 YES TEST FIELD 5

MAP NAME: S#M510 MAPSET NAME: S1M510 MAP REFERENCE NUMBER: 0005 MAP TITLE: TEST MAP S#M510 STATUS: ACTIVE

FIELD NO. DISPLAY FIELD NAME FIELD NO. DISPLAY FIELD NAME FIELD NO. DISPLAY FIELD NAME

--------- ------- ---------- --------- ------- ---------- --------- ------- ----------

001 YES TEST FIELD 1 XXXXXX 002 YES TEST FIELD 2 XXXXXX 003 YES TEST FIELD 3 XXXXXX

011 YES TEST FIELD 11 XXXXX 012 YES TEST FIELD 12 XXXXX 013 YES TEST FIELD 13 XXXXX

101 YES TEST FIELD 101 XXXX 102 YES TEST FIELD 102 XXXX 103 YES TEST FIELD 103 XXXX

Similar BIM-ALERT

Batch Report

Writer Report

Sample JCL

Sample Report

S1B540: Organizational Information Report

Appendix B . Additional BIM-ALERT/CICS Reports B-19

S1B540: Organizational Information Report

A similar report can be produced using the BIM-ALERT batch report writer. Sample input for producing that report is given on page 3-143.

// JOB S1B540 - LOCATION REPORT

// DLBL S1SCTY,'ALERT.S1SCTY.V51',,VSAM

// DLBL S1SMS##,'ALERT.S1SMS##.V51',,VSAM

// EXEC S1B540,SIZE=250K

/*

/&

DATE: 03/26/2000 S1B540 5.1A BIM-ALERT/CICS COPYRIGHT 1998, PAGE

TIME: 12:16 ** ORGANIZATIONAL INFORMATION ** B I MOYLE ASSOCIATES, INC. 1

COMPANY: BIM B I MOYLE ASSOCIATES, INC.

DIVISION: CLBS BIM OHIO OFFICE

DEPARTMENT: DEVL COLUMBUS DEVELOPMENT

SECTION: ALRT BIM-ALERT

SECTION: FAQS BIM-FAQS

DEPARTMENT: SUPP COLUMBUS SUPPORT

SECTION: ALRT BIM-ALERT

SECTION: FAQS BIM-FAQS

DIVISION: MPLS BIM MINNEAPOLIS OFFICE

DEPARTMENT: ADMN MINNEAPOLIS ADMINISTRATION

DEPARTMENT: DEVL MINNEAPOLIS DEVELOPMENT

SECTION: MVS MVS SYSTEMS

SECTION: VSE VSE SYSTEMS

DEPARTMENT: SUPP MINNEAPOLIS SUPPORT

DIVISION: SNTA BIM CALIFORNIA OFFICE

DEPARTMENT: DEVL SANTA ANA DEVELOPMENT

SECTION: EPIC BIM-EPIC/VSE

DEPARTMENT: SUPP SANTA ANA SUPPORT

SECTION: EPIC BIM-EPIC/VSE

Similar BIM-ALERT

Batch Report

Writer Report

Sample JCL

Sample Report

S1B550: Operator Security Information Report

B-20 Auditing and Report Writing Guide

S1B550: Operator Security Information Report

A similar, though not duplicate, report can be produced using the BIM-ALERT batch report writer. Sample input for producing that report is given in the section beginning on page 3-144.

// JOB S1B550 - OPERATOR SECURITY PROFILES

// DLBL S1SCTY,'ALERT.S1SCTY.V51',,VSAM

// DLBL S1SMS##,'ALERT.S1SMS##.V51',,VSAM

// EXEC S1B550,SIZE=250K

/*

/&

DATE: 03/26/2000 S1B550 5.1A BIM-ALERT/CICS COPYRIGHT 1998, PAGE

TIME: 13:05 B I MOYLE ASSOCIATES, INC. 1

* * OPERATOR SECURITY INFORMATION * *

------------------------------------------------------------------------------------------------------------------------------------

OPERATOR NO: JACKF OPERATOR NAME: FROST, JACK MODEL: _________ ADMINISTRATOR: A MESSAGE SUFFIX: ##

COMPANY: BIM B I MOYLE ASSOCIATES, INC. DIVISION: CLBS BIM OHIO OFFICE

DEPARTMENT: SUPP COLUMBUS SUPPORT SECTION: ALRT BIM-ALERT

PASSWORD: NEW PASSWORD: INACTIVE TIME LIMIT: 00:30 PRIMARY TERMINAL: ____ ALTERNATE TERMINAL-1: ____

ISSUE DATE: 03/25/2000 EFFECTIVE DATE: __/__/____ PROCESSING FUNCTION: UPDATE TERMINAL GROUP-ID: ALL ALTERNATE TERMINAL-2: ____

SUBMIT USERIDS: FROSTY LOG SOURCE: EXT. USER/PWD: IUI USER/PWD:

TABLES/SECIDS: B1 PROGRAMR EXPIRE DATE 08/06/2000

CICS USER: Y OPID: JFR BATCH USER: Y PWS: N MONITOR: * CON: N ACTION: * CLB: N UP RECORD STATUS: A STATUS: A

CICS USER DEFINED DATA: __________ BATCH USER DEFINED DATA: ________ LAST SIGNON - NEVER

SCHEDULED OPERATOR TIMES ---------- TEMPORARY OPERATOR TIMES ---------------- EFFECTIVE DATE ----------------- EXPIRATION DATE

MON ...... 07:00 / 24:00 MON ...... 00:01 / 24:00 04/01/2000 04/30/2000

TUE ...... 00:01 / 24:00 TUE ...... __:__ / __:__ __/__/____ __/__/____

WED ...... 00:01 / 24:00 WED ...... __:__ / __:__ __/__/____ __/__/____

THU ...... 00:01 / 24:00 THU ...... __:__ / __:__ __/__/____ __/__/____

FRI ...... 00:01 / 15:00 FRI ...... 00:01 / 24:00 04/01/2000 04/30/2000

SAT ...... 00:01 / 00:02 SAT ...... 00:01 / 24:00 04/01/2000 04/30/2000

SUN ...... 00:01 / 00:02 SUN ...... 00:01 / 24:00 04/01/2000 04/30/2000

---------------------------------------------------- AUTHORIZED TRANSACTIONS -----------------------------------------------------

ALERT TRANSACTION - 1: CEDA - CICS ONLINE RSRCE DEFINITION ALERT TRANSACTION - 4: ____ - ______________________________

ALERT TRANSACTION - 2: CEMT - CICS MASTER TERMINAL ALERT TRANSACTION - 5: ____ - ______________________________

ALERT TRANSACTION - 3: ____ - ______________________________ ALERT TRANSACTION - 6: ____ - ______________________________

TRAN DESCRIPTIVE TRANSACTION NAME TRAN DESCRIPTIVE TRANSACTION NAME TRAN DESCRIPTIVE TRANSACTION NAME

---- ---------------------------- ---- ---------------------------- ---- ----------------------------

ALXP BIM-ALERT/VSE MAIN TRANSACTION AXPT BIM-ALERT/VSE ONLINE TEST OPWD OPWD TRANSACTION

------------------------------------------------------ AUTHORIZED PROGRAM -------------------------------------------------------

PROGRAM DESCRIPTIVE PROGRAM NAME PROGRAM DESCRIPTIVE PROGRAM NAME PROGRAM DESCRIPTIVE PROGRAM NAME

------- ------------------------ ------- ------------------------ ------- ------------------------

S2S500 TEST PROGRAM S2S500 S2S510 TEST PROGRAM S2S510 S2S520 TEST PROGRAM S2S520

S2S530 TEST PROGRAM S2S530 S2S540 TEST PROGRAM S2S540 S2S550 TEST PROGRAM S2S550

S2S552 TEST PROGRAM S2S552 S2S554 TEST PROGRAM S2S554 S2S556 TEST PROGRAM S2S556

S2S558 TEST PROGRAM S2S558 S2S560 TEST PROGRAM S2S560 S20000 TEST PROGRAM S20000

(continued)

Similar BIM-ALERT

Batch Report

Writer Report

Sample JCL

Sample Reports

S1B550: Operator Security Information Report

Appendix B . Additional BIM-ALERT/CICS Reports B-21

DATE: 03/26/2000 S1B550 5.1A BIM-ALERT/CICS COPYRIGHT 1998, PAGE

TIME: 13:05 B I MOYLE ASSOCIATES, INC. 2

* * OPERATOR SECURITY INFORMATION * *

-------------------------------------------------------- AUTHORIZED FILES --------------------------------------------------------

FILE NAME PROCESS DESCRIPTIVE FILE NAME FILE NAME PROCESS DESCRIPTIVE FILE NAME

--------- ------- --------------------- --------- ------- ---------------------

( GK565 ALL FILES AUTHORIZED )

-------------------------------------------------------- RESTRICTED MAPS ---------------------------------------------------------

( GK566 NO MAP RESTRICTIONS ASSIGNED )

------------------------------------------------------ AUTHORIZED FIELDS -------------------------------------------------------

FIELD DESCRIPTIVE FIELD NAME FIELD DESCRIPTIVE FIELD NAME FIELD DESCRIPTIVE FIELD NAME

------- ------------------------ ------- ------------------------ ------- ------------------------

( GK565 ALL FIELD RSRC.S AUTHORIZED )

S1B560: Terminal Security Information Report

B-22 Auditing and Report Writing Guide

S1B560: Terminal Security Information Report

A similar, though not duplicate, report can be produced using the BIM-ALERT batch report writer. Sample input for producing that report is given in the section beginning on page 3-144.

// JOB S1B560 - TERMINAL SECURITY PROFILES

// DLBL S1SCTY,'ALERT.S1SCTY.V51',,VSAM

// DLBL S1SMS##,'ALERT.S1SMS##.V51',,VSAM

// EXEC S1B560,SIZE=250K

/*

/&

Similar BIM-ALERT

Batch Report

Writer Report

Sample JCL

S1B560: Terminal Security Information Report

Appendix B . Additional BIM-ALERT/CICS Reports B-23

DATE: 03/26/2000 S1B560 5.1A BIM-ALERT/CICS COPYRIGHT 1998, PAGE

TIME: 13:56 B I MOYLE ASSOCIATES, INC. 1

* * TERMINAL SECURITY INFORMATION * *

------------------------------------------------------------------------------------------------------------------------------------

TERM-ID: MB01 TERM-GROUP: ____ TELEPHONE: (612) 933-2885 MODEL: ____ ADMINISTRATOR: A LOGO SUFFIX: __ MSG. SUFFIX: ##

COMPANY: BIM B I MOYLE ASSOCIATES, INC. DIVISION: MPLS BIM MINNEAPOLIS OFFICE

DEPARTMENT: DEVL MINNEAPOLIS DEVELOPMENT SECTION: VSE VSE SYSTEMS

PASSWORD: NEW PSWD: TIME DIFF INACTIVE TIME LIMIT: 02:00 EXEMPT TERM. SIGN-ON: Y VIOLATION TERMINAL: ____

ISSUE DATE: 03/26/2000 EFF DATE: __/__/____ +0 HOURS PROCESSING FUNCTION: UPDT EXEMPT OPER. SIGN-ON: N ASSOCIATED PRINTER: ____

SCHEDULED TERMINAL TIMES ---------- TEMPORARY TERMINAL TIMES ---------------- EFFECTIVE DATE ----------------- EXPIRATION DATE

MON ...... 00:01 / 24:00 MON ...... __:__ / __:__ __/__/____ __/__/____

TUE ...... 00:01 / 24:00 TUE ...... __:__ / __:__ __/__/____ __/__/____

WED ...... 00:01 / 24:00 WED ...... __:__ / __:__ __/__/____ __/__/____

THU ...... 00:01 / 24:00 THU ...... __:__ / __:__ __/__/____ __/__/____

FRI ...... 00:01 / 24:00 FRI ...... __:__ / __:__ __/__/____ __/__/____

SAT ...... 00:01 / 24:00 SAT ...... __:__ / __:__ __/__/____ __/__/____

SUN ...... 00:01 / 00:02 SUN ...... 00:01 / 24:00 04/01/2000 06/30/2000

USER DEFINED DATA: 12SX______ STATUS: A

---------------------------------------------------- AUTHORIZED TRANSACTIONS -----------------------------------------------------

ALERT TRANSACTION - 1: CEMT - CICS MASTER TERMINAL ALERT TRANSACTION - 4: ____ - ______________________________

ALERT TRANSACTION - 2: ____ - ______________________________ ALERT TRANSACTION - 5: ____ - ______________________________

ALERT TRANSACTION - 3: ____ - ______________________________ ALERT TRANSACTION - 6: ____ - ______________________________

TRAN DESCRIPTIVE TRANSACTION NAME TRAN DESCRIPTIVE TRANSACTION NAME TRAN DESCRIPTIVE TRANSACTION NAME

---- ---------------------------- ---- ---------------------------- ---- ----------------------------

( GK565 ALL TRANSACTIONS AUTHORIZED )

------------------------------------------------------ AUTHORIZED PROGRAM -------------------------------------------------------

PROGRAM DESCRIPTIVE PROGRAM NAME PROGRAM DESCRIPTIVE PROGRAM NAME PROGRAM DESCRIPTIVE PROGRAM NAME

------- ------------------------ ------- ------------------------ ------- ------------------------

( GK565 ALL PROGRAMS AUTHORIZED )

DATE: 03/26/2000 S1B560 5.1A BIM-ALERT/CICS COPYRIGHT 1998, PAGE

TIME: 13:56 B I MOYLE ASSOCIATES, INC. 2

* * TERMINAL SECURITY INFORMATION * *

-------------------------------------------------------- AUTHORIZED FILES --------------------------------------------------------

FILE NAME PROCESS DESCRIPTIVE FILE NAME FILE NAME PROCESS DESCRIPTIVE FILE NAME

--------- ------- --------------------- --------- ------- ---------------------

( GK565 ALL FILES AUTHORIZED )

-------------------------------------------------------- RESTRICTED MAPS ---------------------------------------------------------

( GK566 NO MAP RESTRICTIONS ASSIGNED )

------------------------------------------------------ AUTHORIZED FIELDS -------------------------------------------------------

FIELD DESCRIPTIVE FIELD NAME FIELD DESCRIPTIVE FIELD NAME FIELD DESCRIPTIVE FIELD NAME

------- ------------------------ ------- ------------------------ ------- ------------------------

( GK565 ALL FIELD RSRC.S AUTHORIZED )

Sample Report

S1B570/S1B571: Operator/Terminal Authorized Resources

B-24 Auditing and Report Writing Guide

S1B570/S1B571: Operator/Terminal Authorized Resources

The programs S1B570 and S1B571 are run in conjunction with an intervening SORT to provide a report of all the terminals or operators authorized to use specified transactions, programs, files, or maps.

S1B570 reads the S1SCTY file and creates a sequential disk file which is used as input to the SORT program. The information contained in the output file depends on the parameters passed to the program via the control card. Because the S1SCTY file is opened as input only, the BIM-ALERT/CICS system can be functioning normally while this job is being run.

The input to the program consists of parameters supplied in card format. Comments can be included by specifying an asterisk (*) in column one. The following rules apply to coding the input card images:

Only one non-comment card can be passed to the program, and it must contain the following keyword parameters with the desired option:

Parameter Description

RESOURCE=option S1B570 uses this parameter to determine which record type on the security file it is to access. Valid options are: TRANSACTIONS PROGRAMS FILES MAPS FIELDS GROUPS

USER=option S1B570 uses this parameter to determine whether operator or terminal records are to be accessed. Valid options are: TERMINAL OPERATOR

The two parameters must be on the same card, separated by a comma, with no intervening spaces, as follows:

USER=TERMINAL,RESOURCE=PROGRAMS

The parameters can be specified in either order and can start in any column.

Description

S1B570

S1B570/S1B571: Operator/Terminal Authorized Resources

Appendix B . Additional BIM-ALERT/CICS Reports B-25

S1B571 reads the sorted disk file created by S1B570 and the SORT program, and it produces a report detailing which operators or terminals are authorized to access the specified transactions, programs, files, or maps. If no specific resource names are supplied, the report defaults to all resources of the specified type.

The input to the program consists of parameters supplied in card format. Comments can be included by specifying an asterisk (*) in column one. The following rules apply to coding the input card images:

The first non-comment card must contain the USER= and RESOURCE= keywords and must conform to the rules for coding cards specified above, in the description of S1B570.

The input cards following the parameter card can contain names of those resources that you want reported. The names can be coded one name per card, multiple names per card, or any combination thereof. If multiple resource names are supplied on a card, the names must be separated by blanks or commas. The data on the resource name cards must not extend beyond column 71.

If no specific resource names are supplied, the report defaults to all resources of the specified type.

If the desired report pertains to authorized maps, then the input cards must be coded with the mapname followed by its reference number on the same card. The reference number must not exceed four characters in length. The following is an example of the content of a map report input card:

IN085M1 27 S1M550 43 SMAPFFF 0001

If a report pertains to maps, the SORT FIELDS card must be coded like the second SORT FIELDS card in the sample JCL on the following page.

S1B571 can be run multiple times against the same sorted file as long as the same type of report is desired. (Obviously, for example, you couldn't get a report of terminal authorized maps if the file you had S1B570 create contained operator authorized programs). The resource names specified will be internally sorted by the program, so the report may come out in an order different from the resource name cards. The operator and terminal names for each resource will also be sorted in ascending alphabetical order to help you quickly find a specific entry in cases in which many users are authorized to access the same resource.

S1B571

S1B570/S1B571: Operator/Terminal Authorized Resources

B-26 Auditing and Report Writing Guide

The following is a sample of the JCL required to run the S1B570/S1B571 batch reports to produce a listing of all operators authorized to run transactions DUMP and CEMT. S1B571 can run stand-alone as long as the sorted sequential disk file created by S1B570 and SORT is present.

// JOB S1B570

// DLBL S1SCTY,'ALERT.S1SCTY.V51',,VSAM,CAT=XXXXXXX

// ASSGN SYS010,DISK,VOL=XXXXXX,SHR

// DLBL SEQDISK,'SORTIN.TEMP.DELETE.ME',0,SD

// EXTENT SYS010,XXXXXX,1,0,2990,10

// DLBL S1SMS##,'ALERT.S1SMS##.V51',,VSAM

// LIBDEF PHASE,SEARCH=PRODLIB.ALERT

// EXEC S1B570,SIZE=AUTO

RESOURCE=TRANSACTIONS,USER=OPERATOR

/*

// RESET ALL

// ASSGN SYS001,DISK,VOL=XXXXXX,SHR

// ASSGN SYS002,DISK,VOL=XXXXXX,SHR

// ASSGN SYS003,DISK,VOL=XXXXXX,SHR

// DLBL SORTIN1,'SORTIN.TEMP.DELETE.ME',,SD

// EXTENT SYS002,XXXXXX,1,0,2990,10

// DLBL SORTOUT,'SORTOUT.TEMP.DELETE.ME',0,SD

// EXTENT SYS001,XXXXXX,1,0,2910,40

// DLBL SORTWK1,'SORTWK.TEMP.DELETE.ME',,SD

// EXTENT SYS003,XXXXXX,1,0,2950,40

// EXEC SORT

SORT FIELDS=(1,8,A,9,9,A),WORK=1,FILES=1,FORMAT=BI

SORT FIELDS=(1,10,A,11,9,A),WORK=1,FILES=1,FORMAT=BI

RECORD TYPE=F,LENGTH=40

INPFIL BLKSIZE=800

OUTFIL BLKSIZE=800

OPTION PRINT=ALL

/*

// RESET ALL

// ASSGN SYS010,DISK,VOL=VSESYS,SHR

// DLBL SEQDISK,'SORTOUT.TEMP.DELETE.ME',,SD

// EXTENT SYS010,VSESYS,1,0,2910,40

// DLBL S1SMS##,'ALERT.S1SMS##.V51',,VSAM

// LIBDEF PHASE,SEARCH=PRODLIB.ALERT

// EXEC S1B571,SIZE=25K

USER=OPERATOR,RESOURCE=TRANSACTIONS

* THIS WILL REPORT ALL OPERATORS AUTHORIZED DUMP AND CEMT

DUMP CEMT

/*

/&

S1B570/S1B571

Sample JCL

Index-1

Index

**/ (end comment indicator) 2-5

//* (begin comment indicator) 2-5

<< (for left-justified label) 2-33

>> (for right-justified label) 2-33

AAccess check information fields

ALRTVVVI report 6-11Access checks for resources

Resource Class Report A-11Access level A-7Access violations

Dataset Name Report A-7User Entry Report A-9

Activation and deactivation fieldsALRTVCAU report 7-68

Administrator Change Activity Report 7-92

Administrator maintenance fieldsALRTVCAU report 7-71

ALRTVCAU reportdescription of 7-3field information 7-7fields

activation and deactivation fields 7-68

administrator maintenance fields 7-71

common segment fields 7-9

location information fields 7-74optional zap fields 7-79password change field 7-77program refresh fields 7-78record dump information fields 7-

80secured resource authorization fields

7-65secured resource fields 7-50system options and parameter fields

7-14terminal and operator profile fields

7-32I/O module 7-3input for 7-3sample JCL 7-3sample reports 7-81

ALRTVCSC reportdescription of 3-3field information 3-11fields

common segment fields 3-13field resource information fields 3-

108field resource security information

fields 3-115file record fields 3-21group security information record

fields 3-119location record fields 3-26map record fields 3-23operator record fields 3-60program record fields 3-19terminal record fields 3-29transaction record fields 3-17user group record fields 3-128user profile record fields 3-132

I/O module 3-3input for 3-3sample JCL 3-3sample reports 3-136

Index-2 Auditing and Report Writing Guide

ALRTVCVI reportdescription of 5-2field information 5-5fields

common segment fields 5-7initialization record field 5-11sign-on and sign-off record fields 5-

12violation record fields 5-16

I/O module 5-2input for 5-2sample JCL 5-3

ALRTVREPJCL 1-5list of commands 1-8processing 1-10

ALRTVVAU reportdescription of 8-2field information 8-7fields

common segment fields 8-9control file maintenance fields 8-47DASD dataset maintenance fields

8-28extended user fields 8-15jobmask fields 8-20library maintenance fields 8-40node information fields 8-53remote submittal fields 8-55resource maintenance fields 8-36rules table maintenance fields 8-44SECID maintenance fields 8-24tape dataset maintenance fields 8-

32I/O module 8-2input for 8-2sample JCL 8-2sample reports 8-57

ALRTVVSC reportdescription of 4-2field information 4-4fields

common segment fields 4-6DASD and tape dataset record fields

4-18dataset record fields 4-18jobmask record fields 4-15node information fields 4-27reference record fields 4-26remote submittal information fields

4-29resource record fields 4-23

SECID record fields 4-16tape and DASD dataset record fields

4-18user record fields 4-11XPCC submittal information fields

4-31I/O module 4-2input for 4-2sample JCL 4-2sample reports 4-32

ALRTVVVI reportdescription of 6-2field information 6-5fields

access check information fields 6-11

common segment fields 6-7I/O module 6-2input for 6-2sample JCL 6-3sample reports 6-31

Audit Trail Batch Report B-3AXPAUTH.J A-16AXPB001 A-16

BBIM-ALERT

security log file input dataset 5-2, 6-2BIM-ALERT/CICS

audit file input dataset 7-3manuals xsecurity file input dataset 3-3, 5-2

BIM-ALERT/VSEaudit file input dataset 8-2manuals xsecurity file input dataset 4-2, 6-2

Blanks in command statements 2-4Boolean syntax rules 2-40Brackets 2-3

CChange activity - Status Change Report

A-4Characters

continuation indicator 2-5reserved 2-5special 2-4

CommandsALRTVREP commands 1-8FIELD 2-31FIELDS 2-30

Index-3

FILEDUMP 2-35HELP 2-8OPTIONS 2-10REPORT 2-17required commands 1-9RUN 2-43SELECT IF 2-37SUBTITLE 2-23TITLES 2-21XFORM 2-13

Comments in input 2-5Common segment fields

ALRTVCAU report 7-9ALRTVCSC report 3-13ALRTVCVI report 5-7ALRTVVAU report 8-9ALRTVVSC report 4-6ALRTVVVI report 6-7

Continuation indicator 2-5Control file maintenance fields

ALRTVVAU report 8-47Control File Maintenance Report 8-60Control Totals Reports A-15Conventions for command syntax 2-3CTLBREAK keyword

FIELD command 2-33SUBTITLE command 2-26

DDASD Dataset Change Report 8-58DASD dataset fields

ALRTVVAU report 8-28ALRTVVSC report 4-18

Dataset Name Report 6-31, A-7Dataset record fields

ALRTVVSC report 4-18DATEFORM keyword

OPTIONS command 2-10REPORT command 2-18

Detail pages 1-13Documentation

list of ALERT manuals x

EEllipses 2-3ELSE parameter of XFORM command

2-14Extended user fields

ALRTVVAU report 8-15

FFIELD command 2-31Field resource information fields

ALRTVCSC report 3-108Field resource security information fields

ALRTVCSC report 3-115FIELDS command 2-30File record fields

ALRTVCSC report 3-21FILEDUMP command 2-35FILETYPE keyword of REPORT

command 2-18FILLCHAR keyword

FIELD command 2-32SUBTITLE command 2-27

FORMAT keyword of FIELD command2-32

GGlobal Terminal/Operator Parameter

Change Report 7-85Group security information fields

ALRTVCSC report 3-119

HHeader page 1-12HELP command 2-8Hyphen 2-5

II/O module

ALRTVCAU report 7-3ALRTVCSC report 3-3ALRTVCVI report 5-2ALRTVVAU report 8-2ALRTVVSC report 4-2ALRTVVVI report 6-2

Initialization record fieldALRTVCVI report 5-11

Input datasetBIM-ALERT

security log file 5-2, 6-2BIM-ALERT/CICS

audit file 7-3security file 3-3, 5-2

BIM-ALERT/VSEaudit file 8-2security file 4-2, 6-2

default input datasets 2-17

Index-4 Auditing and Report Writing Guide

JJCL, sample

ALRTVCAU report 7-3ALRTVCSC report 3-3ALRTVCVI report 5-3ALRTVVAU report 8-2ALRTVVSC report 4-2ALRTVVVI report 6-3for executing reports 1-5

Job entry verification A-9Jobmask fields

ALRTVVAU report 8-20ALRTVVSC report 4-15

JUSTIFY keywordFIELD command 2-32SUBTITLE command 2-25

Justifying labels 2-33

LLABEL keyword

FIELD command 2-33Labels, justifying 2-33LENGTH keyword

FIELD command 2-32SUBTITLE command 2-25

Library maintenance fieldsALRTVVAU report 8-40

LINE keyword of SUBTITLE command2-25

LINELEN keyword of OPTIONScommand 2-10

LINESPC keyword of REPORT command2-19

Location Change Report 7-94Location information fields

ALRTVCAU report 7-74ALRTVCSC report 3-26

Log File Integrity Report A-3Logical Table Resource Report 4-32LOGO keyword of REPORT command

2-18

MMap record fields

ALRTVCSC report 3-23MISSCHAR keyword

FIELD command 2-32SUBTITLE command 2-27

NNOCC keyword of REPORT command

2-19Node information fields

ALRTVVAU report 8-53ALRTVVSC report 4-27

NOHDRDATE keyword of REPORTcommand 2-18

NOHDRPAGE keyword of REPORTcommand 2-18

NOLABELS keyword of REPORTcommand 2-18

NOPAGENUM keyword of REPORTcommand 2-18

NOTEST keyword of OPTIONScommand 2-10

NOTRAILER keyword of REPORTcommand 2-18

NOTRUNC keywordFIELD command 2-33SUBTITLE command 2-27

NOUPPERCASE keyword of OPTIONScommand 2-10

OOperator Access Time Report 3-143Operator and Terminal Reports 3-142Operator Authorization Report 3-145Operator Authorized Resources Report

B-24Operator Parameter Change Report 7-85Operator Profile Change Report 7-95Operator record fields

ALRTVCSC report 3-60Operator Security Information Report B-

20Operator Sign-On Report 3-146Optional zap fields

ALRTVCAU report 7-79OPTIONS command 2-10Organizational Information Report 3-

141, B-19OUTFILE keyword of REPORT

command 2-19

PPAGELEN keyword

OPTIONS command 2-10REPORT command 2-18

Parentheses 2-3

Index-5

Password change fieldALRTVCAU report 7-77

Pre-defining a table 2-16Program Execution Report A-13Program record fields

ALRTVCSC report 3-19Program refresh field

ALRTVCAU report 7-78

RRecord dump information fields

ALRTVCAU report 7-80Reference record fields

ALRTVVSC report 4-26Remote submittal fields

ALRTVVAU report 8-55Remote submittal information fields

ALRTVVSC report 4-29REPCHAR keyword of FIELD command

2-33Report

components 1-11detail pages 1-13header page 1-12

REPORT command 2-17Reports

Administrator Change Activity Report7-92

Audit Trail Batch Report B-3Control File Maintenance Report 8-60Control Totals Reports A-15DASD Dataset Change Report 8-58Dataset Name Report 6-31, A-7Global Terminal/Operator Parameter

Change Report 7-85Location Change Report 7-94Log File Integrity Report A-3Logical Table Resource Report 4-32Operator Access Time Report 3-143Operator and Terminal Reports 3-142Operator Authorization Report 3-145Operator Authorized Resources Report

B-24Operator Profile Change Report 7-95Operator Security Information Report

B-20Operator Sign-On Report 3-146Organizational Information Report 3-

141, B-19Program Execution Report A-13Resource Activation and Deactivation

Report 7-91

Resource Change Report 8-59Resource Class Report 6-34, A-11Resource Name Update Report 7-87Resource Update Report 7-89SECID Authorized Resource Report

A-16SECID/User Dataset Summary Report

6-36SECID/USER Job Summary Report

A-14SECID/User Resource Summary

Report 6-37Security Violation Query Report B-14Security Violation Report 5-21, 5-23Status Change Report A-4System File Security Report 3-139, B-

17System Map Display Security Report

3-140System Map Security Report B-18System Options Update Report 7-81System Parameter Change Report 7-

83System Parameter Update Report 7-84System Program Security Report 3-

138, B-16System Transaction Security Report 3-

136Terminal Authorized Resources Report

B-24Terminal Security Information Report

B-22User Entry Report 6-33, A-9Violation, Sign-On, and Specification

Reports B-6Required commands 1-9Reserved character 2-5Resource Activation and Deactivation

Report 7-91Resource Change Report 8-59Resource Class Report 6-34, A-11Resource maintenance fields

ALRTVVAU report 8-36Resource Name Update Report 7-87Resource record fields

ALRTVVSC report 4-23Resource Update Report 7-89Rules table maintenance fields

ALRTVVAU report 8-44RUN command 2-43

Index-6 Auditing and Report Writing Guide

SS1B100 B-3S1B190

producing B-6similar ALRTVREP report 5-21

S1B192producing B-14similar ALRTVREP report 5-23

S1B500similar ALRTVREP report 3-136

S1B510producing B-16similar ALRTVREP report 3-138

S1B520producing B-17similar ALRTVREP report 3-139

S1B530producing B-18similar ALRTVREP report 3-140

S1B540producing B-19similar ALRTVREP report 3-141

S1B550producing B-20similar ALRTVREP report 3-142

S1B560 B-22S1B570 B-24S1B571 B-24SECID Authorized Resource Report A-

16SECID record fields

ALRTVVAU report (maintenancerecords) 8-24

ALRTVVSC report 4-16SECID/User Dataset Summary Report 6-

36SECID/USER Job Summary Report A-

14SECID/User Resource Summary Report

6-37Secured resource fields

ALRTVCAU report 7-50authorization fields 7-65

Security Violation Query Report B-14Security Violation Report 5-21, 5-23SELECT IF command 2-37Serial number exception A-3Sign-on and sign-off record fields

ALRTVCVI report 5-12SORTNAME keyword 2-10SORTPRTY keyword

FIELD command 2-32SUBTITLE command 2-26

SORTSEQ keyword of SUBTITLEcommand 2-26, 2-32

Special characters 2-4Square brackets 2-3Statement

comments 2-5continuation 2-5

Status Change Report A-4SUBTITLE command 2-23Syntax

blanks 2-4comments 2-5continuation indicator 2-5conventions 2-3example 2-6keywords and keyword values 2-4

System File Security Report 3-139, B-17System Map Display Security Report 3-

140System Map Security Report B-18System options and parameter fields

ALRTVCAU report 7-14System Options Update Report 7-81System Parameter Change Report 7-83System Parameter Update Report 7-84System Program Security Report 3-138,

B-16System Transaction Security Report 3-

136

TTape dataset fields

ALRTVVAU report (maintenancefields) 8-32

ALRTVVSC report 4-18Terminal Authorized Resources Report

B-24Terminal record fields

ALRTVCAU report (profile records)7-32

ALRTVCSC report 3-29Terminal Security Information Report B-

22Terminal/Operator Parameter Change

Report 7-85TEST keyword of OPTIONS command

2-10TIMEFORM keyword

OPTIONS command 2-10REPORT command 2-18

Index-7

TITLES command 2-21Transaction record fields

ALRTVCSC report 3-17Transformation table, pre-defining 2-16

UUPPERCASE keyword of OPTIONS

command 2-10User Entry Report 6-33, A-9User group record fields

ALRTVCSC report 3-128User profile record fields

ALRTVCSC report 3-132User record fields

ALRTVVSC report 4-11

VViolation record fields

ALRTVCVI report 5-16Violation, Sign-On, and Specification

Reports B-6Violations

Dataset Name Report A-7User Entry Report A-9

XXFORM command 2-13XFORM keyword

FIELD command 2-33SUBTITLE command 2-27

XPCC submittal information fieldsALRTVVSC report 4-31