IMS log record description


The CZAILOGD member describes each log type. Any line(s) can be copied to the CZAINTXI parameter member to be passed to the SIEM Agent.

Warning

Note

Not all IMS log record types are supported by the BMC AMI Defender for z/OS. Refer to the product documentation for full details on what types are currently supported.

Log Type

Description

LOGTYPE=01

Input message.

LOGTYPE=02

A /Log command was completed.

LOGTYPE=03

Output message.

LOGTYPE=04

Sends information to the Remote Site Recovery (RSR) site.

LOGTYPE=06

IMS was started or stopped.

LOGTYPE=07

Application program was terminated.

LOGTYPE=08

Application program was scheduled.

LOGTYPE=09

Application using sequential buffering terminated.

LOGTYPE=0A

A CPI-comms application was scheduled or terminated.

LOGTYPE=10

Security violation.

LOGTYPE=11

Conversational Program started.

LOGTYPE=12

Conversational Program terminated.

LOGTYPE=13

Contains conversational CCB's at logon.

LOGTYPE=14

A Dial line was disconnected.

LOGTYPE=15

A Dial line was connected.

LOGTYPE=16

Signin / Signout.

LOGTYPE=18

User program issued Checkpoint call.

LOGTYPE=20

Open database.

LOGTYPE=21

Close database.

LOGTYPE=22

A Type 2 command completed.

LOGTYPE=23

List of open databases when batch application requested a checkpoint.

LOGTYPE=24

I/O error detected by buffer handler.

LOGTYPE=25

An EEQE was created or deleted.

LOGTYPE=26

An I/O toleration buffer was created.

LOGTYPE=27

Dataset extended.

LOGTYPE=28

IMS restart updated input message sequence numbers.

LOGTYPE=29

Progress of a HALDB online reorg.

LOGTYPE=30

A message prefix was changed.

LOGTYPE=31

A Get Unique (GU) was issued by IMS.

LOGTYPE=32

A messages was rejected.

LOGTYPE=33

Free DDRN (Queue manager released a record).

LOGTYPE=34

A message was cancelled.

LOGTYPE=35

A messages was enqueued.

LOGTYPE=36

A message was dequeued.

LOGTYPE=37

Messages were transferred to a permanent destination.

LOGTYPE=38

Input message put back on input queue after abend.

LOGTYPE=39

Output queue freed after Release call.

LOGTYPE=3A

Bitmap record replaced after queue record was freed.

LOGTYPE=3B

Invalid message record detected.

LOGTYPE=3C

A control block was changed during validation.

LOGTYPE=3D

A QBLK record was altered.

LOGTYPE=40

A Checkpoint was taken (see subcodes for details).

LOGTYPE=41

A Batch or BMP program issued a checkpoint.

LOGTYPE=42

IMS switched OLDS, or checkpoint, or shutdown checkpoint.

LOGTYPE=43

Status of current online log dataset.

LOGTYPE=45

Checkpoint statistics (see subcodes for details).

LOGTYPE=47

Checkpoint taken, contains all PST's in the system.

LOGTYPE=48

Log block descriptive info (see subcodes for details).

LOGTYPE=49

Written at RSR Tracking site on detecting invalid FSE.

LOGTYPE=4C

Database Processing activity (see subcodes for details).

LOGTYPE=4E

Statistical information when event occurs during monitoring.

LOGTYPE=50

Database updated. Contains data of insert / update.

LOGTYPE=52

Copy of data before it is changed by ISRT of new KSDS Key.

LOGTYPE=53

Bitmap for log record on alternate IMS tracking CI split

LOGTYPE=55

Record reserved for external subsystem information.

LOGTYPE=56

Recovery support for stages of sync point (see subcodes for details).

LOGTYPE=57

Database updates in RSR environment (Begin or End).

LOGTYPE=59

FastPath messages (see subcodes for details).

LOGTYPE=5901

FastPath: Input message.

LOGTYPE=5903

FastPath: Output message.

LOGTYPE=5910

FastPath: I/O from data space has started.  

LOGTYPE=5911

FastPath: Input message was inserted on an EMHQ structure.

LOGTYPE=5912

FastPath: A group of CI's from data space was written to DASD.

LOGTYPE=5916

FastPath: An output message was inserted on an EMHQ structure.

LOGTYPE=5920

FastPath: An MSDB was updated.

LOGTYPE=5921

FastPath: DEBD area dataset was opened.

LOGTYPE=5922

FastPath: DEBD area dataset was closed.

LOGTYPE=5923

FastPath: DEBD area dataset status was changed.

LOGTYPE=5924

FastPath: An ADS error queue element (EQE) was created.

LOGTYPE=5936

FastPath: An output message was dequeued.

LOGTYPE=5937

FastPath: A sync point operation completed.

LOGTYPE=5938

FastPath: A sync point operation was unsuccessful.

LOGTYPE=5945

FastPath: Info about buffer use and buffer waits.

LOGTYPE=5947

FastPath: Bit map of CI's that have updates in HSSP image copy ds.

LOGTYPE=5950

FastPath: A DEDB was updated.

LOGTYPE=5951

FastPath: Non recoverable suppression has taken place.

LOGTYPE=5953

FastPath: An online utility updated a DEDB.

LOGTYPE=5954

FastPath: Area containing sequential dependent buffers was opened.

LOGTYPE=5955

FastPath: New buffer for sequential dependent segments obtained.

LOGTYPE=5956

FastPath: Indoubt SDEP buffer from resync process.

LOGTYPE=5957

FastPath: Local/Global portion of DMAC logged.

LOGTYPE=5958

FastPath: An SDEP buffer was written.

LOGTYPE=5960

FastPath: Creations, expansions and compressions of the subpools.

LOGTYPE=5970

FastPath: The MSDB relocation factor for XRF is shown.

LOGTYPE=59FF

FastPath: Track internal IMS FP info in various modules.

LOGTYPE=5E

Sequential buffer image capture record (see subcodes for details).

LOGTYPE=5F

A DL/I call competed - image capture trace data.

LOGTYPE=63

Log session initiation and termination.

LOGTYPE=64

Inconsistency found in processing associated with MSC.

LOGTYPE=65

A message is about to be enqueued.

LOGTYPE=66

A message is about to be enqueued or dequeued.

LOGTYPE=67

Trace record (see subcodes for details).

LOGTYPE=69

Unauthorized 3275 terminal dialed into VERIFY=YES line.

LOGTYPE=6C

MSC partner systems were started.

LOGTYPE=6D

Used in XRF environment based on events (see subcodes for details).

LOGTYPE=6E

SNA command processed: QEC, QC, RELQ, RSHUT, SHUTD, SHUTC, LUS.

LOGTYPE=70

Online change /MODIFY command (see subcodes for details).

LOGTYPE=72

Dynamic terminal sign on/off (see subcodes for details).

LOGTYPE=99

DB changes to be propagated to other environment (for example, DB2)

Related topic

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

BMC AMI Defender for IMS 2.9.03