SMF 81 statement
SMF type 81 records are RACF initialization.
For information about filterSpecifications, see FILTER-and-MATCH-parameters.
You might want to monitor type 81 records to keep track of RACF initialization. The SMF 81 statement indicates that type 81 records are to be collected and forwarded to your syslog console. If you code an SMF 81 statement, then by default all SMF type 81 records are forwarded to your BMC Defender Server or syslog console with a facility of Security (4) and a severity of Informational.
If you code more than one SMF 81 statement, then a subsequent SMF 81 statement replaces any SMF 81 statements that came before.
Parameter | Description |
|---|---|
SMF 81 | Must be specified as shown. |
DESCription | The description parameter is depreciated and is accepted only for compatibility purposes. |
INHibit | Specifies that the writing of the SMF record type 81 to the SMF data sets or logstream is to be inhibited by BMC AMI Defender SMF record type 81 is processed by BMC AMI Defender, but then inhibited from further processing by SMF. |
FACILITY(facilityName) | Specifies the RFC 3164 facility that is to be indicated as the origin of the syslog records corresponding to SMF type 81 records If you omit this parameter, it defaults to SECURITY4. If you would like a different facility indicated, code one of the RFC 3164 facility names as listed in Syslog-facilities-and-severities. |
FIELDs(fieldName…) | Specifies the names of the SMF type 81 record fields that are to be transmitted to the BMC Defender Server or other syslog console, and the order where they are to appear in the message Specify one or more of the fields as described in FIELDS-parameter. |
filterSpecification | For information about filterSpecifications, see FILTER-and-MATCH-parameters. |
LOG | LOG(HEX) | Specifies that the selected SMF records are to be logged on CZAPRINT and optionally dumped in hexadecimal and character format This parameter is intended primarily for diagnostic purposes. Use care in specifying LOG(HEX) as it might generate a large volume of print records, especially if BMC AMI Defender is left running for several hours or more. |
PROCess(‘processTag’) | Specifies the tag that appears at the start of SMF 81 syslog messages, following the priority, timestamp and host name, and preceding the formatted fields Specify the exact process tag that you want to include in syslog messages including any spaces and punctuation. Process-tag might be any length from the null string (‘’) to 32 characters. If SMF 81 PROCess is omitted, it defaults to RACF followed by the leading delimiter from OPTIONS DELIM. |