Using the Audit Report Options panel


You can use the Audit Report Options panel to control production of the Auditing report.
Log Analyzer writes this report to the SYSOUT-type AUDIT data set.

To access and work with the Audit Report Options panel

  1. Access the REPORTS Control Statement panel.For instructions, see Using-the-REPORTS-Control-Statement-panel-to-build-the-REPORTS-control-statement.
  2. In the Specify input field to the left of the Audit label, enter S.The Audit Report Options panel is displayed as shown below:

                                 Audit Report Options                             
     Command ===> _______________________________________________________________
                                                                                 
     SYSOUT limits.                                                               
       Limit SYSOUT to ________ lines (blank for no limit)                        
                                                                                 
     Event type to include or exclude.                                            
     _ 1.Include  2.Exclude                                                       
       Event type.                                                                
       _ 1.Trans  2.Commands  3.Security violations  4.Signons  5.Signoffs        
         6.DLI                                                                         
     DBDs to include or exclude (If report includes transaction or DLI events).          
     _ 1.Include  2.Exclude                                                       
       DBD names _____________________________________________________            
  3. (optional) In the Limit SYSOUT to n lines field, enter the maximum number of lines to write to the output data set for the report. If you omit this number, all lines that Log Analyzer produces for this report are written to the output data set.
  4. (optional) In the Event type to include or exclude field, enter one of the following values to control generation of the TYPE subkeyword of the AUDIT keyword:

    Value

    Result

    1

    In the AUDIT report, display information only for type that you specify in the Event type field. Omit information about all other types that Log Analyzer finds in the input logs.

    2

    In the AUDIT report, omit information about the type that you specify in the Event type field. Display information about all other types that Log Analyzer finds in the input logs.

  5. (Optional) In the Event Type field, enter one of the values for the required event type:

    Value

    Result

    1

    Transactions

    2

    Commands

    3

    Security Violations

    4

    Signons

    5

    Signoffs

    6

    DLI

  6. (optional) In the DBDs to include or exclude field, enter one of the following values to control generation of the DBD subkeyword of the AUDIT keyword:

    Value

    Result

    1

    In the AUDIT report, display information only for DBDs that you specify in the DBD names field. Omit information about all other DBDs that Log Analyzer finds in the input logs.

    2

    In the AUDIT report, omit information about the DBDs that you specify in the DBD names field. Display information about all other DBDs that Log Analyzer finds in the input logs.

    If you specify a value in the DBDs to include or exclude field, enter one or more DBD names in the DBD names field.

    You can enter a masked value by using the following wildcard characters:

    • Specify an asterisk (*) to match any number of characters, starting from that position.
    • Specify a percent sign (%) to match a single character at that position.

    Separate multiple names with a space, a comma, or both. The ISPF interface separates the names with a comma, as required by the keyword syntax.

    Note

    If you omit all of these values and you select the report, the ISPF interface generates the AUDIT=ALL keyword.

  7. Press F3 to save the changes and return to the REPORTS Control Statement panel.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*