Newer version of documentation BMC provides a newer version of the documentation for this version of the product. As a result, BMC no longer accepts comments in this space.BMC recommends upgrading to the latest version of the product. To see documentation for that version, see bao8301.

Creating a Rule for CICS multiline messages


The Selection Criteria panel for CICS events allows you to create Rules that fire for multiline transient data queue (MLTDQ) messages.

Based on the specification in the field MLTDQ, a CICS Rule can process a CICS MLTDQ as a single entity (specify MLTDQ ===> ALL), or it can process only the first line of the message.

The following example shows how to use variables on the Variable Dependencies panel in a Rule to refine the selection criteria and process the lines of a CICS MLTDQ message, DFHXS1111. Line 1 of the message is:

DFHXS1111 08/30/2011 23:21:26 CI10 CEMT Security violation by user CI10 for resource CI10.TASK in class CCICSCMD. SAF

Line 2 of the message is:

codes are (X'00000008',X'00000000'). ESM codes are (X'00000008',X'00000000').

Creating a rule

  1. Complete the Selection Criteria - CICS panel as follows:

    BMC Software  ------------- Selection Criteria - CICS ------------ BMC AMI OpsA
    COMMAND ===>                                                 TGT  --- JBAO     
                                                                                  
           Rule-set === AAORUL00             Rule-id  === DFHXS111                 
                                                                                  
    Text Description:                                                              
    Text ID     ===> DFHXS1111                         First word of TDQ msg/cmd   
    Text String (Enter Below):                                                     
                                                                                  
                                                                                  
    CICS TDQ    ===>                                   CICS Transient Data Queue   
                                                                                  
    Issuer Identification:                                                         
    Job name    ===> AAOCT42J                          Jobname of CICS             
    Type        ===>                                   (JOB, STC, or TSO)          
    Jobclass    ===>                                   Job class of issuer         
    Acct Info   ===>                                   Job accounting information  
    RACF User   ===>                                   RACF Userid                 
    RACF Group  ===>                                   RACF Group name             
    MLTDQ       ===> All                               All or blank                
                                                                                  
                                                                                  
    Press ENTER to continue, END return to Detail Control, CANCEL to cancel changes

    Because this panel specifies MLTDQ ===> ALL, the Rule will process all lines of the CICS multiline message as a single entity.

    Note

    For a CICS multiline message, the Rule compares the selection criteria values to the content of only the first (major) line of the MLTDQ.

  2. Press Enter to continue to the Variable Dependencies - CICS panel as shown in the following figure.A Rule can fire based on selected content within the MLTDQ (such as the message ID of the major line, user ID, resource name, SAF codes, and so on). In this example, LINE1_WORD10 tells the Rule Processor to check the value of the tenth word in line 1 of the message; the processor determines whether that word resolves to CI10 (as specified under Variable-Value). Also, LINE2_WORD7:4:8 tells the processor to check the seventh word in line 2, starting in position 4 with a length of 8, to see if that value resolves to 0000008. If both variables (based on the panel's AND entry) resolve, the Rule will fire.

    BMC Software  ------------ Variable Dependencies - CICS ---------- BMC AMI OpsA
    COMMAND ===>                                                 TGT  --- JBAO     
                                                                                  
           Rule-set === AAORUL00             Rule-id  === DFHXS111                 
                                                                               OR/
     Variable-name                    Op  Variable-Value                      AND  
                                                                                  
     LINE1_WORD10____________________ EQ  CI10_______________________________  AND
     LINE2_WORD7:4:8_________________ EQ  00000008___________________________  ___
     ________________________________ __  ___________________________________  ___
     ________________________________ __  ___________________________________  ___
     ________________________________ __  ___________________________________  ___
     ________________________________ __  ___________________________________  ___
     ________________________________ __  ___________________________________  ___
     ________________________________ __  ___________________________________  ___
     ________________________________ __  ___________________________________  ___
     ________________________________ __  ___________________________________  ___
     ________________________________ __  ___________________________________  ___
     ________________________________ __  ___________________________________  ___
     ________________________________ __  ___________________________________      
                                                                                  
    --> ATTENTION: Use ASV command to add ASV criteria to the rule <--
  3. Press Enter until the Alert Action(s) I - CICS panel is displayed as shown in the following figure.The entries in the following figure specify that when the Rule fires, a BMC AMI Ops Automation ALERT is created, containing the information from the CICS MLTDQ message DFHXS1111.

    BMC Software -------------- Alert Action(s) I - CICS ------------- BMC AMI OpsA
    COMMAND ===>                                                 TGT  --- JB73     
           Rule-set === AAORUL00             Rule-id  === DFHXS111                 
    Function ===> ADD                               (ADD, DELETE, DELETEQ)         
    Key      ===> &IMFRLID.&SYSTIME.&XS1111INDEX                                   
    Text     ===> &IMFORGN: SECURITY FAILURE,/N USER=&WORD10, /N TRANSACTION=&WORD
    5, /N RESOURCE=&WORD13, /N SAF CODES=&LINE2_WORD3:4:8, /N ESM CODES=&LINE2_WOR
    D7:4:8                                                                         
    Queues   ===> CICSSEC                           Alert Queue Name(s)            
    Priority ===> MINOR                             (CRIT,MAJ,MIN,WARN,INFO,CLEAR)
    Color    ===>                                   RED,PINK,YEL,DKBL,LTBL,GRE,WHI
    PCMD     ===>                                                                  
                                                                                  
    System   ===>                                   Return to target after PCMD    
    * EXEC   ===>                                   Follow-up EXEC                 
    Help     ===>                                   Associated HELP Panel          
    Targets  ===>                                   Target System                  
    Udata    ===>                                   User Data                      
    Origin   ===>                                   Origin                         
    User     ===>                                   Userid                         
    Alarm    ===>                                   Sound Alarm (YES/NO)           
    Publish  ===>                                   Alert Publishing Mode          
    * Enter a question mark(?) and blank for more options.
  4. Press Enter to continue through the remaining panels and save the Rule.


 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*