Audit reporting

You can enable TOM to send detailed MAMAU30xxl messages to the Logger when an administrator changes an item (such as an object or a set) in the Registry.  You can then extract these detailed messages and report the changes in the attribute values (the before and after values of the attributes), when it was changed, and who made the changes.

To enable these messages, specify AUDIT=Y in BBPARM member MAMINIxx.  An example of these messages is shown below:


Related topics

Administrative-tasks-for-TOM

Producing-audit-reports

MAMAU3010I BAOMXD1 ---- Start of changes ---- Object stm1 / aa-audit-dev / BMCPLEX1
MAMAU3020I BAOMXD1 Altered attribute: object.SHORTNAME                              
MAMAU3030I BAOMXD1 ..old:                                                           
MAMAU3040I BAOMXD1 ..new: STM1NAME                                                  
MAMAU3020I BAOMXD1 Altered attribute: object.UPDATED.TOD                            
MAMAU3030I BAOMXD1 ..old: D97F8F08D7D55012                                          
MAMAU3040I BAOMXD1 ..new: D97FAE8E7A76EE11                                          
MAMAU3050I BAOMXD1 ----- End of changes ----- Object stm1 / aa-audit-dev / BMCPLEX1

In this example:

  • An object named stm1 in Definition Base aa-audit-dev in sysplex BMCPLEX1 was changed by user BAOMXD1.  
  • The messages indicate that the SHORTNAME attribute in this record was changed from blanks to STM1NAME. 
  • The messages also show the internal STCK TOD times of the last change and of this change.

TOM enables you to audit the deployment of objects or Definition Bases, so that you can see when these actions take place. The AUDIT=Y parameter does not control the auditing of deployment actions; the audit messages are always issued by TOM.

When you deploy a Definition Base, the following messages are issued:

MAMTM3600I Building DEPLOY package for Object Definition Base <aa-audit-dev>                     
OD2300I User BAOMXD1 requested DEPLOY of DATABASE aa-audit-dev DB(aa-audit-dev)   
            Sysplex(BMCPLEX1)
MAMTM3601I Unpacking DEPLOY package for Object Definition Base <aa-audit-dev-copy>               
MAMTM3610I Object <stm1> added to Definition Base <aa-audit-dev-copy>                            
MAMTM3610I Object <stm2> added to Definition Base <aa-audit-dev-copy>                            
MAMTM3610I Set <set 1> added to Definition Base <aa-audit-dev-copy>

When an item in a Definition Base is deployed, the following messages are issued: 

OD2300I User BAOMXD1 requested DEPLOY of OBJECT stm1 DB(aa-audit-dev)
Sysplex(BMCPLEX1)      
MAMTM3610I Object <stm1> added to Definition Base <aa-audit-dev-xx>                          
OD2300I User TSGSTC requested ADDITION of OBJECT stm1 DB(aa-audit-dev-xx)
Sysplex(BMCPLEX1)  
OD2751I User TSGSTC added object stm1 DB(aa-audit-dev-xx) Sysplex(BMCPLEX1)

In these messages, you can view the user who deployed the item in message OD2300I. You can also specify the type of the deployment and its location in the MAMTM36xxI messages.

If the Logger is active, it can record these messages. You can extract them and create an audit report by using the audit utilities described in TOM utilities.


 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*